Hosting of doc.wikimedia.org is being migrated from the CI master (contint1001.wikimedia.org) to a Ganeti VM doc1001.eqiad.wmnet. The documentation generated by CI is published over rsync. The rsync daemon the daemon on the receiving end runs as doc-uploader and exposes a doc rsync module corresponding to /srv/docroot/org/wikimedia/doc/.
CI admins would sometime need the ability to cleanup published doc. For example to remove obsolete documentations (archived repos, closed branches) or move files around when a new entry is added. We sometime have to manually delete directories, typically when a repository is archived from Gerrit.
We might also have CI faults that would be easier to fix by shell access and the usual find/rm commands rather than trying to figure out the right rsync command :-]
So it is merely a convenience.
The workflow is roughly:
I would like contint-admins to be granted a sudo rule to run command as the doc-uploader user.