ArielGlenn has submitted this change and it was merged.
Change subject: Allow "hoo" to sudo into datasets
......................................................................
Allow "hoo" to sudo into datasets
Needed to keep and eye on and restart the Wikidata json
dumps (and the future rdf and property dumps).
This is done by introducing a new group snapshot-admin
which allows me to sudo into the "datasets" user.
RT: 8286
Bug: T86808
Change-Id: I1863679d72aeb4ab9aa527ec24bcbda290a8849f
---
M manifests/site.pp
M modules/admin/data/data.yaml
2 files changed, 10 insertions(+), 0 deletions(-)
Approvals:
ArielGlenn: Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/site.pp b/manifests/site.pp
index 048e666..b8950fb 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -2218,6 +2218,10 @@
if $::fqdn == 'snapshot1003.eqiad.wmnet' {
include role::snapshot::cron::primary
}
+
+ class { 'admin':
+ groups => ['snapshot-admins'],
+ }
}
node 'terbium.eqiad.wmnet' {
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index e215a59..ebd2a23 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -286,6 +286,12 @@
'ALL = (root) NOPASSWD: /usr/sbin/service xvfb start',
'ALL = (root) NOPASSWD: /usr/sbin/service xvfb restart',
'ALL = (root) NOPASSWD: /usr/sbin/service xvfb reload']
+ snapshot-admins:
+ gid: 743
+ description: People who can sudo into the datasets user on snapshot hosts.
+ members: [hoo]
+ privileges: ['ALL = (datasets) NOPASSWD: ALL']
+
users:
rush:
ensure: present
--
To view, visit https://gerrit.wikimedia.org/r/152724
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I1863679d72aeb4ab9aa527ec24bcbda290a8849f
Gerrit-PatchSet: 19
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Hoo man <[email protected]>
Gerrit-Reviewer: Alex Monk <[email protected]>
Gerrit-Reviewer: Alexandros Kosiaris <[email protected]>
Gerrit-Reviewer: ArielGlenn <[email protected]>
Gerrit-Reviewer: Aude <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Hoo man <[email protected]>
Gerrit-Reviewer: Lydia Pintscher <[email protected]>
Gerrit-Reviewer: Manybubbles <[email protected]>
Gerrit-Reviewer: Mark Bergsma <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
