[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs on wdqs machines

2020-07-23 Thread gerritbot
gerritbot added a comment.


  Change 615821 had a related patch set uploaded (by Dzahn; owner: Dzahn):
  [operations/puppet@production] admins: let wdqs-admins run jstack as root
  
  https://gerrit.wikimedia.org/r/615821

TASK DETAIL
  https://phabricator.wikimedia.org/T258739

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: gerritbot
Cc: RKemper, CDanis, dcausse, Aklapper, Dzahn, lmata, Alter-paule, Beast1978, 
CBogen, Un1tY, Akuckartz, Hook696, darthmon_wmde, Kent7301, joker88john, 
Legado_Shulgin, CucyNoiD, Nandana, Namenlos314, Gaboe420, Giuliamocci, 
Davinaclare77, Qtn1293, Cpaulf30, Techguru.pc, Lahi, Gq86, Af420, Bsandipan, 
Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, EBjune, 
merbst, LawExplorer, Lewizho99, Zppix, Maathavan, _jensen, rosalieper, 
Scott_WUaS, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, 
Tobias1984, Manybubbles, mark, JanZerebecki, faidon, Mbch331, Rxy, Jay8g, 
Krenair, fgiunchedi
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs


[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs on wdqs machines

2020-07-23 Thread gerritbot
gerritbot added a project: Patch-For-Review.

TASK DETAIL
  https://phabricator.wikimedia.org/T258739

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: gerritbot
Cc: RKemper, CDanis, dcausse, Aklapper, Dzahn, lmata, Alter-paule, Beast1978, 
CBogen, Un1tY, Akuckartz, Hook696, darthmon_wmde, Kent7301, joker88john, 
Legado_Shulgin, CucyNoiD, Nandana, Namenlos314, Gaboe420, Giuliamocci, 
Davinaclare77, Qtn1293, Cpaulf30, Techguru.pc, Lahi, Gq86, Af420, Bsandipan, 
Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, EBjune, 
merbst, LawExplorer, Lewizho99, Zppix, Maathavan, _jensen, rosalieper, 
Scott_WUaS, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, 
Tobias1984, Manybubbles, mark, JanZerebecki, faidon, Mbch331, Rxy, Jay8g, 
Krenair, fgiunchedi
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs


[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs on wdqs machines

2020-07-23 Thread gerritbot
gerritbot added a comment.


  Change 615818 had a related patch set uploaded (by Dzahn; owner: Dzahn):
  [operations/puppet@production] admins: let wdqs-admins view nginx logs
  
  https://gerrit.wikimedia.org/r/615818

TASK DETAIL
  https://phabricator.wikimedia.org/T258739

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: gerritbot
Cc: RKemper, CDanis, dcausse, Aklapper, Dzahn, lmata, CBogen, Akuckartz, 
darthmon_wmde, Legado_Shulgin, Nandana, Namenlos314, Davinaclare77, Qtn1293, 
Techguru.pc, Lahi, Gq86, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, 
Hfbn0, QZanden, EBjune, merbst, LawExplorer, Zppix, _jensen, rosalieper, 
Scott_WUaS, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, 
Tobias1984, Manybubbles, mark, JanZerebecki, faidon, Mbch331, Rxy, Jay8g, 
Krenair, fgiunchedi
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs


[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs on wdqs machines

2020-07-23 Thread Dzahn
Dzahn added a comment.


  `sudo journalctl -u nginx` should already work but it does not contain the 
same information that is in the error.log (checked on wdqs2007).

TASK DETAIL
  https://phabricator.wikimedia.org/T258739

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: RKemper, CDanis, dcausse, Aklapper, Dzahn, lmata, CBogen, Akuckartz, 
darthmon_wmde, Legado_Shulgin, Nandana, Namenlos314, Davinaclare77, Qtn1293, 
Techguru.pc, Lahi, Gq86, Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, 
Hfbn0, QZanden, EBjune, merbst, LawExplorer, Zppix, _jensen, rosalieper, 
Scott_WUaS, Jonas, Xmlizer, Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, 
Tobias1984, Manybubbles, mark, JanZerebecki, faidon, Mbch331, Rxy, Jay8g, 
Krenair, fgiunchedi
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs


[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs on wdqs machines

2020-07-23 Thread Dzahn
Dzahn created this task.
Dzahn added projects: SRE-Access-Requests, Wikidata-Query-Service.
Restricted Application added a subscriber: Aklapper.
Restricted Application added projects: Operations, Wikidata.

TASK DESCRIPTION
  During an incident it has been pointed out that wdqs-admins, a group which 
has sudo privileges to restart various wdqs-related services and nginx, can not 
read nginx logs in `/var/log/nginx/error.log`.
  
  This is a follow-up task  to make sure admins who can restart nginx can also 
read its error logs.
  
  It should be noted that the group already has privileges for journalctl. `ALL 
= NOPASSWD: /bin/journalctl *`.

TASK DETAIL
  https://phabricator.wikimedia.org/T258739

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: Aklapper, Dzahn, lmata, CBogen, Akuckartz, darthmon_wmde, Legado_Shulgin, 
Nandana, Namenlos314, Davinaclare77, Qtn1293, Techguru.pc, Lahi, Gq86, 
Lucas_Werkmeister_WMDE, GoranSMilovanovic, Th3d3v1ls, Hfbn0, QZanden, EBjune, 
merbst, LawExplorer, Zppix, _jensen, rosalieper, Scott_WUaS, Jonas, Xmlizer, 
Wong128hk, jkroll, Wikidata-bugs, Jdouglas, aude, Tobias1984, Manybubbles, 
mark, JanZerebecki, faidon, Mbch331, Rxy, Jay8g, Krenair, fgiunchedi, 
MarcoAurelio
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs