Yuvipanda has uploaded a new change for review.
https://gerrit.wikimedia.org/r/299777
Change subject: tools: Add limited sudo capabilities to toolschecker account
......................................................................
tools: Add limited sudo capabilities to toolschecker account
Can sudo as a couple other toolschecker accounts that are doing
webservice specific things
Change-Id: I240450bb0fbb45c668acd4b171bf083f678a39fb
---
M modules/toollabs/manifests/checker.pp
1 file changed, 7 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/77/299777/1
diff --git a/modules/toollabs/manifests/checker.pp
b/modules/toollabs/manifests/checker.pp
index a9ac7dd..a551840 100644
--- a/modules/toollabs/manifests/checker.pp
+++ b/modules/toollabs/manifests/checker.pp
@@ -81,6 +81,13 @@
notify => Service['toolschecker'],
}
+ sudo::user { 'tools.toolschecker':
+ privileges => [
+ 'ALL=(tools.toolschecker-k8s-ws) NOPASSWD: ALL',
+ 'ALL=(tools.toolschecker-ge-ws) NOPASSWD: ALL',
+ ]
+ }
+
service { 'toolschecker':
ensure => running,
require => File['/run/toolschecker'],
--
To view, visit https://gerrit.wikimedia.org/r/299777
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I240450bb0fbb45c668acd4b171bf083f678a39fb
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Yuvipanda <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
