X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;ds=sidebyside;f=modules%2Fsudo%2Ffiles%2Fsudoers;h=c64bbd8a519f0a246b717ee7f447d8df50777881;hb=a8abd1a8f63b4f64d6bbb009c8d6d9a48018ca4d;hp=d8b63d3729205757fcaeb6b07fec92399ab4f0bc;hpb=59f99598955598ce6ced03253bc556b646117de4;p=mirror%2Fdsa-puppet.git

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index d8b63d372..c64bbd8a5 100644
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -24,7 +24,7 @@ Defaults        secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/
 # Host alias specification
 Host_Alias	VOIPHOSTS	= vogler
 Host_Alias	WEBHOSTS	= wolkenstein
-Host_Alias	SECHOSTS	= chopin
+Host_Alias	SECHOSTS	= chopin, seger
 Host_Alias	FTPHOSTS	= franck
 Host_Alias	ZIVITHOSTS	= zelenka, zandonai
 Host_Alias	AACRAIDHOSTS	= beethoven, pettersson
@@ -33,7 +33,7 @@ Host_Alias	MEGACTLHOSTS	= nielsen
 Host_Alias	LISTHOSTS	= bendel
 Host_Alias	BUILDD_MASTER	= wuiet
 Host_Alias	BUILDD_PORTS_MASTER	= portman
-Host_Alias	PORTERBOXES	= abel, asachi, barriere, eder, falla, fischer, gabrielli, harris, merulo, minkus, partch, plummer, pizzetti, smetana, zelenka
+Host_Alias	PORTERBOXES	= abel, asachi, barriere, eder, falla, fischer, harris, merulo, minkus, partch, plummer, pizzetti, smetana, zelenka
 Host_Alias	PIUPARTS_SLAVE_HOSTS	= piu-slave-bm-a
 Host_Alias	MQ_HOSTS	= rainier, rapoport
 Host_Alias	NOVAHOSTS	= oyens, bm-bl9, bm-bl10, bm-bl11, bm-bl12
@@ -81,6 +81,7 @@ nagios		AACRAIDHOSTS=(ALL)	NOPASSWD: /usr/local/bin/arcconf GETCONFIG 1 LD, /usr
 nagios		MEGARAIDHOSTS=(ALL)	NOPASSWD: /usr/local/bin/megarc -AllAdpInfo -nolog, /usr/local/bin/megarc -dispCfg -a0 -nolog
 nagios		MEGACTLHOSTS=(ALL)	NOPASSWD: /usr/sbin/megactl -Hv
 # other nagios things
+nagios		backuphost=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg ""
 
 # groups and their role accounts
@@ -108,9 +109,11 @@ nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %dgit		ALL=(dgit-unpriv)	ALL
 %emdebian	ALL=(emdebian)	ALL
 %forums		ALL=(forums)	ALL
+%gitdoadm	ALL=(gitdoadm)	ALL
 %httpredir	ALL=(httpredir)	ALL
 %httpredir	ALL=(httpredir-app)	ALL
 %keyring	ALL=(keyring)	ALL
+%jenkins-adm	ALL=(jenkins-adm)	ALL
 %lintian	ALL=(lintian)	ALL
 %listweb	ALL=(listweb)	ALL
 %list		LISTHOSTS=(list)	ALL
@@ -142,6 +145,7 @@ nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %gobby		gombert=(gobby)	ALL
 %dacshelper	diabelli=(www-data)	ALL
 %debsso		diabelli=(debsso)	ALL
+%debsso-web	diabelli=(debsso-web)	ALL
 
 # the dak user gets to run stuff as dak-unpriv (for things like lintian checks)
 %ftptrainee	FTPHOSTS=(dak-unpriv)	NOPASSWD: /usr/bin/lintian
@@ -167,7 +171,7 @@ lucas		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component deb
 dsa		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component dsa.debian.org
 dak		franck=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component incoming.debian.org
 dak		franck=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org
-%debbits	master=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
+%publicity	master=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
 %debdelta	donizetti=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component debdeltas.debian.net
 %webwml		master=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component network-test.debian.org
 planet		philp=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component planet.debian.org
@@ -178,6 +182,8 @@ debwww		wolkenstein=(staticsync)	NOPASSWD: /usr/local/bin/static-update-componen
 %ports		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component www.ports.debian.org
 %debvoip	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component rtc.debian.org
 %security	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component security-team.debian.org
+%publicity	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component timeline.debian.net
+pabs		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component timeline.debian.net
 %lintian	lindsay=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component lintian.debian.org
 
 # The piuparts slave needs to handle chroots
@@ -233,3 +239,11 @@ Defaults:neutron !requiretty
 nova		NOVAHOSTS=(root)	NOPASSWD: /usr/bin/nova-rootwrap *
 neutron		NOVAHOSTS=(root)	NOPASSWD: /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *
 cinder		NOVAHOSTS=(root)	NOPASSWD: /usr/bin/cinder-rootwrap /etc/cinder/rootwrap.conf *
+%openstack	NOVAHOSTS=(keystone)	ALL
+%openstack	NOVAHOSTS=(memcache)	ALL
+%openstack	NOVAHOSTS=(ceilometer)	ALL
+%openstack	NOVAHOSTS=(cinder)	ALL
+%openstack	NOVAHOSTS=(glance)	ALL
+%openstack	NOVAHOSTS=(heat)	ALL
+%openstack	NOVAHOSTS=(neutron)	ALL
+%openstack	NOVAHOSTS=(nova)	ALL