Feature #16065

Grant hefee ability to disable puppet

Added by groente 2018-10-18 13:52:22 . Updated 2019-06-27 17:16:37 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Target version:
Start date:
2018-10-18
Due date:
% Done:

90%

Feature Branch:
feature/16065-sudo-puppet-for-weblate-admins
Type of work:
Sysadmin
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

Translate is currently administered as a production server, but from an application admin point of view is still under development and requires testing on the machine itself. It would therefore be useful to grant weblate admins the ability to temporarily disable puppet to run tests without puppet overwriting their changes.

Note that this requires a strict policy from the weblate admins to both:

- notify tails-sysadmins@boum.org when they disable puppet (also because we can then acknowledge the monitor alerts that will pop up)

- enable puppet again once they are done with their experiments (and again, notify tails-sysadmins@boum.org)

Subtasks

History

#1 Updated by groente 2018-10-18 14:06:23

  • Assignee deleted (None)
  • QA Check set to Info Needed
  • Feature Branch set to feature/16065-sudo-puppet-for-weblate-admins

Hey u, do you think this policy is acceptable/workable?

#2 Updated by emmapeel 2018-10-26 09:43:00

I would love to have that possibility on the translate server!

It is very annoying to have to have scripts while true overwriting the settings file when testing different options

#3 Updated by Anonymous 2018-11-02 14:00:50

  • Subject changed from Grant weblate admins ability to disable puppet to Grant hefee ability to disable puppet
  • Assignee set to groente
  • Parent task set to Feature #10034
  • QA Check deleted (Info Needed)

Please see email I will send later today about the future work on the platform, and grant access to hefee.

I think it’s useful to grant this access only to him for now, in order to not interfere with his work.
If anybody needs to test something on their side, please talk to hefee about it. Thanks for your understanding.

In any case, this measure should remain temporary until we consider the translation platform to be “production” which we currently do not.

#4 Updated by groente 2018-11-05 17:32:58

  • Assignee changed from groente to bertagaz
  • % Done changed from 0 to 50
  • QA Check set to Ready for QA

Hey bertagaz,

Can you check if everything is okay with these sudo rights? Thank you!

#5 Updated by bertagaz 2018-11-06 14:36:52

  • Assignee changed from bertagaz to groente

groente wrote:
> Hey bertagaz,
>
> Can you check if everything is okay with these sudo rights? Thank you!

Yes, looks good! Beware though your banch seems to be based on the Feature #16064 one and contains its patches, and I’ve not reviewed it yet. But feel free to merge and deploy this ticket’s branch without Feature #16064 changes. When hefee will confirm it works, all will be ready for this ticket to be closed.

#6 Updated by groente 2018-11-07 13:19:19

  • Assignee changed from groente to hefee
  • % Done changed from 50 to 90

Hey hefee, you should now be able to run

/usr/bin/puppet agent —disable
/usr/bin/puppet agent —enable

Can you verify and close the ticket if it works?

#7 Updated by hefee 2018-11-08 12:46:57

  • Status changed from Confirmed to Resolved

groente wrote:
> Hey hefee, you should now be able to run
>
> /usr/bin/puppet agent —disable
> /usr/bin/puppet agent —enable
>
> Can you verify and close the ticket if it works?

that works.

#8 Updated by intrigeri 2018-12-02 21:45:25

  • QA Check deleted (Ready for QA)

#9 Updated by Anonymous 2019-02-07 15:35:47

#10 Updated by intrigeri 2019-06-27 17:16:38

  • Assignee deleted (hefee)