Gitiles
Code Review Sign In
gerrit.mcp.mirantis.com / salt-models / reclass-system / eea16bd5549377ecb09d335ee12b555aeb20cbfd / . / openssh / server / team / support.yml
blob: b2c2f577e78a72469f4a3161a911353c11096dcd [file] [log] [blame]
Petr Michalec6e6ead42017-08-01 11:10:46 +0200[diff] [blame]1classes:
2- system.linux.system.sudo
3# L1
4- system.openssh.server.team.members.aleksandrdobdin
5- system.openssh.server.team.members.aleksandrrubtsov
6- system.openssh.server.team.members.anatoliineliubin
7- system.openssh.server.team.members.antonrodionov
8- system.openssh.server.team.members.collinmay
9- system.openssh.server.team.members.danilakhmetov
10- system.openssh.server.team.members.deniskostriukov
11- system.openssh.server.team.members.dmitrygoloshubov
12- system.openssh.server.team.members.javierdiaz
13- system.openssh.server.team.members.josuepalmerin
14- system.openssh.server.team.members.krzysztoffranckowski
15- system.openssh.server.team.members.matthewroark
16- system.openssh.server.team.members.maximefimov
17- system.openssh.server.team.members.mikhailkraynov
18- system.openssh.server.team.members.nadezhdakabanova
19- system.openssh.server.team.members.renesoto
20- system.openssh.server.team.members.rsafonov
21- system.openssh.server.team.members.scottmachtmes
22- system.openssh.server.team.members.zahedkhurasani
23# L2OPS
24- system.openssh.server.team.members.aepifanov
25- system.openssh.server.team.members.apetrenko
26- system.openssh.server.team.members.atarasov
27- system.openssh.server.team.members.dklepikov
28- system.openssh.server.team.members.dsutyagin
29- system.openssh.server.team.members.ekozhemyakin
30- system.openssh.server.team.members.enikanorov
31- system.openssh.server.team.members.fsoppelsa
32- system.openssh.server.team.members.manashkin
33- system.openssh.server.team.members.nkondra
34- system.openssh.server.team.members.obryndzii
35- system.openssh.server.team.members.oliemieshko
36- system.openssh.server.team.members.sovsianikov
37# L2OPS SRE Team
38- system.openssh.server.team.members.cade
39- system.openssh.server.team.members.jmosher
40- system.openssh.server.team.members.ecantwell
41- system.openssh.server.team.members.lmercl
Petr Michalec6e6ead42017-08-01 11:10:46 +0200[diff] [blame]42- system.openssh.server.team.members.osmola
43- system.openssh.server.team.members.pcizinsky
44- system.openssh.server.team.members.pmathews
45- system.openssh.server.team.members.pmichalec
46parameters:
47 _param:
48 linux_system_user_sudo: false
49 linux:
50 system:
51 group:
52 supportl1:
53 enabled: false
54 supportl2:
55 enabled: false
56 support0:
57 enabled: true
58 name: support0
59 support1:
60 enabled: true
61 name: support1
62 addusers:
63 # L1
Petr Michaleceea16bd2017-08-07 11:53:07 +0200[diff] [blame^]64 - ${linux:system:user:ardobdin:name}
65 - ${linux:system:user:arubtsov:name}
66 - ${linux:system:user:aneliubin:name}
67 - ${linux:system:user:arodionov:name}
68 - ${linux:system:user:cmay:name}
69 - ${linux:system:user:dakhmetov:name}
70 - ${linux:system:user:dkostriukov:name}
71 - ${linux:system:user:dgoloshubov:name}
72 - ${linux:system:user:jdiaz:name}
73 - ${linux:system:user:jpalmerin:name}
74 - ${linux:system:user:kfranckowski:name}
75 - ${linux:system:user:mroark:name}
76 - ${linux:system:user:mefimov:name}
77 - ${linux:system:user:mkraynov:name}
78 - ${linux:system:user:nkabanova:name}
79 - ${linux:system:user:rsoto:name}
80 - ${linux:system:user:rsafonov:name}
81 - ${linux:system:user:smachtmes:name}
82 - ${linux:system:user:zkhurasani:name}
