Ori.livneh has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/90387


Change subject: Rename / promote 'olivneh' => 'ori'
......................................................................

Rename / promote 'olivneh' => 'ori'

- Disable 'olivneh' account in favor of 'ori'. Followed 'dandreescu' example.
- Add 'ori' account; promoted per 5936
- Key verification: https://office.wikimedia.org/wiki/User:Olivneh/key
- Reminder: Key needs to be added on stafford.

I'll clean up leftover 'olivneh' stuff in a follow-up commit once 'ori' is
sorted out.

Change-Id: Iebcf305f423b3a8ca94e214f59ed4e44ec033d7b
RT: 5936
---
M manifests/admins.pp
1 file changed, 33 insertions(+), 10 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/87/90387/1

diff --git a/manifests/admins.pp b/manifests/admins.pp
index 72aedaa..f1e6d7e 100644
--- a/manifests/admins.pp
+++ b/manifests/admins.pp
@@ -2351,19 +2351,21 @@
        }
 
 
+       # Disabled as part of rename to 'ori'.
        class olivneh inherits baseaccount {
                $username = "olivneh"
                $realname = "Ori Livneh"
                $uid = 604
-               unixaccount { $realname: username => $username, uid => $uid, 
gid => $gid }
-               if $manage_home {
-                       ssh_authorized_key { '[email protected]':
-                               ensure  => present,
-                               user    => $username,
-                               type    => 'ssh-rsa',
-                               key     => 
'AAAAB3NzaC1yc2EAAAADAQABAAABAQCxJRZZM8H1g9SfP0pvE3SJZN3zSV4ULDMHr4sEKTYTsIeOZObG99EcauqaaDi8XBBYhvEuAkhL9xTtrG/dWTPXINEAxXl4dmHn4AEg5ycdSj0kvJHK1tbDzCbHNVzJw+3GFcoYKlzRo4qwNHXe6j0pmuX21uh+MRMiCBlrZv6ir3U/guv37Fy3Ng7AOBSC+NSSb3O8Umhb5XVGHr4wh1C28pPx9+CDhwt54ZGwTRbL4UIQ1IPYhiNbI+niK8etXKNXPS2Um6j17SNrAI903+lb2tM2CTWwj3877FvyxZFOfvZovp9uR3kIwIMM5/PyDSy9YvnHMH/O9SWEqEI/aQjR',
-                               require => Unixaccount[$realname],
-                       }
+               $enabled = false
+               $manage_home = false
+
+               unixaccount { $realname: username => $username, uid => $uid, 
gid => $gid, enabled => $enabled }
+               ssh_authorized_key { '[email protected]':
+                       ensure  => absent,
+                       user    => $username,
+                       type    => 'ssh-rsa',
+                       key     => 
'AAAAB3NzaC1yc2EAAAADAQABAAABAQCxJRZZM8H1g9SfP0pvE3SJZN3zSV4ULDMHr4sEKTYTsIeOZObG99EcauqaaDi8XBBYhvEuAkhL9xTtrG/dWTPXINEAxXl4dmHn4AEg5ycdSj0kvJHK1tbDzCbHNVzJw+3GFcoYKlzRo4qwNHXe6j0pmuX21uh+MRMiCBlrZv6ir3U/guv37Fy3Ng7AOBSC+NSSb3O8Umhb5XVGHr4wh1C28pPx9+CDhwt54ZGwTRbL4UIQ1IPYhiNbI+niK8etXKNXPS2Um6j17SNrAI903+lb2tM2CTWwj3877FvyxZFOfvZovp9uR3kIwIMM5/PyDSy9YvnHMH/O9SWEqEI/aQjR',
+                       require => Unixaccount[$realname],
                }
        }
 
@@ -3064,6 +3066,26 @@
         }
     }
 
+    # RT 5936
+    class ori inherits baseaccount {
+        $username = 'ori'
+        $realname = 'Ori Livneh'
+        $uid      = 651
+
+        unixaccount { $realname: username => $username, uid => $uid, gid => 
$gid }
+
+        if $manage_home {
+            Ssh_authorized_key { require => Unixaccount[$realname] }
+
+            ssh_authorized_key { '[email protected]':
+                ensure => present,
+                user   => $username,
+                type   => 'ssh-rsa',
+                key    => 
'AAAAB3NzaC1yc2EAAAADAQABAAABAQDU6nsR19aZ2Ck2HSkdJPdx9rmw8H6UrPlHIBvt1loL8Kku+5tggcE4uTlk/rc5+Fch6EF8un0kPKz55RQCDOhV/kFHrxstBCWf+PJQC1gL9vbqyzia0OyGpCsLzYO81v7NMxkg6gELtxLBtbqE8u7m4X+YkzMxNrlqPfHjIHrVqr4RbLkJiuPvI0VsesAoPCh2MEl0Gkzl+08GDpYplhsxFwPzo9xoFMUi/YCIMKTczOhdg6nPaBMxjUkz7EKPFI3MWZcfP/as3xNL1me7M5N1iJjveGz+rXDqMglub9gN1aDllytzhE0+6h8jEDzC9DtuxGXVB8M/9eCEWsOJlIur',
+            }
+        }
+    }
+
 
        # FIXME: not an admin. This is more like a system account.
        class l10nupdate inherits baseaccount {
@@ -3119,6 +3141,7 @@
        include accounts::marc
        include accounts::mark
        include accounts::midom
+       include accounts::ori # RT 5936
        include accounts::otto
        include accounts::preilly # disabled
        include accounts::py # disabled
@@ -3160,7 +3183,7 @@
        include accounts::neilk # revoked access per RT 2345
        include accounts::nikerabbit
        include accounts::nimishg # revoked
-       include accounts::olivneh
+       include accounts::olivneh # renamed to 'ori'
        include accounts::pdhanda # access revoked
        include accounts::pgehres
        include accounts::raindrift # access revoked per RT 3088

-- 
To view, visit https://gerrit.wikimedia.org/r/90387
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Iebcf305f423b3a8ca94e214f59ed4e44ec033d7b
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ori.livneh <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to