From 2dc5ddb3cdfbeb5a6e7dc134fee068db2ba0ab5d Mon Sep 17 00:00:00 2001 From: "andres.suarez" Date: Fri, 21 Aug 2026 15:27:40 +0200 Subject: [PATCH 1/2] feat: allow adminapi to run cloud-init clean --reboot via sudo --- ansible/files/adminapi.sudoers.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/ansible/files/adminapi.sudoers.conf b/ansible/files/adminapi.sudoers.conf index ab10665a3..35d9c89f2 100644 --- a/ansible/files/adminapi.sudoers.conf +++ b/ansible/files/adminapi.sudoers.conf @@ -42,6 +42,7 @@ Cmnd_Alias PGBOUNCER = /bin/systemctl start pgbouncer.service, /bin/systemctl st %adminapi ALL= NOPASSWD: /usr/sbin/nft -f /etc/nftables/supabase_managed.conf %adminapi ALL= NOPASSWD: /usr/bin/admin-mgr %adminapi ALL= NOPASSWD: /usr/sbin/netplan apply +%adminapi ALL= NOPASSWD: /usr/bin/cloud-init clean --reboot %adminapi ALL= NOPASSWD: ENVOY %adminapi ALL= NOPASSWD: KONG %adminapi ALL= NOPASSWD: POSTGREST From 163d9313d218145c244d8fe15f7741ab06437501 Mon Sep 17 00:00:00 2001 From: Chris Gwilliams <517923+encima@users.noreply.github.com> Date: Thu, 27 Aug 2026 12:41:46 +0300 Subject: [PATCH 2/2] fix: update cloud-init command --- ansible/files/adminapi.sudoers.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ansible/files/adminapi.sudoers.conf b/ansible/files/adminapi.sudoers.conf index 35d9c89f2..a45e60f1b 100644 --- a/ansible/files/adminapi.sudoers.conf +++ b/ansible/files/adminapi.sudoers.conf @@ -42,7 +42,7 @@ Cmnd_Alias PGBOUNCER = /bin/systemctl start pgbouncer.service, /bin/systemctl st %adminapi ALL= NOPASSWD: /usr/sbin/nft -f /etc/nftables/supabase_managed.conf %adminapi ALL= NOPASSWD: /usr/bin/admin-mgr %adminapi ALL= NOPASSWD: /usr/sbin/netplan apply -%adminapi ALL= NOPASSWD: /usr/bin/cloud-init clean --reboot +%adminapi ALL= NOPASSWD: /usr/bin/cloud-init clean --logs %adminapi ALL= NOPASSWD: ENVOY %adminapi ALL= NOPASSWD: KONG %adminapi ALL= NOPASSWD: POSTGREST