Hosting of `doc.wikimedia.org` is being migrated from the CI master (contint1001.wikimedia.org) to a Ganeti VM doc1001.eqiad.wmnet. The documentation generated by CI is published over rsync. The rsync daemon the daemon on the receiving end runs as `doc-uploader` and exposes a `doc` rsync module corresponding to `/srv/docroot/org/wikimedia/doc/`.
CI admins would sometime need the ability to cleanup published doc. For example to remove obsolete documentations (archived repos, closed branches) or move files around when a new entry is added. We sometime have to manually delete directories, typically when a repository is archived from Gerrit.
We might also have CI faults that would be easier to fix by shell access and the usual find/rm commands rather than trying to figure out the right rsync command :-]
So it is merely a convenience.
The workflow is roughly:
I would like contint-admins to be granted a sudo rule to run command as the `doc-uploader` user.