Andrew Bogott has uploaded a new change for review.
https://gerrit.wikimedia.org/r/253467
Change subject: Add new group aqs-users for shell and cqlsh access only.
......................................................................
Add new group aqs-users for shell and cqlsh access only.
Added members mforns, madhuvishy and nuria
Bug: T117473
Change-Id: I60a9f5813e0e1739e8c3b33ee1a860eac759af38
---
M hieradata/hosts/rutherfordium.yaml
M hieradata/role/common/aqs.yaml
M modules/admin/data/data.yaml
3 files changed, 7 insertions(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/67/253467/1
diff --git a/hieradata/hosts/rutherfordium.yaml
b/hieradata/hosts/rutherfordium.yaml
index 47c9c06..34ecc0f 100644
--- a/hieradata/hosts/rutherfordium.yaml
+++ b/hieradata/hosts/rutherfordium.yaml
@@ -10,6 +10,7 @@
- analytics-users
- apertium-admins
- aqs-admins
+ - aqs-users
- bastiononly
- cassandra-test-roots
- chromium-admin
diff --git a/hieradata/role/common/aqs.yaml b/hieradata/role/common/aqs.yaml
index fe4d05a..9358ad1 100644
--- a/hieradata/role/common/aqs.yaml
+++ b/hieradata/role/common/aqs.yaml
@@ -3,6 +3,7 @@
admin::groups:
- aqs-admins
+ - aqs-users
debdeploy::grains:
debdeploy-aqs:
value: standard
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 2c08b48..2a0966d 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -433,7 +433,11 @@
description: users who have root on memcached, varnish and application
servers
members: [krinkle]
privileges: ['ALL = (ALL) NOPASSWD: ALL']
-
+ aqs-users:
+ description: Group of users for the Analytics Query Service
+ gid: 767
+ members: [nuria, mforns, madhuvishy]
+ privileges: ['ALL = NOPASSWD: /usr/bin/cqlsh']
users:
rush:
ensure: present
--
To view, visit https://gerrit.wikimedia.org/r/253467
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I60a9f5813e0e1739e8c3b33ee1a860eac759af38
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
