As noted in the invirt.authz.locker._authenticate docstring, if we

[invirt/packages/xvm-prodconfig.git] / master.yaml

diff --git a/master.yaml b/master.yaml
index 2d0c094..896df3b 100644 (file)
--- a/master.yaml
+++ b/master.yaml
@@ -6,12 +6,20 @@ apt:
  keyid: 35AE3C4F
 
 authz:
- - type: afs
-   cell: athena.mit.edu
+ mech: invirt.authz.locker
+ cells:
+ - cell: athena.mit.edu
    auth: yes
- - type: afs
-   cell: sipb.mit.edu
+ - cell: sipb.mit.edu
    auth: yes
+ - cell: zone.mit.edu
+   auth: yes
+ - cell: ops.mit.edu
+   auth: no
+ - cell: net.mit.edu
+   auth: no
+ - cell: dev.mit.edu
+   auth: no
 
 console:
  hostname: xvm-console.mit.edu
@@ -46,14 +54,17 @@ dns:
   - /etc/invirt/zone
 
 git:
- branches:
+ pockets:
   prod:
    acl: *adminacl
-   component: stable
+   apt: stable
   dev:
    acl: system:xvm-dev
-   component: unstable
- tagger: Invirt Build Server <invirt@mit.edu>
+   apt: unstable
+   allow_backtracking: yes
+ tagger:
+  name: Invirt Build Server
+  email: invirt@mit.edu
 
 hosts: # hosts on which VMs run
  - hostname: citadel-station.mit.edu