Mwalker has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/150016

Change subject: Give OCG admins the ability to run maintenance scripts
......................................................................

Give OCG admins the ability to run maintenance scripts

.. which are contained in /srv/deployment/ocg/ocg/mw-ocg-service/scripts

Change-Id: I6d27a8a3cb366f1dfdfa83cceb38d63e404aa0b9
---
M modules/admin/data/data.yaml
1 file changed, 2 insertions(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/16/150016/1

diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 9f3f7e6..b201004 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -139,7 +139,8 @@
     privs: ['ALL = (root) NOPASSWD: /usr/sbin/service ocg stop',
             'ALL = (root) NOPASSWD: /usr/sbin/service ocg start',
             'ALL = (root) NOPASSWD: /usr/sbin/service ocg restart',
-            'ALL = (root) NOPASSWD: /usr/sbin/service ocg reload']
+            'ALL = (root) NOPASSWD: /usr/sbin/service ocg reload',
+            'ALL = (ocg) NOPASSWD: 
/srv/deployment/ocg/ocg/mw-ocg-service/scripts/*]
   logstash-roots:
     gid: 722
     description: users with root access on logstash nodes (rt 6366, 6896)

-- 
To view, visit https://gerrit.wikimedia.org/r/150016
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I6d27a8a3cb366f1dfdfa83cceb38d63e404aa0b9
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Mwalker <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to