Petr Michalec6e6ead42017-08-01 11:10:46 +0200[diff] [blame]83 support2:
84 enabled: true
85 name: support2
86 addusers:
87 # L2OPS
Petr Michaleceea16bd2017-08-07 11:53:07 +0200[diff] [blame^]88 - ${linux:system:user:aepifanov:name}
89 - ${linux:system:user:apetrenko:name}
90 - ${linux:system:user:atarasov:name}
91 - ${linux:system:user:dklepikov:name}
92 - ${linux:system:user:dsutyagin:name}
93 - ${linux:system:user:ekozhemyaki:name}
94 - ${linux:system:user:enikanorov:name}
95 - ${linux:system:user:fsoppelsa:name}
96 - ${linux:system:user:manashkin:name}
97 - ${linux:system:user:nkondra:name}
98 - ${linux:system:user:obryndzii:name}
99 - ${linux:system:user:oliemieshko:name}
100 - ${linux:system:user:sovsianikov:name}
Petr Michalec6e6ead42017-08-01 11:10:46 +0200[diff] [blame]101 # L2OPS SRE
Petr Michaleceea16bd2017-08-07 11:53:07 +0200[diff] [blame^]102 - ${linux:system:user:pmichalec:name}
103 - ${linux:system:user:pmathews:name}
104 - ${linux:system:user:pcizinsky:name}
105 - ${linux:system:user:osmola:name}
106 - ${linux:system:user:cade:name}
107 - ${linux:system:user:jmosher:name}
108 - ${linux:system:user:ecantwell:name}
109 - ${linux:system:user:lmercl:name}
Petr Michalec6e6ead42017-08-01 11:10:46 +0200[diff] [blame]110 support3:
111 enabled: false
112 name: support3
113 addusers:
Petr Michaleceea16bd2017-08-07 11:53:07 +0200[diff] [blame^]114 - ${linux:system:user:pmichalec:name}
115 - ${linux:system:user:pmathews:name}
116 - ${linux:system:user:pcizinsky:name}
117 - ${linux:system:user:osmola:name}
118 - ${linux:system:user:cade:name}
119 - ${linux:system:user:jmosher:name}
120 - ${linux:system:user:ecantwell:name}
121 - ${linux:system:user:lmercl:name}
Petr Michalec6e6ead42017-08-01 11:10:46 +0200[diff] [blame]122 sudo:
123 enabled: true
124 aliases:
125 command:
126 SUPPORT_SALT: ${_param:sudo_salt_safe}
127 SUPPORT_SALT_TRUSTED: ${_param:sudo_salt_trusted}
128 SUPPORT_RESTRICTED_SHELLS: ${_param:sudo_shells}
129 SUPPORT_RESTRICTED_SU: ${_param:sudo_restricted_su}
130 SUPPORT_COREUTILS: ${_param:sudo_coreutils_safe}
131 SUPPORT_RABBITMQ: ${_param:sudo_rabbitmq_safe}
132 SUPPORT_SALT_TRUSTED: ${_param:sudo_salt_trusted}
133 SUPPORT_NETWORKING: ${_param:sudo_networking}
134 SUPPORT_CONTRAIL: ${_param:sudo_contrail_utilities}
135 SUPPORT_STORAGE: ${_param:sudo_storage_utilities}
136 SUPPORT_OPENSTACK_CLIENTS: ${_param:sudo_openstack_clients}
137 groups:
138 support0:
139 # This group should have only RO access to non-sensitive data and commands
140 # assumed usage: common operations, non experienced, non technical users.
141 commands:
142 - SUPPORT_SALT
143 - '!SUPPORT_RESTRICTED_SHELLS'
144 - '!SUPPORT_RESTRICTED_SU'
145 support1:
146 # This group should have access to safe, trusted, commands
147 commands:
148 - SUPPORT_SALT
149 - SUPPORT_COREUTILS
150 - SUPPORT_RABBITMQ
151 - SUPPORT_NETWORKING
152 - SUPPORT_CONTRAIL
153 - SUPPORT_STORAGE
154 - SUPPORT_OPENSTACK_CLIENTS
155 - '!SUPPORT_RESTRICTED_SHELLS'
156 - '!SUPPORT_RESTRICTED_SU'
157 support2:
158 # This group should have access to any command using sudo
159 commands:
160 - SUPPORT_SALT
161 - SUPPORT_SALT_TRUSTED
162 - SUPPORT_COREUTILS
163 - SUPPORT_RABBITMQ
164 - SUPPORT_NETWORKING
165 - SUPPORT_CONTRAIL
166 - SUPPORT_STORAGE
167 - SUPPORT_OPENSTACK_CLIENTS
168 - '!SUPPORT_RESTRICTED_SHELLS'
169 - '!SUPPORT_RESTRICTED_SU'
170 support3:
171 # It's never safe to run unlimited number of commands with sudo.
172 # Use with caution.
173 commands:
174 - ALL
175 - '!SUPPORT_RESTRICTED_SHELLS'
176 - '!SUPPORT_RESTRICTED_SU'