Evangelos Foutras
b4d60ae2f6
Move highly sensitive secrets to new "super" vault
...
The idea bebind this is to be able to give vault access to new DevOps
members without giving away more important credentials like Hetzner's.
2022-05-07 17:45:19 +03:00
Kristian Klausen
98704c4893
root_ssh: Add additional SSH key for klausenbusk
...
He has too many smartcards!
2021-06-02 18:45:01 +02:00
Sven-Hendrik Haase
06cd2e06a5
Give Kristian full DevOps access
2021-06-02 16:21:50 +02:00
Sven-Hendrik Haase
d2b110d250
Add dashboards.archlinux.org for public Grafana dashboards
...
Co-authored-by: Kristian Klausen <kristian@klausen.dk>
2021-05-13 23:28:01 +02:00
Kristian Klausen
f57830bd84
Give klausenbusk root access to runner{1,2}.al.org
2021-05-12 11:36:22 +02:00
Kristian Klausen
b696716b1d
Give klausenbusk root access to {bugs,monitoring}.al.org
...
klausenbusk is our new newest Junior DevOp and he needs some access:
* bugs.al.org for helping with migrating Flyspray tasks to GitLab
* monitoring.al.org for setting up centralized logging
2021-04-09 19:49:58 +00:00
Kristian Klausen
ea9f114de1
root_ssh: Support giving root access to only some hosts
2021-04-09 19:49:58 +00:00
Kristian Klausen
4112bdf9fd
Make ansible-lint happy
...
yaml: truthy value should be one of [false, true] (truthy)
yaml: wrong indentation: expected 4 but found 2 (indentation)
yaml: too few spaces before comment (comments)
yaml: missing starting space in comment (comments)
yaml: too many blank lines (1 > 0) (empty-lines)
yaml: too many spaces after colon (colons)
yaml: comment not indented like content (comments-indentation)
yaml: no new line character at the end of file (new-line-at-end-of-file)
load-failure: Failed to load or parse file
parser-error: couldn't resolve module/action 'hosts'. This often indicates a misspelling, missing collection, or incorrect module path.
2021-02-14 14:22:05 +01:00
Sven-Hendrik Haase
3f9a91b978
Give freswa full DevOps access
2020-11-15 15:22:15 +01:00
Jelle van der Waa
cea22895a4
Retire barthalion as devops
2020-08-30 00:58:21 +00:00
Jelle van der Waa
0e9b17b45e
Retire Bluewind as devops
2020-08-30 00:58:21 +00:00
Jelle van der Waa
b07bd06886
Retire fukawi as devops
...
https://lists.archlinux.org/pipermail/arch-devops/2020-June/000424.html
2020-07-08 18:20:54 +02:00
Jan Alexander Steffens (heftig)
9590a6484f
root_access: Replace my GPG key
2020-05-20 03:58:31 +02:00
Jelle van der Waa
919a6d4bba
Add url to fukawi2's pubkey
2020-05-02 01:06:30 +02:00
Sven-Hendrik Haase
16e101871b
Add note about having all keys lsigned before trying to reencrypt the vault
2019-10-10 23:52:43 +02:00
Sven-Hendrik Haase
28f8cf4ee8
Retire seblu and pierre
2019-10-10 23:48:50 +02:00
Giancarlo Razzolini
dfca3dad4e
root_access: Add anthraxx to the root access file.
2019-09-12 17:41:14 -03:00
Jelle van der Waa
8264b976d4
revoke seblu's root access
2019-08-14 09:50:11 +02:00
Jelle van der Waa
2422fa8093
group_vars: remove thomas from sudoers
2019-05-06 16:14:51 +02:00
Giancarlo Razzolini
f397362dd8
root_access: For some reason, after all this time, still did not had sudo access.
2019-04-14 18:11:27 -03:00
Florian Pritz
ed51f84f7d
Remove allan from wheel group
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 22:23:47 +01:00
Florian Pritz
2ec6c3adf6
Give Pierre full root access
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 15:32:18 +01:00
Florian Pritz
cb46185a7f
Document what to run when root_access variables are changed
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 15:32:18 +01:00
Florian Pritz
6d4c3dee5f
root_access: Sort lists
...
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 15:12:37 +01:00
Florian Pritz
8b8abd3d83
Rename group_vars/root_pubkeys to root_access
...
This better reflects the content (sudo wheel access + root login).
Signed-off-by: Florian Pritz <bluewind@xinu.at>
2019-02-10 15:07:49 +01:00