Requesting access to contint for niedzielski
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	hashar
	Oct 26 2016, 6:59 PM

Description

Username	`niedzielski`
Full name	Stephen Niedzielski

This task is to grant additional permissions for Stephen Niedzielski so he get access to the production continuous integration servers. The purpose is to have the ability to deploy Zuul configuration changes.

Stephen is part of the Mobile apps team and has been maintaining the Jenkins job to run Android tests as well as the underlying infrastructure. He is defacto deploying the Jenkins job but lack access for the Zuul part.

From modules/admin/data running matrix.py niedzielski:

grp/users	niedzielski
analytics-privatedata-users	OK
releasers-mobile	OK
researchers	OK

L3 is signed.

Subscribed:

mobile apps lead + director
contint kabal

Details

	Subject	Repo	Branch	Lines +/-
	admin: add niedzielski to contint-admins	operations/puppet	production	+1 -1

Customize query in gerrit

Event Timeline

hashar created this task.Oct 26 2016, 6:59 PM

Restricted Application added a project: SRE. · View Herald TranscriptOct 26 2016, 6:59 PM

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

hashar renamed this task from Requesting access to contint for to Requesting access to contint for niedzielski.Oct 26 2016, 7:00 PM

hashar moved this task from Untriaged to In-progress on the Continuous-Integration-Infrastructure board.

Approved from my side.

@hashar Is this request for contint-users, contint-admins, contint-roots or a new group that still needs to be created?

It's for contint-admins, since that's what gives him the ability to deploy zuul config changes.

Change 318775 had a related patch set uploaded (by Dzahn):
admin: add niedzielski to contint-admins

https://gerrit.wikimedia.org/r/318775

gerritbot added a project: Patch-For-Review.Oct 30 2016, 3:23 AM

Change 318775 merged by Dzahn:
admin: add niedzielski to contint-admins

https://gerrit.wikimedia.org/r/318775

@Niedzielski @Sniedzielski @hashar

on gallium:

[gallium:~] $ id niedzielski
uid=11833(niedzielski) gid=500(wikidev) groups=500(wikidev),719(contint-admins)

[gallium:~] $ sudo cat /etc/sudoers.d/contint-admins 
# This file is managed by Puppet!

%contint-admins ALL = (jenkins) NOPASSWD: ALL
%contint-admins ALL = (jenkins-slave) NOPASSWD: ALL
%contint-admins ALL = (gerritslave) NOPASSWD: ALL
%contint-admins ALL = (nodepool) NOPASSWD: ALL
%contint-admins ALL = (zuul) NOPASSWD: ALL
%contint-admins ALL = NOPASSWD: /etc/init.d/jenkins
%contint-admins ALL = NOPASSWD: /usr/sbin/service nodepool start
%contint-admins ALL = NOPASSWD: /usr/sbin/service nodepool stop
%contint-admins ALL = NOPASSWD: /usr/sbin/service nodepool restart
%contint-admins ALL = NOPASSWD: /usr/sbin/service nodepool status
%contint-admins ALL = NOPASSWD: /usr/sbin/service zuul-merger reload
%contint-admins ALL = NOPASSWD: /usr/sbin/service zuul-merger restart
%contint-admins ALL = NOPASSWD: /usr/sbin/service zuul-merger start
%contint-admins ALL = NOPASSWD: /usr/sbin/service zuul-merger stop
%contint-admins ALL = NOPASSWD: /usr/sbin/service zuul-merger status
%contint-admins ALL = NOPASSWD: /bin/journalctl*
%contint-admins ALL = NOPASSWD: /usr/local/sbin/puppet-run

Dzahn closed this task as Resolved.Oct 31 2016, 5:41 PM

Dzahn removed a project: Patch-For-Review.

Thanks @Dzahn, @hashar, @Legoktm, @greg!

Requesting access to contint for niedzielskiClosed, ResolvedPublicActions

Description

Details

Event Timeline

Requesting access to contint for niedzielski
Closed, ResolvedPublic
Actions