feat: update baseline_users to include wed, jarvis, and rblundon

ansible/inventory.yml

@@ -78,13 +78,6 @@ honcho_server:
       ansible_user: wed
       ansible_become: true
 
-paperclip_server:
-  hosts:
-    muppet-vision:
-      ansible_host: 10.1.71.136
-      ansible_user: wed
-      ansible_become: true
-
 jmri_server:
   hosts:
     main-street-station:

ansible/roles/linux-baseline/defaults/main.yml

@@ -65,6 +65,11 @@ baseline_packages_extra: []
 # provisions on every host. Service users (e.g. 'cast' for podman
 # workloads) are created by their respective application roles, not here.
 baseline_users:
+  - name: wed
+    comment: "Default admin user"
+    shell: /bin/bash
+    groups: "{{ baseline_sudo_group }}"
+    sudo_nopasswd: true
   - name: jarvis
     comment: "JARVIS automation account"
     shell: /bin/bash
@@ -72,6 +77,11 @@ baseline_users:
     sudo_nopasswd: true
     ssh_authorized_keys:
       - "{{ jarvis_ssh_public_key }}"
+  - name: rblundon
+    comment: "Ryan Blundon"
+    shell: /bin/bash
+    groups: "{{ baseline_sudo_group }}"
+    sudo_nopasswd: true
 
 # ---------------------------------------------------------------------------
 # SSH hardening

cluster/applications/body-wars-helm/application.yaml

@@ -1,39 +0,0 @@
-apiVersion: argoproj.io/v1alpha1
-kind: Application
-metadata:
-  name: body-wars
-  namespace: argocd
-  annotations:
-    argocd.argoproj.io/sync-wave: "9"
-spec:
-  project: default
-  source:
-    repoURL: https://helm-charts.open-webui.com
-    chart: open-webui
-    targetRevision: 16.3.0
-    helm:
-      values: |
-        ingress:
-          enabled: true
-          className: nginx
-          hosts:
-            - host: body-wars.local.mk-labs.cloud
-              paths:
-                - path: /
-                  pathType: Prefix
-          tls:
-            - secretName: body-wars-tls
-              hosts:
-                - body-wars.local.mk-labs.cloud
-        openwebui:
-          backend:
-            url: http://astro-orbiter:8000/v1
-  destination:
-    server: https://kubernetes.default.svc
-    namespace: open-webui
-  syncPolicy:
-    automated:
-      prune: true
-      selfHeal: true
-    syncOptions:
-      - CreateNamespace=true