Merge pull request #5 from PLOS-Formulas/SRE-650-dev-sudo-stage

SRE-650 allow devs root access in stage
PLOS · Feb 15, 2019 · ac990e8 · ac990e8
2 parents 32dbb6d + e867790
commit ac990e8
Showing 1 changed file with 10 additions and 4 deletions.
diff --git a/sudoers/map.jinja b/sudoers/map.jinja
@@ -19,10 +19,16 @@
     'default': { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT' },
     'vagrant': { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
     'dev':     { 'default': 'ALL = (ALL:ALL) NOPASSWD: ALL' },
-    'qa':      { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT',
-                 'plosqa': 'ALL = (root) NOPASSWD: ALL' },
-    'stage':   { 'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT',
-                 'plosqa': 'ALL = (root) NOPASSWD: ALL' },
+    'qa':      {
+                    'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT',
+                    'plosdev': 'ALL = (ALL:ALL) NOPASSWD: ALL',
+                    'plosqa': 'ALL = (ALL:ALL) NOPASSWD: ALL',
+               },
+    'stage':   {
+                    'default': 'ALL = (root) NOEXEC:NOPASSWD: SUPPORT',
+                    'plosdev': 'ALL = (ALL:ALL) NOPASSWD: ALL',
+                    'plosqa': 'ALL = (ALL:ALL) NOPASSWD: ALL'
+               }
     },
     grain='environment',
     merge=salt['pillar.get']('group_maps:lookup', None))