Page MenuHomePhabricator

Root for Mukunda for Gerrit machine(s)
Closed, ResolvedPublic

Description

Hi, this is a request to add Mukunda to the gerrit-roots group. We need a second root user on our team for supporting Gerrit well, and the concept of him + myself sharing root access on Phabricator has worked well in terms of splitting workload. He's already got normal shell access to the machine, but this will allow him to restart the service, inspect Apache error logs and such.

Thanks!

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Would be great to have one more person able to maintain gerrit, and from what I know from him, I would trust him! (However, I'm not sure, if my vote counts :P)

Same as Florian. Not sure if my opinion counts (left a lovely token above
just in case) but I think @mmodell would be a good Gerrit mantainer.

Change 328882 had a related patch set uploaded (by ArielGlenn):
add twentyafterfour to gerrit-root group

https://gerrit.wikimedia.org/r/328882

Change 328882 merged by ArielGlenn:
add twentyafterfour to gerrit-root group

https://gerrit.wikimedia.org/r/328882

Please verify that you have the rights you need, and I will then close this ticket.

I confirmed the access on cobalt.

[cobalt:~] $ id twentyafterfour
uid=4967(twentyafterfour) gid=500(wikidev) groups=500(wikidev),703(gerrit-root),704(gerrit-admin)

root@cobalt:~# cat /etc/sudoers.d/gerrit-root 
# This file is managed by Puppet!

%gerrit-root ALL = (ALL) NOPASSWD: ALL

Currently this is the only prod gerrit server, but since the access to the group is granted in the role, it will just automatically happen when the upcoming codfw gerrit server gets installed and the role is added.

I'll close this now, of course reopen and let us know if any unexpected issues.

Dzahn claimed this task.