From 7f593781f3f2c8f0dc2446c11cf3f664f8fb8af4 Mon Sep 17 00:00:00 2001
From: Griffin Smith <grfn@gws.fyi>
Date: Sat, 18 Dec 2021 21:35:48 -0500
Subject: [PATCH] feat(whitby): Add buildkite agents to docker group

I'd like to be able to run extra CI steps that include running docker
containers (to integration test things like webapps that connect to a
database). To do this the buildkite agents themselves need permission to
do docker things.

Change-Id: I3c9a488708f0e12a508754ac41f04148ca7aedac
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4408
Tested-by: BuildkiteCI
Autosubmit: grfn <grfn@gws.fyi>
Reviewed-by: tazjin <mail@tazj.in>
---
 ops/modules/tvl-buildkite.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ops/modules/tvl-buildkite.nix b/ops/modules/tvl-buildkite.nix
index 20f8d3bbe..aaeb5a0f7 100644
--- a/ops/modules/tvl-buildkite.nix
+++ b/ops/modules/tvl-buildkite.nix
@@ -63,7 +63,7 @@ in {
         value = {
           isSystemUser = true;
           group = lib.mkForce "buildkite-agents";
-          extraGroups = [ name ];
+          extraGroups = [ name "docker" ];
         };
       }) agents);
     };