Rush has submitted this change and it was merged. (
https://gerrit.wikimedia.org/r/346838 )
Change subject: admin: add a group for cloud services roots (wmcs-roots)
......................................................................
admin: add a group for cloud services roots (wmcs-roots)
* With initial role applications
Change-Id: I28d028ac7e6203b7f00a11043ff0d2907c232b85
Bug: T162404
---
M hieradata/role/common/horizon.yaml
M hieradata/role/common/labs/dns.yaml
M hieradata/role/common/labs/openstack/nova/api.yaml
M hieradata/role/common/labs/openstack/nova/compute.yaml
M hieradata/role/common/labs/openstack/nova/controller.yaml
M hieradata/role/common/labs/puppetmaster.yaml
M modules/admin/data/data.yaml
7 files changed, 23 insertions(+), 0 deletions(-)
Approvals:
Rush: Looks good to me, approved
jenkins-bot: Verified
diff --git a/hieradata/role/common/horizon.yaml
b/hieradata/role/common/horizon.yaml
index 4860ae1..2b69613 100644
--- a/hieradata/role/common/horizon.yaml
+++ b/hieradata/role/common/horizon.yaml
@@ -4,3 +4,6 @@
value: standard
memcached::ip: 127.0.0.1
+
+admin::groups:
+ - wmcs-roots
diff --git a/hieradata/role/common/labs/dns.yaml
b/hieradata/role/common/labs/dns.yaml
index 323fead..ac02544 100644
--- a/hieradata/role/common/labs/dns.yaml
+++ b/hieradata/role/common/labs/dns.yaml
@@ -1,3 +1,6 @@
debdeploy::grains:
debdeploy-labsdns:
value: standard
+
+admin::groups:
+ - wmcs-roots
diff --git a/hieradata/role/common/labs/openstack/nova/api.yaml
b/hieradata/role/common/labs/openstack/nova/api.yaml
index 841d39d..1532cee 100644
--- a/hieradata/role/common/labs/openstack/nova/api.yaml
+++ b/hieradata/role/common/labs/openstack/nova/api.yaml
@@ -4,3 +4,6 @@
debdeploy::grains:
debdeploy-nova-api:
value: standard
+
+admin::groups:
+ - wmcs-roots
diff --git a/hieradata/role/common/labs/openstack/nova/compute.yaml
b/hieradata/role/common/labs/openstack/nova/compute.yaml
index 7b4fdc5..7fe7f6f 100644
--- a/hieradata/role/common/labs/openstack/nova/compute.yaml
+++ b/hieradata/role/common/labs/openstack/nova/compute.yaml
@@ -1,3 +1,6 @@
debdeploy::grains:
debdeploy-nova-compute:
value: standard
+
+admin::groups:
+ - wmcs-roots
diff --git a/hieradata/role/common/labs/openstack/nova/controller.yaml
b/hieradata/role/common/labs/openstack/nova/controller.yaml
index aa6f391..47d03e27 100644
--- a/hieradata/role/common/labs/openstack/nova/controller.yaml
+++ b/hieradata/role/common/labs/openstack/nova/controller.yaml
@@ -1,3 +1,6 @@
debdeploy::grains:
debdeploy-nova-control:
value: standard
+
+admin::groups:
+ - wmcs-roots
diff --git a/hieradata/role/common/labs/puppetmaster.yaml
b/hieradata/role/common/labs/puppetmaster.yaml
index ca167dd..8771de6 100644
--- a/hieradata/role/common/labs/puppetmaster.yaml
+++ b/hieradata/role/common/labs/puppetmaster.yaml
@@ -5,3 +5,6 @@
labspuppetbackend::mysql_username: "labspuppet"
labspuppetbackend::statsd_host: "labmon1001.eqiad.wmnet"
labspuppetbackend::statsd_prefix: "labs.puppetbackend"
+
+admin::groups:
+ - wmcs-roots
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 12da4cf..4a24354 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -594,6 +594,11 @@
members: [gwicke, ppchelko, eevans, mobrovac, jdlrobson, bsitzmann]
privileges: ['ALL = NOPASSWD: /usr/sbin/service trendingedits *',
'ALL = (trendingedits) NOPASSWD: ALL']
+ wmcs-roots:
+ description: root for cloud services infrastructure
+ gid: 792
+ members: []
+ privileges: ['ALL = (ALL) NOPASSWD: ALL']
users:
rush:
--
To view, visit https://gerrit.wikimedia.org/r/346838
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I28d028ac7e6203b7f00a11043ff0d2907c232b85
Gerrit-PatchSet: 7
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Rush <r...@wikimedia.org>
Gerrit-Reviewer: Alex Monk <kren...@gmail.com>
Gerrit-Reviewer: Giuseppe Lavagetto <glavage...@wikimedia.org>
Gerrit-Reviewer: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Rush <r...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
