infra-nimbus/ansible/roles/beacon-node-builds/templates/builds_sudoers.j2

11 lines
585 B
Django/Jinja

# Allow non-root users start Nimbus builds with sudo.
{% for service in beacon_node_builds_branches %}
# {{ service.name }}
%{{ beacon_node_builds_group }} ALL= NOPASSWD: /usr/bin/systemctl *status beacon-node-build-{{ service.name }}*
%{{ beacon_node_builds_group }} ALL= NOPASSWD: /usr/bin/systemctl *start beacon-node-build-{{ service.name }}*
%{{ beacon_node_builds_group }} ALL= NOPASSWD: /usr/bin/systemctl *stop beacon-node-build-{{ service.name }}*
%{{ beacon_node_builds_group }} ALL= NOPASSWD: /usr/bin/systemctl *restart beacon-node-build-{{ service.name }}*
{% endfor %}