opendev/system-config
Code Issues Proposed changes

Revoke sudo from almost all jobs

Browse Source 
Everything except jobs that are designed to run on devstack-precise
or tripleo-precise.  Even the jobs on the static slaves, just to be
more consistent and future-proof (even though it's not strictly
necessary).

Change-Id: I220e4f8346b5db1394536b334bcb7c3a7dd4dedb
This commit is contained in:
James E. Blair 2014-03-21 12:00:06 -07:00
parent 7fb0ac4d17
commit 17bbf537fd
18 changed files with 45 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/openstack_project/files/jenkins_job_builder/config/api-jobs.yaml
View File

@ -8,6 +8,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- tox: - tox:
envlist: '{envlist}' envlist: '{envlist}'
@ -27,6 +28,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- tox: - tox:
envlist: 'publishdocs-api' envlist: 'publishdocs-api'
@ -50,6 +52,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
publishers: publishers:
@ -67,6 +70,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: /usr/local/jenkins/slave_scripts/run-xmllint.sh openstack-compute-api-2/src/os-compute-2.wadl - shell: /usr/local/jenkins/slave_scripts/run-xmllint.sh openstack-compute-api-2/src/os-compute-2.wadl

1
modules/openstack_project/files/jenkins_job_builder/config/elastic-recheck.yaml
View File

@ -3,6 +3,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- docs: - docs:
github-org: '{github-org}' github-org: '{github-org}'

6
modules/openstack_project/files/jenkins_job_builder/config/gerrit.yaml
View File

@ -10,6 +10,7 @@
- timestamps - timestamps
prebuilders: prebuilders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- gerrit-preclean - gerrit-preclean
@ -43,6 +44,7 @@
- timestamps - timestamps
prebuilders: prebuilders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- gerrit-preclean - gerrit-preclean
@ -71,6 +73,7 @@
- timestamps - timestamps
prebuilders: prebuilders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- gerrit-preclean - gerrit-preclean
@ -102,6 +105,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
mkdir -p gerrit mkdir -p gerrit
@ -141,6 +145,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
mkdir -p gerrit mkdir -p gerrit
@ -176,6 +181,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
mkdir -p gerrit mkdir -p gerrit

2
modules/openstack_project/files/jenkins_job_builder/config/gitdm.yaml
View File

@ -4,9 +4,9 @@
node: '{node}' node: '{node}'
builders: builders:
- revoke-sudo
- link-logs - link-logs
- net-info - net-info
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe

2
modules/openstack_project/files/jenkins_job_builder/config/horizon.yaml
View File

@ -3,6 +3,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- selenium: - selenium:
github-org: openstack github-org: openstack
@ -22,6 +23,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: '/usr/local/jenkins/slave_scripts/run-unittests.sh 27dj14 openstack horizon' - shell: '/usr/local/jenkins/slave_scripts/run-unittests.sh 27dj14 openstack horizon'
- assert-no-extra-files - assert-no-extra-files

2
modules/openstack_project/files/jenkins_job_builder/config/infra-publications.yaml
View File

@ -4,6 +4,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -x #!/bin/bash -x
@ -30,6 +31,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe

1
modules/openstack_project/files/jenkins_job_builder/config/infra.yaml
View File

@ -16,6 +16,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- tox: - tox:
envlist: 'irc' envlist: 'irc'

2
modules/openstack_project/files/jenkins_job_builder/config/job-builder.yaml
View File

@ -4,6 +4,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- docs: - docs:
github-org: openstack-infra github-org: openstack-infra
@ -23,6 +24,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
source /usr/local/jenkins/slave_scripts/select-mirror.sh openstack-infra jenkins-job-builder source /usr/local/jenkins/slave_scripts/select-mirror.sh openstack-infra jenkins-job-builder

1
modules/openstack_project/files/jenkins_job_builder/config/manuals-jobs.yaml
View File

@ -181,6 +181,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- tox: - tox:
envlist: '{envlist}' envlist: '{envlist}'

5
modules/openstack_project/files/jenkins_job_builder/config/manuals.yaml
View File

