Filippo Giunchedi has uploaded a new change for review.
https://gerrit.wikimedia.org/r/302471
Change subject: introduce thumbor-admins group
......................................................................
introduce thumbor-admins group
Bug: T139606
Change-Id: I7cbf52e25e60d00634265cbbcc0613c780c7772b
---
A hieradata/role/common/thumbor.yaml
M modules/admin/data/data.yaml
2 files changed, 11 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/71/302471/1
diff --git a/hieradata/role/common/thumbor.yaml
b/hieradata/role/common/thumbor.yaml
new file mode 100644
index 0000000..f03278f
--- /dev/null
+++ b/hieradata/role/common/thumbor.yaml
@@ -0,0 +1,2 @@
+admin::groups:
+ - thumbor-admins
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 98111e4..e37fd1c 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -554,6 +554,15 @@
'ALL = NOPASSWD: /bin/systemctl stop
eventlogging-service-eventbus.service',
'ALL = NOPASSWD: /bin/systemctl restart
eventlogging-service-eventbus.service',
'ALL = NOPASSWD: /bin/journalctl *']
+ thumbor-admins:
+ gid: 786
+ description: Admins for Thumbor image scaling
+ members: [gilles]
+ privileges: ['ALL = NOPASSWD: /bin/systemctl mask thumbor*',
+ 'ALL = NOPASSWD: /bin/systemctl unmask thumbor*',
+ 'ALL = NOPASSWD: /bin/systemctl start thumbor*',
+ 'ALL = NOPASSWD: /bin/systemctl stop thumbor*',
+ 'ALL = (thumbor) NOPASSWD: ALL']
users:
rush:
ensure: present
--
To view, visit https://gerrit.wikimedia.org/r/302471
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I7cbf52e25e60d00634265cbbcc0613c780c7772b
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi <fgiunch...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
