Main tracking task to audit and list all privileged commands required by DCOps to operate, in order to prioritize automation effort towards removing the needs of running privileged commands. (see T233189#5512761).
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | MoritzMuehlenhoff | T233685 Tracking task for DCOps privileged commands | |||
| Resolved | Jclark-ctr | T249916 access request on cumin[1-2]001 for John Clark | |||
| Resolved | Request | None | T279721 Dc-Ops Commands for Cumin |
I don't think the pwstore part is still accurate? pwstore has separate permission groups and passwords relevant to DC ops are granted permission with "access: @dcops". E.g. Papaul is in @dcops and TTBOMK there's nothing missing for DC ops work currently? If that's not the case, please let me know and we can update the "access:" stanza for the file in question.
Seems like switch access was resolved by homer, DNS by netbox automation and only puppet is left. Should we move all dcops into the dcops admin group?