Ottomata has uploaded a new change for review.
https://gerrit.wikimedia.org/r/149112
Change subject: Set authorization_service_authorization_enabled for Oozie.
......................................................................
Set authorization_service_authorization_enabled for Oozie.
Change-Id: Ic693e84c9a0d26b05537a4c121c51ebb19b92341
---
M manifests/role/analytics/oozie.pp
1 file changed, 11 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/12/149112/1
diff --git a/manifests/role/analytics/oozie.pp
b/manifests/role/analytics/oozie.pp
index 284cdd8..f26725f 100644
--- a/manifests/role/analytics/oozie.pp
+++ b/manifests/role/analytics/oozie.pp
@@ -51,5 +51,16 @@
jdbc_password => $jdbc_password,
smtp_host => $::mail_smarthost[0],
smtp_from_email => "oozie@${::fqdn}",
+ # This is not currently working. Disabling
+ # this allows any user to manage any Oozie
+ # job. Since access to our cluster is limited,
+ # this isn't a big deal. But, we should still
+ # figure out why this isn't working and
+ # turn it back on.
+ # I was not able to kill any oozie jobs
+ # with this on, even though the
+ # oozie.service.ProxyUserService.proxyuser.*
+ # settings look like they are properly configured.
+ authorization_service_authorization_enabled => false,
}
}
--
To view, visit https://gerrit.wikimedia.org/r/149112
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic693e84c9a0d26b05537a4c121c51ebb19b92341
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ottomata <o...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
