Page MenuHomePhabricator

add datacenter-ops to dhcp /install-server and allow to run puppet commands
Closed, ResolvedPublic

Description

suggesting to add the datacenter-ops admin group to the DHCP /install-server roles (currently carbon) which is useful because you need to run puppet there and sometimes debug when adding new servers / MAC addresses to DHCP during installs

Event Timeline

Dzahn raised the priority of this task from to Needs Triage.
Dzahn updated the task description. (Show Details)
Dzahn added a project: SRE-Access-Requests.
Dzahn subscribed.
Restricted Application added subscribers: StudiesWorld, Aklapper. · View Herald Transcript
Dzahn set Security to None.

Change 264994 had a related patch set uploaded (by Dzahn):
admin: add datacenter-ops to install-server role

https://gerrit.wikimedia.org/r/264994

akosiaris triaged this task as Medium priority.Jan 20 2016, 1:05 PM
akosiaris subscribed.

The change misses the "you need to run puppet there" part though

Dzahn renamed this task from add datacenter-ops to dhcp /install-server to add datacenter-ops to dhcp /install-server and allow to run puppet commands.Jan 20 2016, 5:40 PM

thanks @akosiaris i amended the change and edited the title here to add the ability to run puppet commands. i changed the "puppet cert *" to "puppet *" in the sudo config.

Added a comment about 'puppet * ' allowing puppet apply

Amended to just allow 'puppet agent -t -v' specifically and not other puppet commands in response to Alex' comment.

Please note that the request as stated above (as of the date of this comment) was reviewed and approved in the operations meeting. (I'm merely posting the result, this still needs followup for implementation.)

Change 264994 merged by Dzahn:
admin: add dc-ops to install-server, allow puppet agent -t -v

https://gerrit.wikimedia.org/r/264994

Dzahn claimed this task.

on carbon:

Notice: /Stage[main]/Admin/Admin::Hashuser[pt1979]/Admin::User[pt1979]/File[/home/pt1979]/ensure: created

Okay test and i was able to login in. Thanks.