Ema has uploaded a new change for review.
https://gerrit.wikimedia.org/r/281918
Change subject: Allow ganglia user to read VSM files
......................................................................
Allow ganglia user to read VSM files
Varnish VSM files used to be world-readable with 3.x; with the upgrade
to 4.x this is not true anymore. The files are however readable by
members of the varnish group.
Add ganglia to the varnish group to make sure the varnish ganglia module
can properly read from VSM files. Also add bblack and ema to allow
running varnishstat/varnishncsa without becoming root.
Change-Id: Ice9fc6e19e121a63f8a615f953d553c1729fcb68
---
M hieradata/common/cache/maps.yaml
M modules/admin/data/data.yaml
2 files changed, 5 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/18/281918/1
diff --git a/hieradata/common/cache/maps.yaml b/hieradata/common/cache/maps.yaml
index fe335b5..ffdb284 100644
--- a/hieradata/common/cache/maps.yaml
+++ b/hieradata/common/cache/maps.yaml
@@ -7,3 +7,5 @@
route: 'codfw'
backends:
codfw: 'kartotherian.svc.codfw.wmnet'
+admin::groups:
+ - varnish
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 9ed5d59..1db26ff 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -493,6 +493,9 @@
description: allows full sudo on labtest cluster, T131166
members: [krenair]
privileges: ['ALL = (ALL) NOPASSWD: ALL']
+ varnish:
+ description: allows reading varnish VSL files
+ members: [bblack, ema, ganglia]
users:
rush:
--
To view, visit https://gerrit.wikimedia.org/r/281918
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ice9fc6e19e121a63f8a615f953d553c1729fcb68
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ema <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
