Alexandros Kosiaris has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/233620

Change subject: Enable mask/umask of tilerator and kartotherian services
......................................................................

Enable mask/umask of tilerator and kartotherian services

This should allow disabling, enabling the service

Bug: T106637
Change-Id: I6a3585204c6ed39eeb05e08210d5fd6fb625c0a9
---
M modules/admin/data/data.yaml
1 file changed, 4 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/20/233620/1

diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index d08cf5b..f138ea0 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -332,6 +332,8 @@
     gid: 754
     members: [yurik, maxsem]
     privileges: ['ALL = NOPASSWD: /usr/sbin/service kartotherian *',
+                 'ALL = NOPASSWD: /bin/systemctl mask kartotherian.service',
+                 'ALL = NOPASSWD: /bin/systemctl unmask kartotherian.service',
                  'ALL = (kartotherian) NOPASSWD: ALL']
   wdqs-admins:
     gid: 755
@@ -353,6 +355,8 @@
     gid: 758
     members: [yurik, maxsem]
     privileges: ['ALL = NOPASSWD: /usr/sbin/service tilerator *',
+                 'ALL = NOPASSWD: /bin/systemctl mask tilerator.service',
+                 'ALL = NOPASSWD: /bin/systemctl unmask tilerator.service',
                  'ALL = (tilerator) NOPASSWD: ALL']
   mobileapps-admin:
     description: Group of mobileapps admins

-- 
To view, visit https://gerrit.wikimedia.org/r/233620
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I6a3585204c6ed39eeb05e08210d5fd6fb625c0a9
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Alexandros Kosiaris <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to