zuul/zuul-jobs
Code Issues Proposed changes

revoke-sudo: delete cloud-config sudoers file

Browse Source 
Change-Id: Icc3d1b4122d5328dd900d8ce581755f53030ed21
This commit is contained in:
Albin Vass 2020-11-10 20:04:08 +01:00
parent 7325aca987
commit 86b6edb421
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
roles/revoke-sudo/tasks/main.yaml
View File

@ -3,11 +3,13 @@
failed_when: false failed_when: false
register: zuul_is_sudoer register: zuul_is_sudoer
# We do this in one command and not in a loop
# to make sure we don't revoke sudo in the first file
# and then error because we lost sudo access when we
# try to delete the next file.
- name: Remove sudo access for zuul user. - name: Remove sudo access for zuul user.
become: yes become: yes
file: command: rm -rf /etc/sudoers.d/zuul /etc/sudoers.d/90-cloud-init-users # noqa 302
path: /etc/sudoers.d/zuul
state: absent
when: zuul_is_sudoer.rc == 0 when: zuul_is_sudoer.rc == 0
- name: Prove that general sudo access is actually revoked. - name: Prove that general sudo access is actually revoked.