Giuseppe Lavagetto has submitted this change and it was merged.
Change subject: admin: add new group labnet-users
......................................................................
admin: add new group labnet-users
Adds a new admin group "labnet-users" for
unprivileged access to labnet servers.
Adds that group in hiera to
role/common/openstack/nova/api.yaml so that it
gets applied wherever that role is used.
This would currently mean labnet1001/1002 and
labtestnet1001/1002. (compare site.pp)
If we think it makes sense to use the role for it,
otherwise we could use just match labnet in regex.yaml.
Bug:T133992
Change-Id: I46a6eee8094bcfe4f5725dc3ada73212c4ce1432
---
A hieradata/role/common/openstack/nova/api.yaml
M modules/admin/data/data.yaml
2 files changed, 6 insertions(+), 0 deletions(-)
Approvals:
Giuseppe Lavagetto: Verified; Looks good to me, approved
diff --git a/hieradata/role/common/openstack/nova/api.yaml
b/hieradata/role/common/openstack/nova/api.yaml
new file mode 100644
index 0000000..322f080
--- /dev/null
+++ b/hieradata/role/common/openstack/nova/api.yaml
@@ -0,0 +1,2 @@
+admin::groups:
+ - labnet-users
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 447daf3..3331fad 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -506,6 +506,10 @@
gid: 780
members: [madhuvishy]
privileges: ['ALL = (ALL) NOPASSWD: ALL']
+ labnet-users:
+ description: unprivileged access on labnet servers
+ gid: 781
+ members: []
users:
rush:
--
To view, visit https://gerrit.wikimedia.org/r/289343
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I46a6eee8094bcfe4f5725dc3ada73212c4ce1432
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Alex Monk <[email protected]>
Gerrit-Reviewer: Andrew Bogott <[email protected]>
Gerrit-Reviewer: Giuseppe Lavagetto <[email protected]>
Gerrit-Reviewer: Hashar <[email protected]>
Gerrit-Reviewer: Rush <[email protected]>
Gerrit-Reviewer: Thcipriani <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
