Allow all users to read RabbitMQ credential to get notifications
Needs ReviewPublic
Actions

Authored by dereckson on Wed, Oct 16, 20:47.

Tags

None

Referenced Files

	F3685852: D3524.diff
	Wed, Oct 23, 02:21

	F3684606: D3524.id.diff
	Tue, Oct 22, 19:02

	F3684209: D3524.id9060.diff
	Tue, Oct 22, 17:03

	Unknown Object (File)
	Mon, Oct 21, 17:22

	Unknown Object (File)
	Mon, Oct 21, 17:19

	Unknown Object (File)
	Thu, Oct 17, 02:59

	Unknown Object (File)
	Thu, Oct 17, 02:58

	Unknown Object (File)
	Thu, Oct 17, 01:44

View All 11 Files

Subscribers

None

Details

Reviewers

aceppaluni

Summary

The RabbitMQ credential for notifications is intended to be shared
among devserver users, as such, it makes sense to make the secret
file readable for the nasquenautes group.

This credential allows only to READ from a queue on the dev vhost,
and doesn't give access to anything else than notifications.

Test Plan

Deployed on WindRiver

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

notifications-nasquenautes

Build Status

Buildable 5599
Build 5881: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Wed, Oct 16, 20:47

dereckson created this revision.

Harbormaster completed remote builds in B5599: Diff 9060.Wed, Oct 16, 20:47

dereckson added inline comments.Wed, Oct 16, 20:47

roles/devserver/userland-software/notifications.sls
33	This is always deployed to devservers, as this is a part of the devserver role.

Revision Contents
Changeset List

Path

Size

roles/

devserver/

userland-software/

notifications.sls

4 lines

Diff 9060

View Options

roles/devserver/userland-software/notifications.sls

Allow all users to read RabbitMQ credential to get notificationsNeeds ReviewPublicActions