opendev/system-config
Code Issues Proposed changes

Revoke sudo from most jobs

Browse Source 
Revoke sudo from all jobs that do or could run on bare-precise nodes.
Do not revoke it from devstack-precise or special nodes.

Change-Id: Icaf0bb5d15b76f985d0d8c0ec4afa6a34568570a
This commit is contained in:
James E. Blair 2014-02-11 14:15:13 -08:00
parent 6e5ef766c5
commit 09d120485a
15 changed files with 46 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/openstack_project/files/jenkins_job_builder/config/chef-jobs.yaml
View File

@ -3,6 +3,7 @@
node: '{node}'
builders:
- revoke-sudo
- gerrit-git-prep
- chef-bundler-prep
- chef-berkshelf-prep
@ -16,6 +17,7 @@
node: '{node}'
builders:
- revoke-sudo
- gerrit-git-prep
- chef-bundler-prep
- chef-cookbook-foodcritic
@ -28,6 +30,7 @@
node: '{node}'
builders:
- revoke-sudo
- gerrit-git-prep
- chef-bundler-prep
- chef-cookbook-rubocop
@ -40,6 +43,7 @@
node: bare-precise
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe

1
modules/openstack_project/files/jenkins_job_builder/config/gitdm.yaml
View File

@ -6,6 +6,7 @@
builders:
- link-logs
- net-info
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe

2
modules/openstack_project/files/jenkins_job_builder/config/groups.yaml
View File

@ -3,6 +3,7 @@
node: 'bare-precise'
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe
@ -27,6 +28,7 @@
node: '{node}'
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe

1
modules/openstack_project/files/jenkins_job_builder/config/hacking.yaml
View File

@ -3,6 +3,7 @@
node: bare-precise
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe

1
modules/openstack_project/files/jenkins_job_builder/config/hooks.yaml
View File

@ -3,4 +3,5 @@
node: bare-precise
builders:
- revoke-sudo
- shell: 'curl -X POST https://readthedocs.org/build/{name} >/dev/null'

2
modules/openstack_project/files/jenkins_job_builder/config/javascript.yaml
View File

@ -8,6 +8,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe
@ -44,6 +45,7 @@
name: '{name}-js-release-{branch-designator}'
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe

3
modules/openstack_project/files/jenkins_job_builder/config/jenkins-plugin-jobs.yaml
View File

@ -12,6 +12,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe
@ -39,6 +40,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe
@ -66,6 +68,7 @@
node: pypi
builders:
- revoke-sudo
- shell: |
#!/bin/bash -xe
TAG=`echo $ZUUL_REF | sed 's/^refs.tags.//'`

5
modules/openstack_project/files/jenkins_job_builder/config/manuals-jobs.yaml
View File

@ -4,6 +4,7 @@
node: bare-precise
prebuilders:
- revoke-sudo
- gerrit-git-prep
properties:
@ -45,6 +46,7 @@
properties-file: gerrit-doc.properties
prebuilders:
- revoke-sudo
- gerrit-git-prep
maven:
@ -80,6 +82,7 @@
properties-file: gerrit-doc.properties
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
source /usr/local/jenkins/slave_scripts/select-mirror.sh openstack openstack-manuals
@ -99,6 +102,7 @@
node: bare-precise
prebuilders:
- revoke-sudo
- gerrit-git-prep
properties:
@ -134,6 +138,7 @@
node: bare-precise
prebuilders:
- revoke-sudo
- gerrit-git-prep
properties:

3
modules/openstack_project/files/jenkins_job_builder/config/maven-plugin-jobs.yaml
View File

@ -12,6 +12,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe
@ -39,6 +40,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe
@ -64,6 +66,7 @@
node: pypi
builders:
- revoke-sudo
- shell: |
#!/bin/bash -xe
TAG=`echo $ZUUL_REF | sed 's/^refs.tags.//'`

