X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fsudo%2Ffiles%2Fsudoers;h=8c2265194be5c190178502d4e402420a3839bf50;hb=1880a0ed4cd8dca05733a088b65cf98b0591527e;hp=2bac30c898777275fc4d23c695b990cd6d8d10e3;hpb=f5cbfdaaaa4db53c03cdb41a6b558d96f988a139;p=mirror%2Fdsa-puppet.git

diff --git a/modules/sudo/files/sudoers b/modules/sudo/files/sudoers
index 2bac30c89..8c2265194 100644
--- a/modules/sudo/files/sudoers
+++ b/modules/sudo/files/sudoers
@@ -107,6 +107,7 @@ nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %ddtp		ALL=(ddtp)	ALL
 %debadmin	ALL=(dak)	ALL
 %debadmin	ALL=(dak-code)	ALL
+%debadmin	ALL=(codesign)	ALL
 %debbugs	ALL=(debbugs)	ALL
 %debbugs	ALL=(debbugs-mirror)	ALL
 %debconfstatic	ALL=(debconfstatic)	ALL
@@ -135,7 +136,14 @@ nagios		storace=(debbackup)	NOPASSWD: /usr/lib/nagios/plugins/dsa-check-backuppg
 %gitdoadm	ALL=(gitdoadm)	ALL
 # the git user also exists on adayevskaya where it's a different service..
 %gitdoadm	godard=(git)		ALL
+%gitdoadm	godard=(salsa-registry)	ALL
+%gitdoadm	godard=(salsa-signup)	ALL
 %gitdoadm	godard=(salsa-webhook)	ALL
+%gitdoadm	godard=(salsa-pages)	ALL
+git		godard=(salsa-registry)	NOPASSWD: ALL
+git		godard=(salsa-signup)	NOPASSWD: ALL
+git		godard=(salsa-webhook)	NOPASSWD: ALL
+git		godard=(salsa-pages)	NOPASSWD: ALL
 %keyring	ALL=(keyring)	ALL
 %jenkins-adm	ALL=(jenkins-adm)	ALL
 %lintian	ALL=(lintian)	ALL
@@ -199,6 +207,7 @@ lucas		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component deb
 dsa		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component dsa.debian.org
 dak		FTPHOSTS=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component incoming.debian.org
 dak		FTPHOSTS=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org
+codesign	FTPHOSTS=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component metadata.ftp-master.debian.org
 %publicity	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component bits.debian.org
 %publicity	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component micronews.debian.org
 %mirroradm	melartin=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component mirror-master.debian.org
@@ -229,6 +238,7 @@ pabs		dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component time
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component debconf16.debconf.org
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component debconf17.debconf.org
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component debconf18.debconf.org
+%debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component debconf19.debconf.org
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component es.debconf.org
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component fr.debconf.org
 %debconfstatic	dillon=(staticsync)		NOPASSWD: /usr/local/bin/static-update-component miniconf10.debconf.org
@@ -284,6 +294,8 @@ nagiosadm	tchaikovsky=(root)		NOPASSWD: /usr/sbin/service icinga reload
 # jenkins
 %jenkins-adm	JENKINSHOSTS=(jenkins)	ALL
 %jenkins-adm	JENKINSHOSTS=(root)	/usr/sbin/service jenkins restart, /usr/sbin/service jenkins reload, /usr/sbin/service jenkins stop, /usr/sbin/service jenkins start
+# snapshot can reload apache to get the wsgi reloaded
+snapshot	lw07,sallinen=(root)	NOPASSWD: /usr/sbin/service apache2 reload
 
 %Debian,%guest,%d-i	PORTERBOXES=(root)	NOPASSWD: /usr/local/bin/dd-schroot-cmd