From 2d3866c6a488e339a4c1501036ccfaa2a3db75b4 Mon Sep 17 00:00:00 2001
From: Duong Ha-Quang <duonghq@vn.fujitsu.com>
Date: Tue, 23 Aug 2016 22:34:21 +0700
Subject: Specify 'become' for only necessary tasks (default roles)

Add become to only neccesary tasks in roles:
- glance
- heat
- horizon
- keystone
- neutron
- nova
- openvswitch

Gate is also updated to use 'become' feature

Change-Id: I2f3f27306e9f384148e1ad4d54d8da2ebef34d00
Partial-Implements: blueprint ansible-specific-task-become
---
 tools/playbook-setup-nodes.yml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

(limited to 'tools')

diff --git a/tools/playbook-setup-nodes.yml b/tools/playbook-setup-nodes.yml
index 47864d335..cd765cfa3 100644
--- a/tools/playbook-setup-nodes.yml
+++ b/tools/playbook-setup-nodes.yml
@@ -10,6 +10,24 @@
   - name: Install wget package
     package: name=wget
 
+  - name: Add sudo group
+    group:
+      name: sudo
+      state: present
+
+  - name: Allow 'sudo' group to have passwordless sudo
+    lineinfile:
+      dest: /etc/sudoers
+      state: present
+      line: "%sudo ALL=(ALL) NOPASSWD: ALL"
+
+  - name: Add jenkins to sudo group
+    user:
+      name: jenkins
+      append: yes
+      groups: "sudo"
+
+
 - hosts: all
   become: true
 
-- 
cgit v1.2.3