@ -4,6 +4,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: "./tools/validate.py" - shell: "./tools/validate.py"
@ -16,6 +17,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
publishers: publishers:
@ -44,6 +46,7 @@
properties-file: gerrit-doc.properties properties-file: gerrit-doc.properties
prebuilders: prebuilders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
asciidoc -b docbook -d book -o - doc/high-availability-guide/ha-guide.txt | xsltproc -o - /usr/share/xml/docbook/stylesheet/docbook5/db4-upgrade.xsl - | xmllint --format - | sed -e 's,<book,<book xml:id="bk-ha-guide",' | sed -e 's,<info,<?rax pdf.url="../openstack-ha-guide-trunk.pdf"?><info,' > doc/high-availability-guide/bk-ha-guide.xml asciidoc -b docbook -d book -o - doc/high-availability-guide/ha-guide.txt | xsltproc -o - /usr/share/xml/docbook/stylesheet/docbook5/db4-upgrade.xsl - | xmllint --format - | sed -e 's,<book,<book xml:id="bk-ha-guide",' | sed -e 's,<info,<?rax pdf.url="../openstack-ha-guide-trunk.pdf"?><info,' > doc/high-availability-guide/bk-ha-guide.xml
@ -81,6 +84,7 @@
properties-file: gerrit-doc.properties properties-file: gerrit-doc.properties
prebuilders: prebuilders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
maven: maven:
@ -116,6 +120,7 @@
properties-file: gerrit-doc.properties properties-file: gerrit-doc.properties
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe

6
modules/openstack_project/files/jenkins_job_builder/config/mirror.yaml
View File

@ -9,6 +9,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- link-logs - link-logs
- net-info - net-info
- update-pypi-mirror - update-pypi-mirror
@ -28,6 +29,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- link-logs - link-logs
- net-info - net-info
- update-pypi-mirror - update-pypi-mirror
@ -47,6 +49,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- link-logs - link-logs
- net-info - net-info
- update-pypi-mirror - update-pypi-mirror
@ -66,6 +69,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- link-logs - link-logs
- net-info - net-info
- update-pypi-mirror - update-pypi-mirror
@ -85,6 +89,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- link-logs - link-logs
- net-info - net-info
- update-pypi-mirror - update-pypi-mirror
@ -104,6 +109,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- link-logs - link-logs
- net-info - net-info
- update-pypi-mirror - update-pypi-mirror

1
modules/openstack_project/files/jenkins_job_builder/config/openstack-planet.yaml
View File

@ -4,6 +4,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
python test.py python test.py

1
modules/openstack_project/files/jenkins_job_builder/config/openstack-qa.yaml
View File

@ -5,6 +5,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
export HUDSON_PUBLISH_DOCS=1 export HUDSON_PUBLISH_DOCS=1

2
modules/openstack_project/files/jenkins_job_builder/config/openstackid.yaml
View File

@ -3,6 +3,7 @@
node: 'bare-precise' node: 'bare-precise'
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
@ -23,6 +24,7 @@
node: '{node}' node: '{node}'
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe

1
modules/openstack_project/files/jenkins_job_builder/config/requirements.yaml
View File

@ -37,6 +37,7 @@
node: proposal node: proposal
builders: builders:
- revoke-sudo
- link-logs - link-logs
- net-info - net-info
- gerrit-git-prep - gerrit-git-prep

1
modules/openstack_project/files/jenkins_job_builder/config/storyboard.yaml
View File

@ -4,6 +4,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- docs: - docs:
github-org: openstack-infra github-org: openstack-infra

5
modules/openstack_project/files/jenkins_job_builder/config/translation-jobs.yaml
View File

@ -2,6 +2,7 @@
name: '{name}-upstream-translation-update' name: '{name}-upstream-translation-update'
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
@ -16,6 +17,7 @@
name: '{name}-propose-translation-update' name: '{name}-propose-translation-update'
builders: builders:
- revoke-sudo
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
/usr/local/jenkins/slave_scripts/propose_translation_update.sh {github-org} {name} /usr/local/jenkins/slave_scripts/propose_translation_update.sh {github-org} {name}
@ -35,6 +37,7 @@
name: 'horizon-upstream-translation-update' name: 'horizon-upstream-translation-update'
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
@ -49,6 +52,7 @@
name: '{name}-manuals-upstream-translation-update' name: '{name}-manuals-upstream-translation-update'
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
@ -63,6 +67,7 @@
name: '{name}-manuals-propose-translation-update' name: '{name}-manuals-propose-translation-update'
builders: builders:
- revoke-sudo
- shell: | - shell: |
#!/bin/bash -xe #!/bin/bash -xe
/usr/local/jenkins/slave_scripts/propose_translation_update_manuals.sh {name} /usr/local/jenkins/slave_scripts/propose_translation_update_manuals.sh {name}

3
modules/openstack_project/files/jenkins_job_builder/config/zuul.yaml
View File

@ -4,6 +4,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- docs: - docs:
github-org: openstack-infra github-org: openstack-infra
@ -23,6 +24,7 @@
node: bare-precise node: bare-precise
builders: builders:
- revoke-sudo
- gerrit-git-prep - gerrit-git-prep
- coverage: - coverage:
github-org: openstack-infra github-org: openstack-infra
@ -42,6 +44,7 @@
- timestamps - timestamps
builders: builders:
- revoke-sudo
- python27: - python27:
github-org: 'openstack-infra' github-org: 'openstack-infra'
project: 'zuul' project: 'zuul'