This has previously been discussed, and now that releng is taking over much of the day-to-day of Phabricator (with Andre being their newest(?)) member he needs some level of access. For instance he is able to enable the conpherence application, but is not able to restart the daemons to sync the configuration.
@greg for approval
Change 207846 had a related patch set uploaded (by Dzahn):
admin: add aklapper to phabricator-admins
@Aklapper is on vacation that's why I didn't push this in the weekly ops meeting
there is no aklapper user I think?
Change 208802 had a related patch set uploaded (by Dzahn):
admin: create user for aklapper
pinged greg-g for approval. needs that and a SSH key from andre__. i here he is on vacation so this isn't urgent
thanks greg-g.
so, here are patches:
make user https://gerrit.wikimedia.org/r/#/c/208802/ (needs ssh key)
add user to group: https://gerrit.wikimedia.org/r/#/c/207846/ (if admin is not sufficient compare to -roots group)
@Aklapper: once you return, we need and ssh key and a signature on L3 then we're all set to set you up.
Since you are likely busy with hackathon and the like, I've placed this task to stalled. No one in ops will do anything about this task until you update the task that you've completed the above, ssh key and L3 signature.
Bringing back to normal priority. No clue why I bumped it :-]
Task is stalled pending per RobH just above.
Went on vacations. Got back. Found people asking for stuff. Created key. Signed L3.
wikitech username: aklapper
preferred shell username: aklapper
public RSA key:
Change 215683 had a related patch set uploaded (by Matanya):
access: grant aklapper phab-admins
Change 215689 had a related patch set uploaded (by Dzahn):
admin: add aklapper to bastion-only group
user has been created on bast1001 and on iridium. linked andre__ to example for ProxyCommand setup. let us know if any questions
[iridium:/etc/sudoers.d] $ sudo cat phabricator-admin # This file is managed by Puppet! %phabricator-admin ALL = NOPASSWD: /srv/phab/phabricator/bin/remove destroy r* %phabricator-admin ALL = NOPASSWD: /srv/phab/phabricator/bin/repository %phabricator-admin ALL = NOPASSWD: /srv/phab/phabricator/bin/phd %phabricator-admin ALL = NOPASSWD: /srv/phab/phabricator/bin/worker [iridium:/etc/sudoers.d] $ id aklapper uid=2377(aklapper) gid=500(wikidev) groups=500(wikidev),746(phabricator-admin)
