[MediaWiki-commits] [Gerrit] icinga: let Madhu run commands from webui - change (operations/puppet)

2016-07-18 Thread Dzahn (Code Review)
Dzahn has submitted this change and it was merged.

Change subject: icinga: let Madhu run commands from webui
..


icinga: let Madhu run commands from webui

Icinga cgi.cfg permissions to run commands like ACK, schedule
downtime, comments, custom notifications etc via the web ui,
for Madhu.

I created the icinga contact in private repo too.
Need to double check to format though against LDAP user, always
get it wrong at first attempt. The right LDAP field must match
the Icinga contact.

Bug:T140422
Change-Id: Ie5b8f4c997702e0219cf246545620f8ed5ae7459
---
M modules/icinga/files/cgi.cfg
1 file changed, 5 insertions(+), 5 deletions(-)

Approvals:
  jenkins-bot: Verified
  Dzahn: Looks good to me, approved



diff --git a/modules/icinga/files/cgi.cfg b/modules/icinga/files/cgi.cfg
index 82c958d..a46ca73 100644
--- a/modules/icinga/files/cgi.cfg
+++ b/modules/icinga/files/cgi.cfg
@@ -131,7 +131,7 @@
 # not use authorization.  You may use an asterisk (*) to
 # authorize any user who has authenticated to the web server.
 
-authorized_for_system_information=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
+authorized_for_system_information=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel,Madhuvishy
 
 
 # CONFIGURATION INFORMATION ACCESS
@@ -142,7 +142,7 @@
 # an asterisk (*) to authorize any user who has authenticated
 # to the web server.
 
-authorized_for_configuration_information=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
+authorized_for_configuration_information=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel,Madhuvishy
 
 
 
@@ -155,7 +155,7 @@
 # You may use an asterisk (*) to authorize any user who has
 # authenticated to the web server.
 
-authorized_for_system_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
+authorized_for_system_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel,Madhuvishy
 
 
 # GLOBAL HOST/SERVICE VIEW ACCESS
@@ -181,8 +181,8 @@
 # authorization).  You may use an asterisk (*) to authorize any
 # user who has authenticated to the web server.
 
-authorized_for_all_service_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
-authorized_for_all_host_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
+authorized_for_all_service_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel,Madhuvishy
+authorized_for_all_host_commands=tim starling,robh,mark 
be

[MediaWiki-commits] [Gerrit] icinga: let Madhu run commands from webui - change (operations/puppet)

2016-07-15 Thread Dzahn (Code Review)
Dzahn has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/299196

Change subject: icinga: let Madhu run commands from webui
..

icinga: let Madhu run commands from webui

Icinga cgi.cfg permissions to run commands like ACK, schedule
downtime, comments, custom notifications etc via the web ui,
for Madhu.

I created the icinga contact in private repo too.
Need to double check to format though against LDAP user, always
get it wrong at first attempt. The right LDAP field must match
the Icinga contact.

Bug:T140422
Change-Id: Ie5b8f4c997702e0219cf246545620f8ed5ae7459
---
M modules/icinga/files/cgi.cfg
1 file changed, 5 insertions(+), 5 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/96/299196/1

diff --git a/modules/icinga/files/cgi.cfg b/modules/icinga/files/cgi.cfg
index 82c958d..a46ca73 100644
--- a/modules/icinga/files/cgi.cfg
+++ b/modules/icinga/files/cgi.cfg
@@ -131,7 +131,7 @@
 # not use authorization.  You may use an asterisk (*) to
 # authorize any user who has authenticated to the web server.
 
-authorized_for_system_information=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
+authorized_for_system_information=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel,Madhuvishy
 
 
 # CONFIGURATION INFORMATION ACCESS
@@ -142,7 +142,7 @@
 # an asterisk (*) to authorize any user who has authenticated
 # to the web server.
 
-authorized_for_configuration_information=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
+authorized_for_configuration_information=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel,Madhuvishy
 
 
 
@@ -155,7 +155,7 @@
 # You may use an asterisk (*) to authorize any user who has
 # authenticated to the web server.
 
-authorized_for_system_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
+authorized_for_system_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel,Madhuvishy
 
 
 # GLOBAL HOST/SERVICE VIEW ACCESS
@@ -181,8 +181,8 @@
 # authorization).  You may use an asterisk (*) to authorize any
 # user who has authenticated to the web server.
 
-authorized_for_all_service_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
-authorized_for_all_host_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel
+authorized_for_all_service_commands=tim starling,robh,mark 
bergsma,domas,arielglenn,cmjohnson,dzahn,jgreen,Faidon Liambotis,katie 
horn,catrope,alexandros kosiaris,springle,ori.livneh,andrew 
bogott,ottomata,rush,Giuseppe Lavagetto,Filippo 
Giunchedi,bblack,manybubbles,Coren,yuvipanda,Muehlenhoff,Jcrespo,20after4,eevans,mobrovac,gwicke,ppchelko,Ema,Elukey,Volans,Gehel,Madhuvishy
+authorized