Allow nasqueron-irc to control Odderon service
ClosedPublic
Actions

Authored by dereckson on Jan 30 2017, 00:59.

Details

Reviewers

dereckson

Commits

rOPSe5ed159bf68a: Allow nasqueron-irc to control Odderon service

Summary

f7788aa69fe6 deployed a systemd unit to control the darkbot.

Before, 618a748f0998 offered to nasqueron-irc group the right
to run any command as odderon user.

This is coherent to allow the same group to stop or restart the bot
through systemd.

Test Plan

As a member of the nasqueron-irc group:
sudo systemctl restart odderon

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson created this revision.Jan 30 2017, 00:59

dereckson planned changes to this revision.Jan 30 2017, 01:00

dereckson added inline comments.

roles/shellserver/odderon/files/odderon.sudoers
4	service.sls should know it's Jinja template

odderon.sudoers is now a jinja template

Harbormaster completed remote builds in B1371: Diff 2257.Jan 30 2017, 01:31

Salt master

$ cd /opt/nasqueron-operations
$ arc patch D888
$ salt eglide state.apply roles/shellserver/odderon/account
eglide:
[…]
          ID: odderon_sudo_capabilities_file
    Function: file.managed
        Name: /etc/sudoers.d/odderon
      Result: True
     Comment: File /etc/sudoers.d/odderon updated
     Started: 01:33:07.655830
    Duration: 1149.627 ms
     Changes:   
              ----------
              diff:
                  --- 
                  +++ 
                  @@ -1 +1,12 @@
                   %nasqueron-irc ALL=(odderon) NOPASSWD: ALL
                  +
                  +# Service management
                  +
                  +%nasqueron-irc ALL= NOPASSWD: /bin/systemctl start odderon
                  +
                  +%nasqueron-irc ALL= NOPASSWD: /bin/systemctl stop odderon
                  +
                  +%nasqueron-irc ALL= NOPASSWD: /bin/systemctl restart odderon
                  +
                  +%nasqueron-irc ALL= NOPASSWD: /bin/systemctl reload odderon
                  +
…