Page MenuHomePhabricator

allow wdqs-admins to pool / depool wdqs servers
Closed, ResolvedPublic

Description

For maintenance operations, Stas (or other wdqs admins) should be able to pool / depool on their own. The current list of wdqs-admins is: @Smalyshev, @hoo.

Event Timeline

Restricted Application added subscribers: PokestarFan, Aklapper. · View Herald Transcript

Change 370198 had a related patch set uploaded (by Gehel; owner: Gehel):
[operations/puppet@production] wdqs - allow wdqs-admins to pool / depool servers

https://gerrit.wikimedia.org/r/370198

This access request was reviewed and approved in today's (2017-08-21) operations team meeting. Giving these admins the rights to depool and repool individual systems within their purview was granted.

Change 370198 merged by Gehel:
[operations/puppet@production] wdqs - allow wdqs-admins to pool / depool servers

https://gerrit.wikimedia.org/r/370198

Access has been granted

Doesn't look like it is working:

Depooling wdqs2001.codfw.wmnet from all services...
WARNING:etcd.client:etcd response did not contain a cluster ID
ERROR:conftool:Error when trying to set/pooled=no on wdqs2001.codfw.wmnet
ERROR:conftool:Failure writing to the kvstore: Backend error: The request requires user authentication : Insufficient credentials

HOME=/root sudo depool seems to be working.