Allow htprod to sudo to stop/start/restart imgsrv

This is similar to the sudoers already in place on beeftea-1/2 for managing solr there.
mlibrary · Oct 10, 2024 · bf7d82b · bf7d82b
1 parent e30bcd6
commit bf7d82b
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/manifests/role/webhost/htvm/test.pp b/manifests/role/webhost/htvm/test.pp
@@ -33,4 +33,12 @@
   include nebula::role::webhost::htvm
   include nebula::profile::hathitrust::apache::test
 
+  file { '/etc/sudoers.d/htprod-systemctl-imgsrv':
+    ensure  => 'present',
+    content => @("SUDOERS")
+      %htprod  ALL=(root) NOPASSWD: /bin/journalctl
+      %htprod  ALL=(root) NOPASSWD: /bin/systemctl start imgsrv,/bin/systemctl stop imgsrv,/bin/systemctl restart imgsrv
+    | SUDOERS
+  }
+
 }