As seen in T387833: Gerrit failover process, we are working towards more automation on Gerrit's reliability. As listed in the recommended post migration tasks, it is useful to watch replication, after switching over to a new instance. This requires to have gerrit-admin rights.
Username: arnaudb
Shell access: Yes
Purpose: Send system commands to Gerrit
Group: gerrit-admin
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| ldap: gerrit admin rights | operations/puppet | production | +1 -1 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T407557 OpenSSH 10.1+ warns that Wikimedia SSH does not use post-quantum key exchange algorithm | |||
| Open | None | T407844 Gerrit ssh daemon does not offer post-quantum kex leading to a warning with OpenSSH 10 | |||
| Open | None | T392448 Upgrade to Gerrit 3.12 | |||
| Open | None | T379714 Upgrade to Gerrit 3.11 | |||
| Open | None | T392465 Switch Gerrit from Java 17 to Java 21 | |||
| Open | None | T384595 Upgrade Collab hosts to Bookworm | |||
| Open | None | T392464 Upgrade Gerrit hosts from Bullseye to Bookworm | |||
| Open | None | T387831 Standardize failover procedures for Collab services | |||
| Resolved | None | T393239 ProbeDown | |||
| In Progress | ABran-WMF | T387833 Gerrit failover process | |||
| Resolved | MatthewVernon | T392186 Grant Gerrit admin to arnaudb |
Change #1137102 had a related patch set uploaded (by Arnaudb; author: Arnaudb):
[operations/puppet@production] ldap: gerrit admin rights
Change #1137102 abandoned by Arnaudb:
[operations/puppet@production] ldap: gerrit admin rights
Reason:
Mistaken edit
it is useful to watch replication
+1
For gerrit show-queue, that requires the View Queue permission,, but I think it is easier to add you to the Administrators group which includes the gerritadmin LDAP group.
Thus essentially, add your account to gerritadmin in LDAP and you will have the appropriate permission.
Replication can also be seen at https://grafana.wikimedia.org/d/RFLS1GsWk/replication-upstream?orgId=1
@LSobanski can you approve @ABran-WMF's addition to the gerritadmin LDAP group, please? LDAP access changes like this need manager approval.