Yuvipanda has submitted this change and it was merged.

Change subject: grafana: Expand edit access in labs grafana
......................................................................


grafana: Expand edit access in labs grafana

This is anyone with shell access to any project on labs.

Bug: T120295
Change-Id: Idc8c17f57bf80160ed908c2ce59c00b5c5a5011c
---
M modules/role/manifests/grafana/labs.pp
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  Yuvipanda: Verified; Looks good to me, approved



diff --git a/modules/role/manifests/grafana/labs.pp 
b/modules/role/manifests/grafana/labs.pp
index fa65510..9af2bb0 100644
--- a/modules/role/manifests/grafana/labs.pp
+++ b/modules/role/manifests/grafana/labs.pp
@@ -6,7 +6,6 @@
 class role::grafana::labs {
     include ::passwords::grafana::labs
 
-    # FIXME: Relax this to include anyone with a LDAP account
     class { '::role::grafana::base':
         readonly_domain         => 'grafana-labs.wikimedia.org',
         admin_domain            => 'grafana-labs-admin.wikimedia.org',
@@ -18,6 +17,7 @@
             'cn=nda,ou=groups,dc=wikimedia,dc=org',
             'cn=wmf,ou=groups,dc=wikimedia,dc=org',
             'cn=grafana-admin,ou=groups,dc=wikimedia,dc=org',
+            'cn=project-bastion,ou=groups,dc=wikimedia,dc=org'
         ]
     }
 }

-- 
To view, visit https://gerrit.wikimedia.org/r/300076
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Idc8c17f57bf80160ed908c2ce59c00b5c5a5011c
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Yuvipanda <[email protected]>
Gerrit-Reviewer: Yuvipanda <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to