From e8677905dd9c6478b64b9937dcf5f7de5efe4a0f Mon Sep 17 00:00:00 2001 From: Chris Haumesser <1550854+wryfi@users.noreply.github.com> Date: Fri, 15 Feb 2019 11:44:08 -0800 Subject: [PATCH] SRE-650 allow devs root access in qa --- sudoers/map.jinja | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/sudoers/map.jinja b/sudoers/map.jinja index a58de65..3d21736 100644 --- a/sudoers/map.jinja +++ b/sudoers/map.jinja @@ -19,10 +19,16 @@ 'default': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT' }, 'vagrant': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' }, 'dev': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' }, - 'qa': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT', - 'plosqa': 'ALL = (root) NOPASSWD: ALL' }, - 'stage': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT', - 'plosqa': 'ALL = (root) NOPASSWD: ALL' }, + 'qa': { + 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT', + 'plosdev': 'ALL = (ALL:ALL) NOPASSWD: ALL', + 'plosqa': 'ALL = (ALL:ALL) NOPASSWD: ALL', + }, + 'stage': { + 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT', + 'plosdev': 'ALL = (ALL:ALL) NOPASSWD: ALL', + 'plosqa': 'ALL = (ALL:ALL) NOPASSWD: ALL' + } }, grain='environment', merge=salt['pillar.get']('group_maps:lookup', None))