coren has submitted this change and it was merged.
Change subject: sudo right for hashar on lanthanum (Jenkins slave)
......................................................................
sudo right for hashar on lanthanum (Jenkins slave)
I could use some elevated privileges on the Jenkins slave box
lanthanum.eqiad.wmnet. That is to be able to investigate weird issues
that will definitely happen on this box and easily run a puppet refresh
whenever needed.
The access request as been filled as RT #5677
Change-Id: I97ba56eebdbd0660505b329687bd3848ca5d5176
---
M manifests/site.pp
1 file changed, 3 insertions(+), 1 deletion(-)
Approvals:
coren: Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/site.pp b/manifests/site.pp
index 1203488..7052117 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1335,12 +1335,14 @@
# Used as a Jenkins slave so some folks need escalated privileges
$gid=500
- sudo_user { [ 'demon', 'hashar', 'krinkle', 'reedy', 'dsc', 'mholmquist'
]: privileges => [
+ sudo_user { [ 'demon', 'krinkle', 'reedy', 'dsc', 'mholmquist' ]:
privileges => [
'ALL = (jenkins-slave) NOPASSWD: ALL',
'ALL = (gerritslave) NOPASSWD: ALL',
]
}
+ # full root for Jenkins admin (RT-5677)
+ sudo_user { "hashar": privileges => ['ALL = NOPASSWD: ALL'] }
# lanthanum received a SSD drive just like gallium (RT #5178) mount it
file { '/srv/ssd':
--
To view, visit https://gerrit.wikimedia.org/r/81203
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I97ba56eebdbd0660505b329687bd3848ca5d5176
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Hashar <[email protected]>
Gerrit-Reviewer: Hashar <[email protected]>
Gerrit-Reviewer: coren <[email protected]>
Gerrit-Reviewer: jenkins-bot
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
