Differential D5065

icinga: grant access to private puppet directories
ClosedPublic
Actions

Authored by vsellier on Feb 11 2021, 3:03 PM.

Details

Reviewers

ardumont

Group Reviewers

System administrators

Maniphest Tasks

T2566: Add an icinga check on whether the puppet agent is enabled

Commits

rSPSITE8bc7ef05cca4: icinga: grant access to private puppet directories

Summary

The nagios user can't access private puppet file and is unable
to retrieve the current activation status.
The user is declared on the main icinga2 class to also add the group
on the icinga master (pergamon)

Related to T2566

Test Plan

diff origin/production/pergamon.softwareheritage.org current/pergamon.softwareheritage.org
*******************************************
+ Group[nagios] =>
   parameters =>
     "system": true
*******************************************
+ User[nagios] =>
   parameters =>
     "gid": "nagios",
     "groups": [
       "puppet"
     ],
     "home": "/var/lib/nagios",
     "shell": "/usr/sbin/nologin",
     "system": true
*******************************************
*** End octocatalog-diff on pergamon.softwareheritage.org

diff origin/production/moma.softwareheritage.org current/moma.softwareheritage.org
*******************************************
+ Group[nagios] =>
   parameters =>
     "system": true
*******************************************
+ User[nagios] =>
   parameters =>
     "gid": "nagios",
     "groups": [
       "puppet"
     ],
     "home": "/var/lib/nagios",
     "shell": "/usr/sbin/nologin",
     "system": true
*******************************************
*** End octocatalog-diff on moma.softwareheritage.org