Maniphest T116921

Remove CI root access from scandium
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	hashar
	Oct 28 2015, 3:11 PM

Tags

Referenced Files

None

Subscribers

View All 9 Subscribers

Description

Once scandium is ready, we should remove root access for CI people.

In puppet hieradata/hosts/scandium.yaml drop admin::groups: - contint-roots

Details

	Subject	Repo	Branch	Lines +/-
	admin: remove CI root access from scandium	operations/puppet	production	+0 -1
	contint: grant zuul-merger sudo rules	operations/puppet	production	+6 -1

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		hashar	T70480 Scale merge operations (tracking)
		Resolved		hashar	T95046 install/deploy scandium as zuul merger (ci) server
		Resolved		hashar	T116921 Remove CI root access from scandium
		Resolved		Andrew	T119526 Give contint-admins sudo rights to start/stop zuul-merger

Event Timeline

hashar created this task.Oct 28 2015, 3:11 PM

hashar claimed this task.

hashar raised the priority of this task from to Medium.

hashar updated the task description. (Show Details)

hashar added projects: SRE, Continuous-Integration-Scaling.

hashar updated the task description. (Show Details)

hashar set Security to None.

hashar added subscribers: Matanya, Andrew, • chasemp and 4 others.

hashar moved this task from Backlog to Backlog - ops related on the Continuous-Integration-Scaling board.Nov 2 2015, 1:45 PM

Change 254129 had a related patch set uploaded (by Hashar):
contint: grant zuul-merger sudo rules

https://gerrit.wikimedia.org/r/254129

Change 254130 had a related patch set uploaded (by Hashar):
admin: remove CI root access from scandium

https://gerrit.wikimedia.org/r/254130

hashar moved this task from Backlog - ops related to In-progress on the Continuous-Integration-Scaling board.Nov 19 2015, 11:37 AM

Andrew added a subtask: T119526: Give contint-admins sudo rights to start/stop zuul-merger.Nov 24 2015, 5:38 PM

hashar mentioned this in T95046: install/deploy scandium as zuul merger (ci) server.Nov 24 2015, 9:26 PM

Change 254129 merged by Dzahn:
contint: grant zuul-merger sudo rules

https://gerrit.wikimedia.org/r/254129

Dzahn closed subtask T119526: Give contint-admins sudo rights to start/stop zuul-merger as Resolved.Nov 30 2015, 6:15 PM

Change 254130 merged by Dzahn:
admin: remove CI root access from scandium

https://gerrit.wikimedia.org/r/254130

Merging that change above did NOT remove the actual access by itself.

This was needed as well:

root@scandium:/etc/sudoers.d# rm contint-roots

Dzahn closed this task as Resolved.Nov 30 2015, 6:47 PM

greg added a project: OKR-Work.Jan 13 2016, 8:32 PM