Dzahn has uploaded a new change for review. (
https://gerrit.wikimedia.org/r/394102 )
Change subject: admins: new group wikidata-admins, add on canaries,maint
......................................................................
admins: new group wikidata-admins, add on canaries,maint
Per T179317, create a new admin group for the needs of
Wikidata infrastructure admins (currently this translates
to Hoo).
Create new admin group wikidata-admins.
To cover the requests from T179317#3788865, add on roles
- mediawiki::canary_appserver
- mediawiki_maintenance (terbium/wasat)
- cache::canary (cp1008) (or are really all cache servers needed?)
Adding the sudo privileges and Hoo as member will be a second change.
Bug: T179317
Change-Id: Ia7ce36079b04e629aa0a8464074c255680c2d31b
---
M hieradata/role/common/cache/canary.yaml
M hieradata/role/common/mediawiki/canary_appserver.yaml
M hieradata/role/common/mediawiki_maintenance.yaml
M modules/admin/data/data.yaml
4 files changed, 7 insertions(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/02/394102/1
diff --git a/hieradata/role/common/cache/canary.yaml
b/hieradata/role/common/cache/canary.yaml
index a6356ec..ec2fdee 100644
--- a/hieradata/role/common/cache/canary.yaml
+++ b/hieradata/role/common/cache/canary.yaml
@@ -7,6 +7,7 @@
standard::has_ganglia: false
admin::groups:
- perf-roots
+ - wikidata-admins
prometheus::node_exporter::collectors_extra:
- qdisc
- meminfo_numa
diff --git a/hieradata/role/common/mediawiki/canary_appserver.yaml
b/hieradata/role/common/mediawiki/canary_appserver.yaml
index 10e7a9e..d7cae8d 100644
--- a/hieradata/role/common/mediawiki/canary_appserver.yaml
+++ b/hieradata/role/common/mediawiki/canary_appserver.yaml
@@ -7,6 +7,7 @@
admin::groups:
- deployment
- perf-roots
+ - wikidata-admins
hhvm::extra::fcgi:
hhvm:
mysql:
diff --git a/hieradata/role/common/mediawiki_maintenance.yaml
b/hieradata/role/common/mediawiki_maintenance.yaml
index e89dadf..df8597d 100644
--- a/hieradata/role/common/mediawiki_maintenance.yaml
+++ b/hieradata/role/common/mediawiki_maintenance.yaml
@@ -2,6 +2,7 @@
- restricted
- deployment
- ldap-admins
+ - wikidata-admins
profile::base::domain_search:
- wikimedia.org
- eqiad.wmnet
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index b35cc2d..df1fd9b 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -625,7 +625,10 @@
members: [mobrovac, ppchelko, eevans]
privileges: ['ALL = NOPASSWD: /usr/sbin/service cpjobqueue *',
'ALL = (cpjobqueue) NOPASSWD: ALL']
-
+ wikidata-admins:
+ description: Admins working on Wikidata Infrastructure issues
+ gid: 797
+ members: []
users:
rush:
ensure: present
--
To view, visit https://gerrit.wikimedia.org/r/394102
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ia7ce36079b04e629aa0a8464074c255680c2d31b
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