3
modules/openstack_project/files/jenkins_job_builder/config/misc.yaml
View File

@ -21,6 +21,7 @@
name: 'gate-{name}-run-tests'
builders:
- revoke-sudo
- gerrit-git-prep
- run-tests:
github-org: '{github-org}'
@ -35,6 +36,7 @@
name: 'gate-{name}-bash8'
builders:
- revoke-sudo
- gerrit-git-prep
- bash8:
github-org: '{github-org}'
@ -49,6 +51,7 @@
name: 'gate-{name}-unittests-{env}'
builders:
- revoke-sudo
- gerrit-git-prep
- shell: '/usr/local/jenkins/slave_scripts/run-unittests.sh {env} {github-org} {name}'
- assert-no-extra-files

2
modules/openstack_project/files/jenkins_job_builder/config/openstack-publish-jobs.yaml
View File

@ -3,6 +3,7 @@
node: bare-precise
builders:
- revoke-sudo
- gerrit-git-prep
- docs:
github-org: '{github-org}'
@ -22,6 +23,7 @@
name: '{name}-merge-release-tags'
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe

3
modules/openstack_project/files/jenkins_job_builder/config/puppet-module-jobs.yaml
View File

@ -3,6 +3,7 @@
node: '{node}'
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
export PUPPET_GEM_VERSION='~> {puppet_version}.0'
@ -19,6 +20,7 @@
node: '{node}'
builders:
- revoke-sudo
- gerrit-git-prep
- puppet-lint
@ -30,6 +32,7 @@
node: '{node}'
builders:
- revoke-sudo
- gerrit-git-prep
- puppet-syntax

1
modules/openstack_project/files/jenkins_job_builder/config/pypi-jobs.yaml
View File

@ -3,6 +3,7 @@
node: pypi
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
/usr/local/jenkins/slave_scripts/pypi-upload.sh {name} {tarball-site}

3
modules/openstack_project/files/jenkins_job_builder/config/python-bitrot-jobs.yaml
View File

@ -8,6 +8,7 @@
- timestamps
builders:
- revoke-sudo
- python26:
github-org: '{github-org}'
project: '{name}'
@ -36,6 +37,7 @@
- timestamps
builders:
- revoke-sudo
- python27:
github-org: '{github-org}'
project: '{name}'
@ -64,6 +66,7 @@
- timestamps
builders:
- revoke-sudo
- docs:
github-org: '{github-org}'
project: '{name}'

12
modules/openstack_project/files/jenkins_job_builder/config/python-jobs.yaml
View File

@ -8,6 +8,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- coverage:
github-org: '{github-org}'
@ -24,6 +25,7 @@
name: 'gate-{name}-pep8'
builders:
- revoke-sudo
- gerrit-git-prep
- pep8:
github-org: '{github-org}'
@ -39,6 +41,7 @@
name: 'gate-{name}-pylint'
builders:
- revoke-sudo
- gerrit-git-prep
- pylint:
github-org: '{github-org}'
@ -60,6 +63,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- python26:
github-org: '{github-org}'
@ -82,6 +86,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- python27:
github-org: '{github-org}'
@ -104,6 +109,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- python33:
github-org: '{github-org}'
@ -126,6 +132,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- pypy:
github-org: '{github-org}'
@ -142,6 +149,7 @@
name: 'gate-{name}-docs'
builders:
- revoke-sudo
- gerrit-git-prep
- docs:
github-org: '{github-org}'
@ -163,6 +171,7 @@
- timestamps
builders:
- revoke-sudo
- gerrit-git-prep
- tox:
envlist: '{envlist}'
@ -181,6 +190,7 @@
node: bare-precise
builders:
- revoke-sudo
- gerrit-git-prep
- tarball:
github-org: '{github-org}'
@ -198,6 +208,7 @@
node: bare-precise
builders:
- revoke-sudo
- gerrit-git-prep
- tarball:
github-org: '{github-org}'
@ -220,6 +231,7 @@
node: bare-precise
builders:
- revoke-sudo
- gerrit-git-prep
- shell: |
#!/bin/bash -xe