-
Notifications
You must be signed in to change notification settings - Fork 0
/
roles.yaml.example
80 lines (80 loc) · 1.63 KB
/
roles.yaml.example
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
categories:
# Used if a system is not indicated below
default:
categories:
- nrpe
- sudoers
# Service category designations
dnsmasq:
roles:
- dnsmasq
- hosts
jenkins_deploy_target:
sudoers.included:
- jenkins
categories:
- sudoers
nrpe:
roles:
- nagios.nrpe
- files.nagios_plugins
sudoers:
roles:
- sudoers
- sudoers.included
- files.sudoers_cleanup
sudoers.included:
- cloud-init
# Environment category designations
# Used to add designations and properly manage sudoers
# Potentially used to manage unique 'roles' per environment
# (dev,stage,test,uat,prod,support, etc)
#
# Nonprod designations
non_prod_server:
sudoers.included:
- corp-non-prod
categories:
- sudoers
demo_server:
categories:
- non_prod_server
stage_server:
categories:
- non_prod_server
test_server:
categories:
- non_prod_server
uat_server:
categories:
- non_prod_server
# Prod designations
prod_server:
sudoers.included:
- corp-prod
categories:
- sudoers
support_server:
categories:
- prod_server
systems:
# Minion system. The line below should match grains['id']
salt-minion:
roles:
- nagios.server
categories:
- default
- prod_server
- jenkins_deploy_target
# Another minion system example
salt-master:
roles:
- files.salt_master_files
categories:
- default
- support_server
- dnsmasq
# Prune a role inherited from a category.
# Good for "I want everything but X from this category"
prune_roles:
- hosts