Dzahn has uploaded a new change for review.
https://gerrit.wikimedia.org/r/248378
Change subject: admin: create group aqs-restbase-deployers
......................................................................
admin: create group aqs-restbase-deployers
In T116169 we have an access request for deployment permissions
for the Analytics Query Service (aqs) / Restbase, using ansible.
This adds a new admin group with sudo permissions to run:
command: ansible-playbook -i production -e target=aqs roles/restbase/deploy.yml
The group is then to be used on aqs100[1-3] via the role and in Hiera.
Finally, adding Joseph and Dan, as members to the group will be the access
request.
Bug:T116169
Change-Id: I1f994969c7b780f45cd891d0ac71e69c787a25bb
---
M modules/admin/data/data.yaml
1 file changed, 5 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/78/248378/1
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 6125ea4..7946c42 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -425,6 +425,11 @@
members: []
privileges: ['ALL = NOPASSWD: /usr/local/sbin/install-console *']
+ aqs-restbase-deployers:
+ gid: 766
+ description: Users who deploy restbase for the Analytics Query Service
+ members: []
+ privileges: ['ALL = NOPASSWD: ansible-playbook -i production -e target=aqs
roles/restbase/deploy.yml']
users:
rush:
ensure: present
--
To view, visit https://gerrit.wikimedia.org/r/248378
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I1f994969c7b780f45cd891d0ac71e69c787a25bb
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
