Page MenuHomePhabricator

Allow @Jdlrobson and @bearND to deploy and manage the trending edits service
Closed, ResolvedPublic

Description

@Jdlrobson and @bearND are the primary owners and maintainers of the Trending Edits service (cf T150043: New Service Request for Trending Edits Service for more info on the service). As such, they need to be able to deploy and start/stop/restart the service in SCB.

Event Timeline

mobrovac added a subscriber: dr0ptp4kt.

@dr0ptp4kt such a request needs manager approval. Please approve the request.

Change 327754 had a related patch set uploaded (by Mobrovac):
Trending Edits: Add the admin group (and add it to SCB)

https://gerrit.wikimedia.org/r/327754

Change 327755 had a related patch set uploaded (by Mobrovac):
Add jdlrobson to the deploy-service group

https://gerrit.wikimedia.org/r/327755

Change 327754 merged by Dzahn:
Trending Edits: Add the admin group (and add it to SCB)

https://gerrit.wikimedia.org/r/327754

Info: Caching catalog for scb1001.eqiad.wmnet
Info: Applying configuration version '1482170720'
Notice: /Stage[main]/Admin/Admin::Hashgroup[sc-admins]/Admin::Group[sc-admins]/Sudo::Group[sc-admins]/File[/etc/sudoers.d/sc-admins]/content: 
--- /etc/sudoers.d/sc-admins	2016-12-13 14:24:48.088741855 +0000
+++ /tmp/puppet-file20161219-3339-yely1q	2016-12-19 18:09:16.275371824 +0000
@@ -8,5 +8,6 @@
 %sc-admins ALL = NOPASSWD: /usr/sbin/service mathoid *
 %sc-admins ALL = NOPASSWD: /usr/sbin/service mobileapps *
 %sc-admins ALL = NOPASSWD: /usr/sbin/service pdfrender *
+%sc-admins ALL = NOPASSWD: /usr/sbin/service trendingedits *
 %sc-admins ALL = NOPASSWD: /usr/sbin/service zotero *
 %sc-admins ALL = NOPASSWD: /usr/bin/firejail --join=*

Info: Computing checksum on file /etc/sudoers.d/sc-admins
Info: /Stage[main]/Admin/Admin::Hashgroup[sc-admins]/Admin::Group[sc-admins]/Sudo::Group[sc-admins]/File[/etc/sudoers.d/sc-admins]: Filebucketed /etc/sudoers.d/sc-admins to puppet with sum 5997f20c8c3c5ae99a1a1c137b92d10e
Notice: /Stage[main]/Admin/Admin::Hashgroup[sc-admins]/Admin::Group[sc-admins]/Sudo::Group[sc-admins]/File[/etc/sudoers.d/sc-admins]/content: content changed '{md5}5997f20c8c3c5ae99a1a1c137b92d10e' to '{md5}85f8fa27243cfcaf8cfe1a08d30c5d3d'
Info: /Stage[main]/Admin/Admin::Hashgroup[sc-admins]/Admin::Group[sc-admins]/Sudo::Group[sc-admins]/File[/etc/sudoers.d/sc-admins]: Scheduling refresh of Exec[sudo_group_sc-admins_linting]
Notice: /Stage[main]/Admin/Admin::Hashgroup[sc-admins]/Admin::Group[sc-admins]/Sudo::Group[sc-admins]/Exec[sudo_group_sc-admins_linting]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Admin/Admin::Hashgroup[trendingedits-admin]/Admin::Group[trendingedits-admin]/Group[trendingedits-admin]/ensure: created
Notice: /Stage[main]/Admin/Admin::Hashgroup[trendingedits-admin]/Admin::Group[trendingedits-admin]/Sudo::Group[trendingedits-admin]/File[/etc/sudoers.d/trendingedits-admin]/ensure: created
Info: /Stage[main]/Admin/Admin::Hashgroup[trendingedits-admin]/Admin::Group[trendingedits-admin]/Sudo::Group[trendingedits-admin]/File[/etc/sudoers.d/trendingedits-admin]: Scheduling refresh of Exec[sudo_group_trendingedits-admin_linting]
Notice: /Stage[main]/Admin/Admin::Hashgroup[trendingedits-admin]/Admin::Group[trendingedits-admin]/Sudo::Group[trendingedits-admin]/Exec[sudo_group_trendingedits-admin_linting]: Triggered 'refresh' from 1 events
Notice: /Stage[main]/Admin/Admin::Hashuser[jdlrobson]/Admin::User[jdlrobson]/User[jdlrobson]/ensure: created
Notice: /Stage[main]/Admin/Admin::Hashuser[jdlrobson]/Admin::User[jdlrobson]/File[/home/jdlrobson]/ensure: created
Notice: /Stage[main]/Admin/Admin::Hashuser[jdlrobson]/Admin::User[jdlrobson]/File[/home/jdlrobson/.gitignore]/ensure: defined content as '{md5}fcc0a1c2f12fcf1d56262612d8cb291b'
Notice: /Stage[main]/Admin/Admin::Hashuser[jdlrobson]/Admin::User[jdlrobson]/Ssh::Userkey[jdlrobson]/File[/etc/ssh/userkeys/jdlrobson]/ensure: created
Notice: /Stage[main]/Admin/Admin::Groupmembers[trendingedits-admin]/Exec[trendingedits-admin_ensure_members]/returns: executed successfully
Notice: Finished catalog run in 17.86 seconds


[scb1001:~] $ id jdlrobson
uid=2155(jdlrobson) gid=500(wikidev) groups=500(wikidev),791(trendingedits-admin)


[scb1001:~] $ id bsitzmann
uid=5037(bsitzmann) gid=500(wikidev) groups=500(wikidev),759(mobileapps-admin),791(trendingedits-admin)

[scb1001:~] $ grep trend /etc/group
trendingedits:x:988:
trendingedits-admin:x:791:gwicke,ppchelko,eevans,mobrovac,jdlrobson,bsitzmann

Change 327755 merged by Dzahn:
Add jdlrobson to the deploy-service group

https://gerrit.wikimedia.org/r/327755

Dzahn claimed this task.

after this second merge, on tin/mira, deployment servers, @Jdlrobson is now a deployer

..
Notice: /Stage[main]/Admin/Admin::Hashuser[jdlrobson]/Admin::User[jdlrobson]/User[jdlrobson]/ensure: created
..

[tin:~] $ id jdlrobson
uid=2155(jdlrobson) gid=500(wikidev) groups=500(wikidev),763(deploy-service)

[mira:~] $ id jdlrobson
uid=2155(jdlrobson) gid=500(wikidev) groups=500(wikidev),763(deploy-service)

@Jdlrobson @bearND you should now be able to manage and deploy the trending edits service, let us know if any issues.

Thank you. I'll try it out early next year when we can do deployments again.