Dzahn has uploaded a new change for review.
https://gerrit.wikimedia.org/r/323121
Change subject: admin: create group striker-admins, add bd808
......................................................................
admin: create group striker-admins, add bd808
Create a new admin group called "striker-admins".
Technically this would be "striker-users" if it doesn't
need sudo/privileges line, "-admins" if it needs some
specific commands with sudo and "-roots" if "ALL ALL"
is requested.
Add the new group in the existing yaml file in Hiera
matching the role striker::web.
Add user bd808 into the group to give him access to host
californium, the only user of the striker role.
Bug: T151424
Change-Id: I1fb88e858120d8dcce311fb59ebcad33952d890f
---
M hieradata/role/common/striker/web.yaml
M modules/admin/data/data.yaml
2 files changed, 7 insertions(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/21/323121/1
diff --git a/hieradata/role/common/striker/web.yaml
b/hieradata/role/common/striker/web.yaml
index f9bc316..f1e44ec 100644
--- a/hieradata/role/common/striker/web.yaml
+++ b/hieradata/role/common/striker/web.yaml
@@ -2,6 +2,9 @@
memcached::ip: 127.0.0.1
nginx::variant: light
+admin::groups:
+ - striker-admins
+
striker::apache::server_name: toolsadmin.wikimedia.org
striker::apache::docroot: /srv/deployment/striker/deploy/public_html
striker::apache::servers:
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 7d4ef8d..1b609e5 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -580,7 +580,10 @@
'ALL = NOPASSWD: /bin/systemctl restart zookeeper.service',
'ALL = NOPASSWD: /bin/systemctl mask zookeeper.service',
'ALL = NOPASSWD: /bin/systemctl unmask zookeeper.service']
-
+ striker-admins:
+ description: Group of Striker admins (T151424)
+ gid: 789
+ members: [bd808]
users:
rush:
ensure: present
--
To view, visit https://gerrit.wikimedia.org/r/323121
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I1fb88e858120d8dcce311fb59ebcad33952d890f
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
