[MediaWiki-commits] [Gerrit] admin: introduce restbase-admins group - change (operations/puppet)
Mark Bergsma has submitted this change and it was merged. Change subject: admin: introduce restbase-admins group .. admin: introduce restbase-admins group also deploy where needed Change-Id: Iedebf878900c513aad43cac9617f0d1e62eaa951 --- M hieradata/hosts/rutherfordium.yaml M hieradata/role/common/restbase.yaml M modules/admin/data/data.yaml 3 files changed, 11 insertions(+), 0 deletions(-) Approvals: Mark Bergsma: Looks good to me, approved jenkins-bot: Verified diff --git a/hieradata/hosts/rutherfordium.yaml b/hieradata/hosts/rutherfordium.yaml index c3ce322..b90b0dd 100644 --- a/hieradata/hosts/rutherfordium.yaml +++ b/hieradata/hosts/rutherfordium.yaml @@ -51,6 +51,7 @@ - releasers-mobile - researchers - restbase-roots + - restbase-admins - restricted - snapshot-admins - statistics-admins diff --git a/hieradata/role/common/restbase.yaml b/hieradata/role/common/restbase.yaml index 1fb5478..b0c8d5f 100644 --- a/hieradata/role/common/restbase.yaml +++ b/hieradata/role/common/restbase.yaml @@ -21,3 +21,4 @@ admin::groups: - restbase-roots + - restbase-admins diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml index 034867e..28caa2d 100644 --- a/modules/admin/data/data.yaml +++ b/modules/admin/data/data.yaml @@ -440,6 +440,15 @@ description: Group of users running penetration tests gid: 768 members: [] + restbase-admins: +gid: 769 +description: group of restbase admins +members: [gwicke] +privileges: ['ALL = NOPASSWD: /usr/sbin/service cassandra *', + 'ALL = (cassandra) NOPASSWD: ALL', + 'ALL = NOPASSWD: /usr/sbin/service restbase *', + 'ALL = (restbase) NOPASSWD: ALL', + 'ALL = NOPASSWD: /bin/journalctl *'] users: rush: ensure: present -- To view, visit https://gerrit.wikimedia.org/r/263349 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: Iedebf878900c513aad43cac9617f0d1e62eaa951 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Filippo GiunchediGerrit-Reviewer: Mark Bergsma Gerrit-Reviewer: jenkins-bot <> ___ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
[MediaWiki-commits] [Gerrit] admin: introduce restbase-admins group - change (operations/puppet)
Filippo Giunchedi has uploaded a new change for review. https://gerrit.wikimedia.org/r/263349 Change subject: admin: introduce restbase-admins group .. admin: introduce restbase-admins group also deploy where needed Change-Id: Iedebf878900c513aad43cac9617f0d1e62eaa951 --- M hieradata/hosts/rutherfordium.yaml M hieradata/role/common/restbase.yaml M modules/admin/data/data.yaml 3 files changed, 11 insertions(+), 0 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/49/263349/1 diff --git a/hieradata/hosts/rutherfordium.yaml b/hieradata/hosts/rutherfordium.yaml index c3ce322..b90b0dd 100644 --- a/hieradata/hosts/rutherfordium.yaml +++ b/hieradata/hosts/rutherfordium.yaml @@ -51,6 +51,7 @@ - releasers-mobile - researchers - restbase-roots + - restbase-admins - restricted - snapshot-admins - statistics-admins diff --git a/hieradata/role/common/restbase.yaml b/hieradata/role/common/restbase.yaml index 1fb5478..b0c8d5f 100644 --- a/hieradata/role/common/restbase.yaml +++ b/hieradata/role/common/restbase.yaml @@ -21,3 +21,4 @@ admin::groups: - restbase-roots + - restbase-admins diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml index 034867e..28caa2d 100644 --- a/modules/admin/data/data.yaml +++ b/modules/admin/data/data.yaml @@ -440,6 +440,15 @@ description: Group of users running penetration tests gid: 768 members: [] + restbase-admins: +gid: 769 +description: group of restbase admins +members: [gwicke] +privileges: ['ALL = NOPASSWD: /usr/sbin/service cassandra *', + 'ALL = (cassandra) NOPASSWD: ALL', + 'ALL = NOPASSWD: /usr/sbin/service restbase *', + 'ALL = (restbase) NOPASSWD: ALL', + 'ALL = NOPASSWD: /bin/journalctl *'] users: rush: ensure: present -- To view, visit https://gerrit.wikimedia.org/r/263349 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: Iedebf878900c513aad43cac9617f0d1e62eaa951 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Filippo Giunchedi___ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits