The git user's sudo entries should be NOPASSWD (RT#7316)

[mirror/dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index ecb1f32..cd39d49 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -36,7 +36,7 @@ Host_Alias    MEGARAIDHOSTS   = sibelius
 Host_Alias     DELLHOSTS       = schumann, wieck
 Host_Alias     LISTHOSTS       = bendel
 Host_Alias     BUILDD_MASTER   = wuiet
-Host_Alias     PORTERBOXES     = abel, amdahl, barriere, eller, harris, minkus, partch, plummer, zelenka
+Host_Alias     PORTERBOXES     = abel, amdahl, barriere, eller, harris, minkus, plummer, zelenka
 Host_Alias     PIUPARTS_SLAVE_HOSTS    = piu-slave-bm-a, piu-slave-ubc-01
 Host_Alias     MQ_HOSTS        = rainier, rapoport
 Host_Alias     JENKINSHOSTS    = jerea
@@ -93,6 +93,7 @@ nagios                backuphost=(debbackup)  NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backu
 nagios         storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 
 # groups and their role accounts
+%alioth-archive        ALL=(alioth-archive)    ALL
 %appstream     ALL=(appstream) ALL
 %auditor       ALL=(accounting)        ALL
 %backports     ALL=(backports) ALL
@@ -134,7 +135,14 @@ nagios             storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %gitdoadm      ALL=(gitdoadm)  ALL
 # the git user also exists on adayevskaya where it's a different service..
 %gitdoadm      godard=(git)            ALL
+%gitdoadm      godard=(salsa-registry) ALL
+%gitdoadm      godard=(salsa-signup)   ALL
 %gitdoadm      godard=(salsa-webhook)  ALL
+%gitdoadm      godard=(salsa-pages)    ALL
+git            godard=(salsa-registry) NOPASSWD: ALL
+git            godard=(salsa-signup)   NOPASSWD: ALL
+git            godard=(salsa-webhook)  NOPASSWD: ALL
+git            godard=(salsa-pages)    NOPASSWD: ALL
 %keyring       ALL=(keyring)   ALL
 %jenkins-adm   ALL=(jenkins-adm)       ALL
 %lintian       ALL=(lintian)   ALL
@@ -173,6 +181,7 @@ nagios              storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %debsso                diabelli=(debsso)       ALL
 %debsso-web    diabelli=(debsso-web)   ALL
 %debconf-web   debussy=(debconf-web)   ALL
+%kanboard      kantuser=(kanboard)     ALL
 
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
 %ftptrainee    FTPHOSTS=(dak-unpriv)   NOPASSWD: /usr/bin/lintian
@@ -246,8 +255,8 @@ letsencrypt denis=(dnsadm)                  NOPASSWD: /srv/dns.debian.org/bin/update
 # mirror push
 dak            FTPHOSTS,SECHOSTS=(archvsync)   NOPASSWD:/home/archvsync/runmirrors, /home/archvsync/bin/runmirrors
 # archvsync triggers snapshot
-archvsync      sibelius=(snapshot)     NOPASSWD: /srv/snapshot.debian.org/bin/update-trigger
-archvsync      sibelius=(snapshot)     NOPASSWD: /srv/2ndsnapshot/bin/update-trigger
+archvsync      sibelius,sallinen=(snapshot)    NOPASSWD: /srv/snapshot.debian.org/bin/update-trigger
+archvsync      sibelius=(snapshot)             NOPASSWD: /srv/2ndsnapshot/bin/update-trigger
 # dak stuff
 %debian-release        FTPHOSTS=(dak)          /usr/local/bin/dak transitions --import *
 %ftpteam       FTPHOSTS=(dak)          /usr/local/bin/dak transitions --import *