Jeremy Stanley d3ff588013 Correctly revoke /etc/sudoers.d/zuul
According to our zuul-worker DIB element the path we want to remove
to revoke zuul sudo access is /etc/sudoers.d/zuul:

http://git.openstack.org/cgit/openstack-infra/project-config/tree/nodepool/elements/zuul-worker/install.d/60-zuul-worker

Generated via:

    sed -i 's/zuul-sudo/zuul/' \
        `git grep --files-with-match '/etc/sudoers.d/zuul-sudo'`

Change-Id: Iea8cf915d815dbf876ca0cee74933f04152395b8
2017-09-28 19:19:04 +00:00

78 lines
3.0 KiB
YAML

- hosts: all
name: Autoconverted job legacy-its-storyboard-gerrit-plugin-stable-2.13 from old
job its-storyboard-gerrit-plugin-stable-2.13
tasks:
- name: Ensure legacy workspace directory
file:
path: '{{ ansible_user_dir }}/workspace'
state: directory
- shell:
cmd: |
set -e
set -x
sudo bash -c "echo 'ant' >> /usr/local/jenkins/common_data/bindep-fallback.txt"
sudo bash -c "echo 'ant-optional' >> /usr/local/jenkins/common_data/bindep-fallback.txt"
sudo bash -c "echo 'default-jdk' >> /usr/local/jenkins/common_data/bindep-fallback.txt"
sudo bash -c "echo 'asciidoc' >> /usr/local/jenkins/common_data/bindep-fallback.txt"
sudo bash -c "echo 'nodejs' >> /usr/local/jenkins/common_data/bindep-fallback.txt"
executable: /bin/bash
chdir: '{{ ansible_user_dir }}/workspace'
environment: '{{ zuul | zuul_legacy_vars }}'
- shell:
cmd: /usr/local/jenkins/slave_scripts/install-distro-packages.sh
chdir: '{{ ansible_user_dir }}/workspace'
environment: '{{ zuul | zuul_legacy_vars }}'
- shell:
cmd: |
set -x
sudo rm -f /etc/sudoers.d/zuul
# Prove that general sudo access is actually revoked
! sudo -n true
executable: /bin/bash
chdir: '{{ ansible_user_dir }}/workspace'
environment: '{{ zuul | zuul_legacy_vars }}'
- shell:
cmd: |
set -e
set -x
if [[ ! -d "buck" ]]
then
git clone https://gerrit.googlesource.com/buck
cd buck
ant
fi
executable: /bin/bash
chdir: '{{ ansible_user_dir }}/workspace'
environment: '{{ zuul | zuul_legacy_vars }}'
- shell:
cmd: |
set -e
set -x
export PATH=`pwd`/buck/bin:$PATH
rm -rf gerrit
git clone -b openstack/2.13 https://git.openstack.org/openstack-infra/gerrit
PLUGIN_PARENT_PROJECT=https://gerrit.googlesource.com/plugins/its-base
if [ -n "$PLUGIN_PARENT_PROJECT" ]; then
git clone -b stable-2.13 https://gerrit.googlesource.com/plugins/its-base gerrit/plugins/its-base
fi
git clone -b stable-2.13 https://gerrit.googlesource.com/plugins/its-storyboard gerrit/plugins/its-storyboard
cd gerrit/plugins/its-storyboard
/usr/local/jenkins/slave_scripts/version-properties.sh
source version.properties
cd $WORKSPACE/gerrit
buck clean
if [ -n "$PLUGIN_PARENT_PROJECT" ]; then
buck build plugins/its-base:its-base
fi
buck build plugins/its-storyboard:its-storyboard
cp ./buck-out/gen/plugins/its-storyboard/its-storyboard.jar ./buck-out/gen/plugins/its-storyboard/its-storyboard-$PROJECT_VER.jar
executable: /bin/bash
chdir: '{{ ansible_user_dir }}/workspace'
environment: '{{ zuul | zuul_legacy_vars }}'