sudo: add new-klecker to dell hosts list

[mirror/dsa-puppet.git] / modules / sudo / files / sudoers

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 8c22651..d829acd 100644 (file)
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -33,7 +33,7 @@ Host_Alias    FTPHOSTS        = fasolo
 Host_Alias     ZIVITHOSTS      = zelenka, zandonai
 Host_Alias     AACRAIDHOSTS    = pettersson
 Host_Alias     MEGARAIDHOSTS   = sibelius
-Host_Alias     DELLHOSTS       = schumann, wieck
+Host_Alias     DELLHOSTS       = schumann, wieck, manda-node03, manda-node04, schmelzer, smit, new-klecker
 Host_Alias     LISTHOSTS       = bendel
 Host_Alias     BUILDD_MASTER   = wuiet
 Host_Alias     PORTERBOXES     = abel, amdahl, barriere, eller, harris, minkus, plummer, zelenka
@@ -63,7 +63,9 @@ nagios                ALL=(ALL)       NOPASSWD: /usr/lib/nagios/plugins/dsa-check-filesystems ""
 nagios         ALL=(ALL)       NOPASSWD: /usr/lib/nagios/plugins/dsa-check-libs --ignore-younger=1h
 nagios         ALL=(ALL)       NOPASSWD: /usr/lib/nagios/plugins/dsa-check-stunnel-sanity ""
 nagios         ALL=(ALL)       NOPASSWD: /usr/lib/nagios/plugins/dsa-check-systemd-services ""
+nagios         ALL=(ALL)       NOPASSWD: /usr/lib/nagios/plugins/dsa-check-ucode-intel ""
 nagios         handel=(puppet) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem
+nagios         handel=(puppet) NOPASSWD: /usr/lib/nagios/plugins/dsa-check-cert-expire /srv/puppet.debian.org/ca/ca.crt
 # with smartarray controllers
 nagios         ALL=(ALL)       NOPASSWD: /sbin/hpasmcli ""
 nagios         ALL=(ALL)       NOPASSWD: /usr/bin/arrayprobe ""
@@ -88,6 +90,8 @@ nagios                ALL=(ALL)       NOPASSWD: /usr/sbin/hpacucli controller slot=[0129] show statu
 nagios         AACRAIDHOSTS=(ALL)      NOPASSWD: /usr/local/bin/arcconf GETCONFIG 1 LD, /usr/local/bin/arcconf GETCONFIG 1 AD
 nagios         MEGARAIDHOSTS=(ALL)     NOPASSWD: /usr/local/bin/megarc -AllAdpInfo -nolog, /usr/local/bin/megarc -dispCfg -a0 -nolog
 nagios         DELLHOSTS=(ALL)         NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage ""
+nagios         DELLHOSTS=(ALL)         NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0
+nagios         DELLHOSTS=(ALL)         NOPASSWD: /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0 -b bat_charge=0\:0
 # other nagios things
 nagios         backuphost=(debbackup)  NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 nagios         storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
@@ -102,6 +106,7 @@ nagios              storace=(debbackup)     NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %btslink       ALL=(btslink)   ALL
 %buildd                ALL=(buildd)    ALL
 %codesearch    ALL=(codesearch)        ALL
+%community     ALL=(community) ALL
 %d-i           ALL=(d-i)       ALL
 %dde           ALL=(dde)       ALL
 %ddtp          ALL=(ddtp)      ALL
@@ -145,6 +150,7 @@ git         godard=(salsa-signup)   NOPASSWD: ALL
 git            godard=(salsa-webhook)  NOPASSWD: ALL
 git            godard=(salsa-pages)    NOPASSWD: ALL
 %keyring       ALL=(keyring)   ALL
+%keyring       kaufmann=(root)         NOPASSWD: /usr/sbin/service bind9 reload
 %jenkins-adm   ALL=(jenkins-adm)       ALL
 %lintian       ALL=(lintian)   ALL
 %listweb       ALL=(listweb)   ALL
@@ -182,7 +188,6 @@ git         godard=(salsa-pages)    NOPASSWD: ALL
 %debsso                diabelli=(debsso)       ALL
 %debsso-web    diabelli=(debsso-web)   ALL
 %debconf-web   debussy=(debconf-web)   ALL
-%kanboard      kantuser=(kanboard)     ALL
 
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
 %ftptrainee    FTPHOSTS=(dak-unpriv)   NOPASSWD: /usr/bin/lintian
@@ -242,10 +247,12 @@ pabs              dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component time
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component es.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component fr.debconf.org
 %debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component miniconf10.debconf.org
+%debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component wiki.debconf.org
+%debconfstatic dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component www.debconf.org
 mini-dak       porta=(staticsync)              NOPASSWD: /usr/local/bin/static-update-component incoming.ports.debian.org
-%wbadm         wuiet=(staticsync)              NOPASSWD: /usr/local/bin/static-update-component apt.buildd.debian.org
 %manpages      manziarly=(staticsync)          NOPASSWD: /usr/local/bin/static-update-component manpages.debian.org
 %dpl           dillon=(staticsync)             NOPASSWD: /usr/local/bin/static-update-component dpl.debian.org
+%keyring       kaufmann=(staticsync)           NOPASSWD: /usr/local/bin/static-update-component openpgpkey.debian.org
 
 # The piuparts slave needs to handle chroots
 piupartss      PIUPARTS_SLAVE_HOSTS=(ALL)              NOPASSWD: ALL
@@ -255,6 +262,8 @@ letsencrypt denis=(dnsadm)                  NOPASSWD: /srv/dns.debian.org/bin/update
 # wbadm can update all buildd* users' keys on buildd.d.o
 %wbadm         BUILDD_MASTER=(wb-buildd)       ALL
 %wbadm         BUILDD_MASTER=(root)            /usr/local/bin/update-buildd-sshkeys
+# wbadm can impersonate the wbadm-web user
+%wbadm         BUILDD_MASTER=(wbadm-web)       ALL
 # mirror push
 dak            FTPHOSTS,SECHOSTS=(archvsync)   NOPASSWD:/home/archvsync/runmirrors, /home/archvsync/bin/runmirrors
 # archvsync triggers snapshot