infra-role-nimbus-fluffy/tasks/user.yml

26 lines
672 B
YAML

---
- name: Create user for fluffy node builds
user:
name: '{{ nimbus_fluffy_user }}'
group: '{{ nimbus_fluffy_group }}'
shell: '/bin/bash'
- name: Set disable rebase as merge strategy
git_config:
scope: 'global'
name: 'pull.rebase'
value: 'false'
become_user: '{{ nimbus_fluffy_user }}'
- name: Sudoers file to let non-root users start jobs
template:
src: 'builds_sudoers.j2'
dest: '/etc/sudoers.d/80-{{ nimbus_fluffy_service_name }}-builds'
mode: 0440
- name: Sudoers file for login as nimbus user
template:
src: 'nimbus_sudoers.j2'
dest: '/etc/sudoers.d/81-{{ nimbus_fluffy_service_name }}-login'
mode: 0440