Andrew Bogott has submitted this change and it was merged.
Change subject: Add new group aqs-users for shell and cqlsh access only.
......................................................................
Add new group aqs-users for shell and cqlsh access only.
Added members mforns, madhuvishy and nuria
Bug: T117473
Change-Id: I60a9f5813e0e1739e8c3b33ee1a860eac759af38
---
M hieradata/hosts/rutherfordium.yaml
M hieradata/role/common/aqs.yaml
M modules/admin/data/data.yaml
3 files changed, 7 insertions(+), 1 deletion(-)
Approvals:
Andrew Bogott: Looks good to me, approved
jenkins-bot: Verified
diff --git a/hieradata/hosts/rutherfordium.yaml
b/hieradata/hosts/rutherfordium.yaml
index 47c9c06..34ecc0f 100644
--- a/hieradata/hosts/rutherfordium.yaml
+++ b/hieradata/hosts/rutherfordium.yaml
@@ -10,6 +10,7 @@
- analytics-users
- apertium-admins
- aqs-admins
+ - aqs-users
- bastiononly
- cassandra-test-roots
- chromium-admin
diff --git a/hieradata/role/common/aqs.yaml b/hieradata/role/common/aqs.yaml
index fe4d05a..9358ad1 100644
--- a/hieradata/role/common/aqs.yaml
+++ b/hieradata/role/common/aqs.yaml
@@ -3,6 +3,7 @@
admin::groups:
- aqs-admins
+ - aqs-users
debdeploy::grains:
debdeploy-aqs:
value: standard
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 148f9bf..f11c29e 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -433,7 +433,11 @@
description: users who have root on memcached, varnish and application
servers
members: [krinkle]
privileges: ['ALL = (ALL) NOPASSWD: ALL']
-
+ aqs-users:
+ description: Group of users for the Analytics Query Service
+ gid: 767
+ members: [nuria, mforns, madhuvishy]
+ privileges: ['ALL = NOPASSWD: /usr/bin/cqlsh']
users:
rush:
ensure: present
--
To view, visit https://gerrit.wikimedia.org/r/253467
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I60a9f5813e0e1739e8c3b33ee1a860eac759af38
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <abog...@wikimedia.org>
Gerrit-Reviewer: Andrew Bogott <abog...@wikimedia.org>
Gerrit-Reviewer: Dzahn <dz...@wikimedia.org>
Gerrit-Reviewer: Madhuvishy <mviswanat...@wikimedia.org>
Gerrit-Reviewer: Mforns <mfo...@wikimedia.org>
Gerrit-Reviewer: Nuria <nu...@wikimedia.org>
Gerrit-Reviewer: RobH <r...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
