Skip to content
Projects
Groups
Snippets
Help
This project
Loading...
Sign in / Register
Toggle navigation
C
configuration
Overview
Overview
Details
Activity
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Board
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
edx
configuration
Commits
9c77bdf0
Commit
9c77bdf0
authored
Feb 26, 2014
by
John Jarvis
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
removing old automator files
parent
1aa1c382
Hide whitespace changes
Inline
Side-by-side
Showing
8 changed files
with
0 additions
and
158 deletions
+0
-158
playbooks/roles/analytics-server/files/etc/sudoers.d/99-automator-analytics-server
+0
-1
playbooks/roles/analytics/templates/etc/sudoers.d/99-automator-analytics.j2
+0
-1
playbooks/roles/automated/defaults/main.yml
+0
-29
playbooks/roles/automated/files/home/automator/.bashrc
+0
-1
playbooks/roles/automated/files/home/automator/.profile
+0
-1
playbooks/roles/automated/tasks/main.yml
+0
-114
playbooks/roles/automated/templates/home/automator/.ssh/authorized_keys.j2
+0
-6
playbooks/roles/edxapp/templates/etc/sudoers.d/99-automator-edxapp-server.j2
+0
-5
No files found.
playbooks/roles/analytics-server/files/etc/sudoers.d/99-automator-analytics-server
deleted
100644 → 0
View file @
1aa1c382
automator ALL=(www-data) NOPASSWD:SETENV:/opt/wwc/analytics-server/virtualenvs/analytics-server/bin/django-admin.py run_all_queries *
playbooks/roles/analytics/templates/etc/sudoers.d/99-automator-analytics.j2
deleted
100644 → 0
View file @
1aa1c382
automator ALL=({{ analytics_web_user }}) NOPASSWD:SETENV:{{ analytics_venv_dir }}/bin/django-admin.py run_all_queries *
playbooks/roles/automated/defaults/main.yml
deleted
100644 → 0
View file @
1aa1c382
---
#
# edX Configuration
#
# github: https://github.com/edx/configuration
# wiki: https://github.com/edx/configuration/wiki
# code style: https://github.com/edx/configuration/wiki/Ansible-Coding-Conventions
# license: https://github.com/edx/configuration/blob/master/LICENSE.TXT
#
##
# Vars for role automated
#
#
# vars are namespace with the module name.
#
automated_role_name
:
automated
automated_user
:
"
changeme"
automated_home
:
"
/home/{{
automated_user
}}"
automated_rbash_links
:
!!null
automated_sudoers_template
:
!!null
#
# OS packages
#
automated_debian_pkgs
:
[]
automated_redhat_pkgs
:
[]
playbooks/roles/automated/files/home/automator/.bashrc
deleted
100644 → 0
View file @
1aa1c382
PATH
=
${
HOME
}
/bin
playbooks/roles/automated/files/home/automator/.profile
deleted
100644 → 0
View file @
1aa1c382
.
.bashrc
playbooks/roles/automated/tasks/main.yml
deleted
100644 → 0
View file @
1aa1c382
---
#
# edX Configuration
#
# github: https://github.com/edx/configuration
# wiki: https://github.com/edx/configuration/wiki
# code style: https://github.com/edx/configuration/wiki/Ansible-Coding-Conventions
# license: https://github.com/edx/configuration/blob/master/LICENSE.TXT
#
# Tasks for role automated
#
# Overview:
#
# This role is included as a dependency by other roles which provide
# automated jobs. Automation occurs over ssh. The automator user
# is assigned to a managed rbash shell and is, potentially, allowed to run
# explicitly listed commands via sudo. Both the commands that are
# allowed via rbash and the sudoers file are provided by the
# including role.
#
# Dependencies:
#
# This role depends upon variables provided by an including role
# via the my_role/meta/main.yml file. Includes take the following forms:
#
# dependencies:
# - role: automated
# automated_rbash_links: "{{ edxapp_automated_rbash_links }}"
# automated_sudoers_template: 'roles/edxapp/templates/etc/sudoers.d/99-automator-edxapp-server.j2'
# automated_authorized_keys: "{{ EDXAPP_AUTOMATOR_AUTHORIZED_KEYS }}"
#
# The sudoers file is optional. Note that for sudo to work it must be
# included in the rbash links list.
#
# That list should be provided via my_role's defaults
#
# role_automated_rbash_links:
# - /usr/bin/sudo
# - /usr/bin/scp
#
-
fail
:
automated_rbash_links required for role
when
:
automated_rbash_links is not defined
-
fail
:
automated_authorized_keys required for role
when
:
automated_authorized_keys is not defined
-
name
:
create automated user
user
:
name={{ automated_user }} state=present shell=/bin/rbash
home={{ automated_home }} createhome=yes
-
name
:
create sudoers file from template
copy
:
dest=/etc/sudoers.d/{{ automated_sudoers_template|basename|replace('.j2','') }}
src={{ automated_sudoers_template }} owner="root"
group="root" mode=0440 validate='visudo -cf %s'
when
:
automated_sudoers_template
#
# Prevent user from updating their PATH and
# environment.
#
-
name
:
update shell file mode
file
:
path={{ automated_home }}/{{ item }} mode=0640
state=file owner="root" group={{ automated_user }}
with_items
:
-
.bashrc
-
.profile
-
.bash_logout
-
name
:
change ~automated ownership
file
:
path={{ automated_home }} mode=0750 state=directory
owner="root" group={{ automated_user }}
-
name
:
create ~automated/bin directory
file
:
path={{ automated_home }}/bin state=directory mode=0750
owner="root" group={{ automated_user }}
-
name
:
re-write .profile
copy
:
src=home/automator/.profile
dest={{ automated_home }}/.profile
owner="root"
group={{ automated_user }}
mode="0744"
-
name
:
re-write .bashrc
copy
:
src=home/automator/.bashrc
dest={{ automated_home }}/.bashrc
owner="root"
group={{ automated_user }}
mode="0744"
-
name
:
create .ssh directory
file
:
path={{ automated_home }}/.ssh state=directory mode=0700
owner={{ automated_user }} group={{ automated_user }}
-
name
:
build authorized_keys file
template
:
src=home/automator/.ssh/authorized_keys.j2
dest={{ automated_home }}/.ssh/authorized_keys mode=0600
owner={{ automated_user }} group={{ automated_user }}
-
name
:
create allowed command links
file
:
src={{ item }} dest={{ automated_home }}/bin/{{ item.split('/').pop() }}
state=link
with_items
:
automated_rbash_links
playbooks/roles/automated/templates/home/automator/.ssh/authorized_keys.j2
deleted
100644 → 0
View file @
1aa1c382
# {{ ansible_managed }}
{% for line in automated_authorized_keys -%}
{{ line }}
{%- endfor %}
\ No newline at end of file
playbooks/roles/edxapp/templates/etc/sudoers.d/99-automator-edxapp-server.j2
deleted
100644 → 0
View file @
1aa1c382
automator ALL=({{ common_web_user }}) NOPASSWD:SETENV:{{ edxapp_venv_dir }}/bin/django-admin.py migrate *
automator ALL=({{ common_web_user }}) NOPASSWD:SETENV:{{ edxapp_venv_dir }}/bin/django-admin.py seed_permissions_roles *
automator ALL=({{ common_web_user }}) NOPASSWD:SETENV:{{ edxapp_venv_dir }}/bin/django-admin.py set_staff *
automator ALL=({{ common_web_user }}) NOPASSWD:SETENV:{{ edxapp_venv_dir }}/bin/django-admin.py transfer_students *
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment