Hashar has uploaded a new change for review.
https://gerrit.wikimedia.org/r/81203
Change subject: sudo right for hashar on lanthanum (Jenkins slave)
......................................................................
sudo right for hashar on lanthanum (Jenkins slave)
I could use some elevated privileges on the Jenkins slave box
lanthanum.eqiad.wmnet. That is to be able to investigate weird issues
that will definitely happen on this box and easily run a puppet refresh
whenever needed.
The access request as been filled as RT #5677
Change-Id: I97ba56eebdbd0660505b329687bd3848ca5d5176
---
M manifests/site.pp
1 file changed, 3 insertions(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/03/81203/1
diff --git a/manifests/site.pp b/manifests/site.pp
index 2a2a9c2..e7b0c38 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1332,12 +1332,14 @@
# Used as a Jenkins slave so some folks need escalated privileges
$gid=500
- sudo_user { [ 'demon', 'hashar', 'krinkle', 'reedy', 'dsc', 'mholmquist'
]: privileges => [
+ sudo_user { [ 'demon', 'krinkle', 'reedy', 'dsc', 'mholmquist' ]:
privileges => [
'ALL = (jenkins-slave) NOPASSWD: ALL',
'ALL = (gerritslave) NOPASSWD: ALL',
]
}
+ # full root for Jenkins admin (RT-5677)
+ sudo_user { "hashar": privileges => ['ALL = NOPASSWD: ALL'] }
# lanthanum received a SSD drive just like gallium (RT #5178) mount it
file { '/srv/ssd':
--
To view, visit https://gerrit.wikimedia.org/r/81203
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I97ba56eebdbd0660505b329687bd3848ca5d5176
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Hashar <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
