Alexandros Kosiaris has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/398276 )

Change subject: WIP: Populate the docker group in admin module
......................................................................

WIP: Populate the docker group in admin module

Let's see if we can reuse the docker group instead of having to devise
sudo rules

Bug: T182860
Change-Id: I115cebfa5ba8592d46fbfa6b42c14f6b92eeed79
---
M hieradata/role/common/ci/master.yaml
M modules/admin/data/data.yaml
2 files changed, 4 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/76/398276/1

diff --git a/hieradata/role/common/ci/master.yaml 
b/hieradata/role/common/ci/master.yaml
index 4acdf78..791ad2f 100644
--- a/hieradata/role/common/ci/master.yaml
+++ b/hieradata/role/common/ci/master.yaml
@@ -2,6 +2,7 @@
   - contint-users
   - contint-admins
   - contint-roots
+  - docker
 cluster: misc
 standard::has_ganglia: false
 contactgroups: 'admins,contint'
diff --git a/modules/admin/data/data.yaml b/modules/admin/data/data.yaml
index 26c5e8c..8dcf9cc 100644
--- a/modules/admin/data/data.yaml
+++ b/modules/admin/data/data.yaml
@@ -648,6 +648,9 @@
     privileges: ['ALL = NOPASSWD: /bin/journalctl *',
                  'ALL = NOPASSWD: /bin/dmesg *',
                  'ALL = (syslog) NOPASSWD: ALL']
+  docker:
+    description: People who can use the docker group as provisioned by docker. 
No gid on purpose
+    members: [akosiaris]
 
 users:
   rush:

-- 
To view, visit https://gerrit.wikimedia.org/r/398276
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I115cebfa5ba8592d46fbfa6b42c14f6b92eeed79
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Alexandros Kosiaris <akosia...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to