blob: f4bbdfde035512a209568e5797277661eba0cd47 [file] [log] [blame]
Filip Pytlouna1898572016-01-25 22:35:13 +01001linux:
2 system:
3 enabled: true
4 cluster: default
Petr Michalec1c4c8d82017-02-28 19:09:21 +01005 name: linux
Filip Pytlouna1898572016-01-25 22:35:13 +01006 timezone: Europe/Prague
7 domain: local
8 environment: prd
Petr Michalec1c4c8d82017-02-28 19:09:21 +01009 hostname: system.pillar.local
Filip Pytlouna1898572016-01-25 22:35:13 +010010 apparmor:
11 enabled: false
Filip Pytloun8296bb92016-02-19 18:42:09 +010012 haveged:
13 enabled: true
Filip Pytlouna1898572016-01-25 22:35:13 +010014 console:
15 tty0:
Filip Pytloun281d0202016-01-29 14:03:51 +010016 autologin: root
17 ttyS0:
18 autologin: root
19 rate: 115200
20 term: xterm
Filip Pytlouna1898572016-01-25 22:35:13 +010021 prompt:
Petr Michalec1c4c8d82017-02-28 19:09:21 +010022 default: "linux.ci.local$"
Jakub Pavlikb148c8c2017-02-12 21:30:48 +010023 kernel:
Jakub Pavlik6c9ead12017-02-16 21:53:13 +010024 sriov: True
25 isolcpu: 1,2,3,4
Jakub Pavlikb148c8c2017-02-12 21:30:48 +010026 hugepages:
27 large:
28 default: true
29 size: 1G
30 count: 210
31 mount_point: /mnt/hugepages_1GB
Filip Pytlouna1898572016-01-25 22:35:13 +010032 motd:
33 - warning: |
34 #!/bin/sh
35 printf "WARNING: This is tcpcloud network.\n"
36 printf " Unauthorized access is strictly prohibited.\n"
37 printf "\n"
38 - info: |
39 #!/bin/sh
40 printf -- "--[tcp cloud]---------------------------\n"
41 printf " Hostname | ${linux:system:name}\n"
42 printf " Domain | ${linux:system:domain}\n"
43 printf " System | %s\n" "$(lsb_release -s -d)"
44 printf " Kernel | %s\n" "$(uname -r)"
45 printf -- "----------------------------------------\n"
46 printf "\n"
47 user:
48 root:
49 enabled: true
50 home: /root
51 name: root
52 test:
53 enabled: true
54 name: test
55 sudo: true
56 uid: 9999
57 full_name: Test User
58 home: /home/test
Petr Michalec1c4c8d82017-02-28 19:09:21 +010059 groups:
60 - root
61 salt_user1:
62 enabled: true
63 name: saltuser1
64 sudo: false
65 uid: 9991
66 full_name: Salt User1
67 home: /home/saltuser1
68 salt_user2:
69 enabled: true
70 name: saltuser2
71 sudo: false
72 uid: 9992
73 full_name: Salt Sudo User2
74 home: /home/saltuser2
Filip Pytlouna1898572016-01-25 22:35:13 +010075 group:
76 test:
77 enabled: true
78 name: test
79 gid: 9999
80 system: true
Petr Michalec1c4c8d82017-02-28 19:09:21 +010081 db-ops:
82 enabled: true
83 name: testgroup
84 salt-ops:
85 enabled: true
86 name: sudogroup0
87 sudogroup1:
88 enabled: true
89 name: sudogroup1
90 sudogroup2:
91 enabled: true
92 name: sudogroup2
93 sudogroup3:
94 enabled: false
95 name: sudogroup3
Filip Pytlouna1898572016-01-25 22:35:13 +010096 job:
97 test:
98 enabled: true
99 command: "/bin/sleep 3"
100 user: test
101 minute: 0
102 hour: 13
103 package:
104 htop:
105 version: latest
106 repo:
107 opencontrail:
108 source: "deb http://ppa.launchpad.net/tcpcloud/contrail-2.20/ubuntu trusty main"
109 architectures: amd64
Filip Pytloun7731b852016-02-01 11:13:47 +0100110 policyrcd:
111 - package: cassandra
112 action: exit 101
113 - package: '*'
114 action: switch
Filip Pytlounc49445a2016-04-04 14:23:20 +0200115 locale:
116 en_US.UTF-8:
117 enabled: true
118 default: true
Filip Pytlounee1745f2016-04-04 17:39:41 +0200119 "cs_CZ.UTF-8 UTF-8":
Filip Pytlounc49445a2016-04-04 14:23:20 +0200120 enabled: true
Filip Pytlounc665ee22017-02-17 12:17:32 +0100121 autoupdates:
122 enabled: true
Petr Michalec1c4c8d82017-02-28 19:09:21 +0100123 sudo:
124 enabled: true
125 alias:
126 runas:
127 DBA:
128 - postgres
129 - mysql
130 SALT:
131 - root
132 host:
133 LOCAL:
134 - localhost
135 PRODUCTION:
136 - db1
137 - db2
138 command:
139 SUDO_RESTRICTED_SU:
140 - /bin/vi /etc/sudoers
141 - /bin/su - root
142 - /bin/su -
143 - /bin/su
144 - /usr/sbin/visudo
145 SUDO_SHELLS:
146 - /bin/sh
147 - /bin/ksh
148 - /bin/bash
149 - /bin/rbash
150 - /bin/dash
151 - /bin/zsh
152 - /bin/csh
153 - /bin/fish
154 - /bin/tcsh
155 - /usr/bin/login
156 - /usr/bin/su
157 - /usr/su
158 SUDO_SALT_SAFE:
159 - /usr/bin/salt state*
160 - /usr/bin/salt service*
161 - /usr/bin/salt pillar*
162 - /usr/bin/salt grains*
163 - /usr/bin/salt saltutil*
164 - /usr/bin/salt-call state*
165 - /usr/bin/salt-call service*
166 - /usr/bin/salt-call pillar*
167 - /usr/bin/salt-call grains*
168 - /usr/bin/salt-call saltutil*
169 SUDO_SALT_TRUSTED:
170 - /usr/bin/salt*
171 users:
172 saltuser1: {}
173 saltuser2:
174 hosts:
175 - LOCAL
176 # User Alias:
177 DBA:
178 hosts:
179 - ALL
180 commands:
181 - SUDO_SALT_SAFE
182 groups:
183 db-ops:
184 hosts:
185 - ALL
186 - '!PRODUCTION'
187 runas:
188 - DBA
189 commands:
190 - /bin/cat *
191 - /bin/less *
192 - /bin/ls *
193 - SUDO_SALT_SAFE
194 - '!SUDO_SHELLS'
195 - '!SUDO_RESTRICTED_SU'
196 salt-ops:
197 hosts:
198 - 'ALL'
199 runas:
200 - SALT
201 commands:
202 - SUDO_SALT_TRUSTED
203 salt-ops2:
204 name: salt-ops
205 runas:
206 - DBA
207 commands:
208 - SUDO_SHELLS
209 sudogroup1:
210 commands:
211 - ALL
212 sudogroup2:
213 commands:
214 - ALL
215 hosts:
216 - localhost
217 users:
218 - test
219 nopasswd: false
220 sudogroup3:
221 commands:
222 - ALL