Resolves T795.
Allowing salt's users to run salt binaries.
Details
Details
alias salt sudo -u salt salt salt '*' state.apply
Diff Detail
Diff Detail
- Repository
- rOPS Nasqueron Operations
- Lint
No Lint Coverage - Unit
No Test Coverage - Branch
- T795
- Build Status
Buildable 467 Build 582: arc lint + arc unit
Event Timeline
Comment Actions
Commit weren't from a clean master, it removed the arc file.
To avoid such issues, here a custom Git command I wrote, allowing to get an updated master before to create the branch, so you can use git newbug T795 from everywhere and get a clean ready for Gerrit or Phabricator branch.
/usr/local/bin/git-newbug
#!/bin/sh if [ $# -eq 0 ] then echo "Usage: `basename $0` <name of the branch to create>" exit 1 fi BRANCH=$1 REPO=`git rev-parse --show-toplevel` if [ $? -ne 0 ] then exit $? fi; REPO=`basename $REPO` git checkout master git fetch --all git pull git pull origin master git checkout -b $BRANCH
| roles/saltmaster/sudo/files/sudoers | ||
|---|---|---|
| 2 | Sorry, I gave this line from Dwellers suoders file as an example of syntax for aliases. What we want to do here is to allow users to run salt-* commands: 18:19:05 < Dereckson> http://devcentral.nasqueron.org/T795 salt-unity (+salt) | |
| 4 | How do we distinguish between a group, and an user for the first field? We want to run as salt, not as root. | |
Comment Actions
- Allow wheel group's member to use salt function
- Allow wheel group's users to use the salt function as the salt user and not as root
- Allow this to the wheel group and not the wheel user
Comment Actions
- Allow wheel group's member to use salt function
- Allow wheel group's users to use the salt function as the salt user and not as root
- Allow this to the wheel group and not the wheel user
- Salt is also an available command