KNEL/PFVCluster
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(access): map UCS to root, create tickets for blocked systems

Browse Source 
access-matrix.sh:
- tsys-ucs-* mapped to root (was falling through to localuser)

bootstrap-all.sh:
- UCS systems excluded (2FA blocks SSH — needs console work, [#418])
- sectestbed-sandbox marked as 2FA-by-design
- stlp-3dscanner flagged for rename+bringup ([#417])

Refs [#403], [#417], [#418]

💘 Generated with Crush

Assisted-by: Crush:glm-5.2
This commit is contained in:
mrcharles
2026-08-10 14:27:15 -05:00
parent d4cbdf5ef4
commit 77e88c98a1
2 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bootstrap-all.sh
+5 -4
View File
@@ -69,10 +69,11 @@ echo "========================================"
echo "Summary: $ok done, $fail failed"
[ -n "$faillist" ] && echo "Failed:$faillist"
echo "========================================"
echo "Still 2FA-blocked (need policy decision):"
echo " sectestbed-sandbox, tsys-ucs-01, tsys-ucs-02"
echo "Blocked — need console work (separate tickets):"
echo " tsys-ucs-01, tsys-ucs-02 — remove 2FA first [#418]"
echo " stlpc-3dscanner — bring online + rename [#417]"
echo "========================================"
echo "Unknown user (not in bootstrap):"
echo " stlp-3dscanner (100.125.14.37) — need user clarification"
echo "2FA by design (leave alone):"
echo " sectestbed-sandbox"
echo "========================================"
echo "Tell the agent to re-run access-matrix.sh to verify."