Filippo Giunchedi has submitted this change and it was merged. (
https://gerrit.wikimedia.org/r/367815 )
Change subject: Allow mwdeploy user to restart jobchron
......................................................................
Allow mwdeploy user to restart jobchron
This is needed for deployment of jobrunners.
Bug: T129148
Change-Id: I5defc88d51d94d78ebf3d580dde4e5aaa42266ac
---
M modules/mediawiki/manifests/jobrunner.pp
1 file changed, 8 insertions(+), 0 deletions(-)
Approvals:
Krinkle: Looks good to me, but someone else must approve
jenkins-bot: Verified
Filippo Giunchedi: Looks good to me, approved
diff --git a/modules/mediawiki/manifests/jobrunner.pp
b/modules/mediawiki/manifests/jobrunner.pp
index 9b2bf65..71e17b3 100644
--- a/modules/mediawiki/manifests/jobrunner.pp
+++ b/modules/mediawiki/manifests/jobrunner.pp
@@ -20,10 +20,18 @@
include ::passwords::redis
+ # a rule for the `jobrunner` service:
+ #
+ # ALL=(root) NOPASSWD: /usr/sbin/service jobrunner *
+ #
+ # will be added by scap::target as a result of defining `service_name`
scap::target { 'jobrunner/jobrunner':
deploy_user => 'mwdeploy',
manage_user => false,
service_name => 'jobrunner',
+ sudo_rules => [
+ 'ALL=(root) NOPASSWD: /usr/sbin/service jobchron *'
+ ],
}
$dispatcher = template('mediawiki/jobrunner/dispatcher.erb')
--
To view, visit https://gerrit.wikimedia.org/r/367815
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I5defc88d51d94d78ebf3d580dde4e5aaa42266ac
Gerrit-PatchSet: 4
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Thcipriani <tcipri...@wikimedia.org>
Gerrit-Reviewer: Alex Monk <kren...@gmail.com>
Gerrit-Reviewer: Filippo Giunchedi <fgiunch...@wikimedia.org>
Gerrit-Reviewer: Giuseppe Lavagetto <glavage...@wikimedia.org>
Gerrit-Reviewer: Krinkle <krinklem...@gmail.com>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
