Elukey has submitted this change and it was merged.
Change subject: Add the druid-admins group for the Analytics team
......................................................................
Add the druid-admins group for the Analytics team
This group will be used to manage the Analytics Druid cluster.
The new grup includes sudo capabilities for the Java daemons running
on each node of the cluster.
Used the 788 group number after a chat with Filippo that is introducing
thumbor-admins.
Bug: T144726
Change-Id: I758bf8dd2d42f358f9bd0c18ea10f757870345fe
---
M hieradata/role/common/analytics_cluster/druid/worker.yaml
M modules/admin/data/data.yaml
2 files changed, 16 insertions(+), 0 deletions(-)
Approvals:
Elukey: Looks good to me, approved
jenkins-bot: Verified
diff --git a/hieradata/role/common/analytics_cluster/druid/worker.yaml
b/hieradata/role/common/analytics_cluster/druid/worker.yaml
index dd1a02c..1723be5 100644
--- a/hieradata/role/common/analytics_cluster/druid/worker.yaml
+++ b/hieradata/role/common/analytics_cluster/druid/worker.yaml
@@ -1,3 +1,5 @@
+admin::groups:
+ - druid-admins
debdeploy::grains:
debdeploy-druid:
value: standard
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index cd548d5..626fa05 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -562,6 +562,20 @@
gid: 998
description: Private repo users
members: *ops_members
+ druid-admins:
+ gid: 788
+ description: admins for the Analytics Druid cluster
+ members: [nuria, milimetric, joal, mforns]
+ privileges: ['ALL = NOPASSWD: /bin/systemctl start druid-*.service',
+ 'ALL = NOPASSWD: /bin/systemctl stop druid-*.service',
+ 'ALL = NOPASSWD: /bin/systemctl restart druid-*.service',
+ 'ALL = NOPASSWD: /bin/systemctl mask druid-*.service',
+ 'ALL = NOPASSWD: /bin/systemctl unmask druid-*.service',
+ 'ALL = NOPASSWD: /bin/systemctl start zookeeper.service',
+ 'ALL = NOPASSWD: /bin/systemctl stop zookeeper.service',
+ 'ALL = NOPASSWD: /bin/systemctl restart zookeeper.service',
+ 'ALL = NOPASSWD: /bin/systemctl mask zookeeper.service',
+ 'ALL = NOPASSWD: /bin/systemctl unmask zookeeper.service']
users:
rush:
--
To view, visit https://gerrit.wikimedia.org/r/308544
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I758bf8dd2d42f358f9bd0c18ea10f757870345fe
Gerrit-PatchSet: 5
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Elukey <[email protected]>
Gerrit-Reviewer: Alex Monk <[email protected]>
Gerrit-Reviewer: Cmjohnson <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Elukey <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Ottomata <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
