[MediaWiki-commits] [Gerrit] admin: introduce restbase-admins group - change (operations/puppet)

2016-01-11 Thread Mark Bergsma (Code Review)
Mark Bergsma has submitted this change and it was merged.

Change subject: admin: introduce restbase-admins group
..


admin: introduce restbase-admins group

also deploy where needed

Change-Id: Iedebf878900c513aad43cac9617f0d1e62eaa951
---
M hieradata/hosts/rutherfordium.yaml
M hieradata/role/common/restbase.yaml
M modules/admin/data/data.yaml
3 files changed, 11 insertions(+), 0 deletions(-)

Approvals:
  Mark Bergsma: Looks good to me, approved
  jenkins-bot: Verified



diff --git a/hieradata/hosts/rutherfordium.yaml 
b/hieradata/hosts/rutherfordium.yaml
index c3ce322..b90b0dd 100644
--- a/hieradata/hosts/rutherfordium.yaml
+++ b/hieradata/hosts/rutherfordium.yaml
@@ -51,6 +51,7 @@
   - releasers-mobile
   - researchers
   - restbase-roots
+  - restbase-admins
   - restricted
   - snapshot-admins
   - statistics-admins
diff --git a/hieradata/role/common/restbase.yaml 
b/hieradata/role/common/restbase.yaml
index 1fb5478..b0c8d5f 100644
--- a/hieradata/role/common/restbase.yaml
+++ b/hieradata/role/common/restbase.yaml
@@ -21,3 +21,4 @@
 
 admin::groups:
   - restbase-roots
+  - restbase-admins
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 034867e..28caa2d 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -440,6 +440,15 @@
 description: Group of users running penetration tests
 gid: 768
 members: []
+  restbase-admins:
+gid: 769
+description: group of restbase admins
+members: [gwicke]
+privileges: ['ALL = NOPASSWD: /usr/sbin/service cassandra *',
+ 'ALL = (cassandra) NOPASSWD: ALL',
+ 'ALL = NOPASSWD: /usr/sbin/service restbase *',
+ 'ALL = (restbase) NOPASSWD: ALL',
+ 'ALL = NOPASSWD: /bin/journalctl *']
 users:
   rush:
 ensure: present

-- 
To view, visit https://gerrit.wikimedia.org/r/263349
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Iedebf878900c513aad43cac9617f0d1e62eaa951
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi 
Gerrit-Reviewer: Mark Bergsma 
Gerrit-Reviewer: jenkins-bot <>

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits


[MediaWiki-commits] [Gerrit] admin: introduce restbase-admins group - change (operations/puppet)

2016-01-11 Thread Filippo Giunchedi (Code Review)
Filippo Giunchedi has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/263349

Change subject: admin: introduce restbase-admins group
..

admin: introduce restbase-admins group

also deploy where needed

Change-Id: Iedebf878900c513aad43cac9617f0d1e62eaa951
---
M hieradata/hosts/rutherfordium.yaml
M hieradata/role/common/restbase.yaml
M modules/admin/data/data.yaml
3 files changed, 11 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/49/263349/1

diff --git a/hieradata/hosts/rutherfordium.yaml 
b/hieradata/hosts/rutherfordium.yaml
index c3ce322..b90b0dd 100644
--- a/hieradata/hosts/rutherfordium.yaml
+++ b/hieradata/hosts/rutherfordium.yaml
@@ -51,6 +51,7 @@
   - releasers-mobile
   - researchers
   - restbase-roots
+  - restbase-admins
   - restricted
   - snapshot-admins
   - statistics-admins
diff --git a/hieradata/role/common/restbase.yaml 
b/hieradata/role/common/restbase.yaml
index 1fb5478..b0c8d5f 100644
--- a/hieradata/role/common/restbase.yaml
+++ b/hieradata/role/common/restbase.yaml
@@ -21,3 +21,4 @@
 
 admin::groups:
   - restbase-roots
+  - restbase-admins
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 034867e..28caa2d 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -440,6 +440,15 @@
 description: Group of users running penetration tests
 gid: 768
 members: []
+  restbase-admins:
+gid: 769
+description: group of restbase admins
+members: [gwicke]
+privileges: ['ALL = NOPASSWD: /usr/sbin/service cassandra *',
+ 'ALL = (cassandra) NOPASSWD: ALL',
+ 'ALL = NOPASSWD: /usr/sbin/service restbase *',
+ 'ALL = (restbase) NOPASSWD: ALL',
+ 'ALL = NOPASSWD: /bin/journalctl *']
 users:
   rush:
 ensure: present

-- 
To view, visit https://gerrit.wikimedia.org/r/263349
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Iedebf878900c513aad43cac9617f0d1e62eaa951
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi 

___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits