mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(tvl-buildkite): Add all buildkite agent users to a local group

Browse source 
This lets us grant permissions to them, e.g. on local folders.

Change-Id: I823ac414be1cb7d6baa4f17d95003709e5911b04
Reviewed-on: https://cl.tvl.fyi/c/depot/+/2905
Tested-by: BuildkiteCI
Reviewed-by: sterni <sternenseemann@systemli.org>
This commit is contained in:
Vincent Ambo 2021-04-09 17:36:57 +02:00 committed by tazjin
parent c021370213
commit 4b78875726
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
ops/nixos/tvl-buildkite.nix
View file

@ -32,5 +32,14 @@ in {
hooks.post-command = "${buildkiteHooks}/bin/post-command"; hooks.post-command = "${buildkiteHooks}/bin/post-command";
}; };
}) agents); }) agents);
# Set up a group for all Buildkite agent users
users = {
groups.buildkite-agents = {};
users = builtins.listToAttrs (map (n: {
name = "buildkite-agent-whitby-${toString n}";
value.extraGroups = [ "buildkite-agents" ];
}) agents);
};
}; };
} }