Alexandros Kosiaris has uploaded a new change for review.
https://gerrit.wikimedia.org/r/233955
Change subject: Allow maps-admins to enable/disable cassandra/postgresql
......................................................................
Allow maps-admins to enable/disable cassandra/postgresql
Bug: T106637
Change-Id: Ide5abfda755d9c52e55994e65297d76d6019ec83
---
M modules/admin/data/data.yaml
1 file changed, 4 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/55/233955/1
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index b57c57f..279309c 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -324,6 +324,10 @@
members: [maxsem, yurik]
# TODO: Revisit this when moving into production
privileges: ['ALL = NOPASSWD: /usr/sbin/service cassandra *',
+ 'ALL = NOPASSWD: /bin/systemctl mask cassandra.service',
+ 'ALL = NOPASSWD: /bin/systemctl unmask cassandra.service',
+ 'ALL = NOPASSWD: /bin/systemctl mask postgresql.service',
+ 'ALL = NOPASSWD: /bin/systemctl unmask postgresql.service',
'ALL = NOPASSWD: /usr/sbin/service postgresql *']
kartotherian-admin:
description: Group of kartotherian admins
--
To view, visit https://gerrit.wikimedia.org/r/233955
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ide5abfda755d9c52e55994e65297d76d6019ec83
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Alexandros Kosiaris <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
