https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
88492f2 mark jessie hosts this will make it easier to track progress and avoid duplication Change-Id: I468d662f3b387044fe5a3e1344602e3faefcf2a3 06 March 2015, 02:52:53 UTC
1f2d4b8 repool cp3017 Change-Id: I151870372b9c8d4db0e6d931d8a5975a7587d1e1 06 March 2015, 02:25:09 UTC
b411380 Increase MariaDB thread_pool_size. This is the number of thread groups (multiple threads per group). Theoretically this should be equal to the number of cores but realistically we see CPU underutilization, plus we need the login phase of new connections to be handled promptly. Change-Id: Idbc9988a59765a854cda6aac4b55b00247b18614 06 March 2015, 02:16:58 UTC
f8a1ee5 Merge "dbtree: use service alias instead of server name" into production 06 March 2015, 02:10:31 UTC
8311164 depool cp3017 Change-Id: I202c8e18dae14c9da8d2b8bbdbfa316ba2f897ae 06 March 2015, 01:32:15 UTC
57061b1 repool cp3014,cp3022 Change-Id: I38762010920dab38c1ec1d72dfa0d2739f21787a 06 March 2015, 01:24:28 UTC
558510a cp[14]* -> jessie installer Change-Id: I32ddc761675b17846586876276ac026e372144b9 06 March 2015, 00:56:14 UTC
239b585 cp3*/amssq* -> jessie installer Change-Id: I51ebd6e8784fe84601ac318fe673eca647fe5984 06 March 2015, 00:45:59 UTC
bd4e7ad Revert trusty/jessie installer defaults changes This reverts commit ad7fbf7152fe25ef85959801d9462c87f28eabbc. This reverts commit c8487f9b4f829b52773ff011ae1bc67a1adab7dd. Change-Id: I5e0c0dd828f7a6e44bd751c94943436b1af8c017 06 March 2015, 00:43:24 UTC
ad7fbf7 move trusty global default below nodes the jessie default for the esams private vlan didn't seem to stick, and this may fix it. Change-Id: I7ea1852bea6e7251dad95b18c60a3be872979883 06 March 2015, 00:34:01 UTC
5af3b8b bugfix for 28ae08ad Change-Id: Ib72c21d0232fbae2b3700b51d2d6258023c3c7d4 06 March 2015, 00:25:30 UTC
4c62bee depool cp3013 Change-Id: I43772f72491527377d4ba5a0fd28d51560a9f612 06 March 2015, 00:14:08 UTC
ae121ab Change dispatchChanges parameters for Wikidata Change-Id: I6e6298f9e93d89f73169bd402fc9ab8bc7ded782 05 March 2015, 23:58:49 UTC
2d30711 depool cp3022 for reinstall Change-Id: Iba6317380ce853d032fed957bd582eae7bdebef5 05 March 2015, 23:43:21 UTC
7fa94bf esams cache dhcp: use private vlan + default jessie Change-Id: Ide8ffb8bff105e84caa44377861481ac2e8b1fde 05 March 2015, 23:37:46 UTC
c8487f9 esams private vlan -> jessie default Change-Id: Ib4bf68946518593a9835eac21848558e769964cb 05 March 2015, 23:37:46 UTC
3c45e5f Merge "Increase restbase heap limit slightly from 250 to 300mb" into production 05 March 2015, 23:27:45 UTC
81c6d1e support both vlan domainnames for esams bits Change-Id: I21fe883093d8d9cf5bf5e221d14b5a55d54cb316 05 March 2015, 23:08:10 UTC
28ae08a wmf-reimage: support renaming host Change-Id: Id8ce178b0cba095fd34d9461e28c0ea63f18af86 05 March 2015, 23:08:09 UTC
558f509 Increase restbase heap limit slightly from 250 to 300mb During extreme stress testing workers were getting close to 250mb heap usage. The limit should not trigger in those situations, so tweak it slightly upwards. Change-Id: I34ce6c65c0f29a786cb1fb8721398bcc250a5987 05 March 2015, 22:54:38 UTC
0650ecb noc: unload mod_ssl - not used anymore None of the Apache sites here have SSL config anymore, they are all proxied behind misc-web with nginx terminating SSL. Change-Id: Ie146335c6847a7f8a3d2b1c88fb13ef131095071 05 March 2015, 22:42:12 UTC
4461a33 Merge "Improve the RESTBase API documentation" into production 05 March 2015, 22:34:09 UTC
f96d745 Improve the RESTBase API documentation Add some guidance about versioning and access policies, and clean up some unused yaml references. Change-Id: I5e1e696211f6e190636c344a3f4ac243b7422aae 05 March 2015, 22:24:29 UTC
33a9baa Move californium to a public ip, part two Bug:T84772 Change-Id: I9d054a8fe769a707b66261a288762f53ffc00064 05 March 2015, 22:07:09 UTC
9605acb Move californium to public IP. Bug:T84772 Change-Id: Ia53798342aaa0a711b889f2acb265b15a18ff4a8 05 March 2015, 22:00:34 UTC
430af52 noc: redirect old dbtree URLs to new location dbtree has moved to https://dbtree.wikimedia.org redirect the old URLs because http://www.w3.org/Provider/Style/URI Bug:T90837 Change-Id: I48c8384ff78df8af57c23a09d05e8e30ebe3bc1e 05 March 2015, 21:51:17 UTC
486a769 dbtree: add http->https protocol redirect Add the standard snippet when a service is behind misc-web with nginx terminating SSL but we want protocol redirects. Needs mod_headers and mod_rewrite to be loaded. (actually noc already uses mod_rewrite and this should be puppetized) Bug:T90837 Change-Id: I29cbcd3633f8a319bf16aa3cb30d25d8c4e3ed67 05 March 2015, 20:40:42 UTC
0eb9d49 dbtree: move .htaccess into main config dbtree has a .htaccess file in the docroot to protect the config in ./inc/. Move that over to the main config now that we have a puppetized one. Also, disable allowing overrides for /. Bug:T90837 Change-Id: I80bed871a5a1c10bcea2f8b118a732d91ff159cf 05 March 2015, 19:38:51 UTC
bc13d0e activate Apache site for dbtree Let dbtree have its own Apache site like other tools. Template added but did not activate it yet. follow-up Id442ab305e6b8bea Bug:T90837 Change-Id: I89df4e1389174c545e9f272a6a6a2fc34bc10707 05 March 2015, 19:22:23 UTC
4f732e0 ganglia: add codfw appservers Change-Id: If669e55760ebdb5d271ffdfc4231edfcee28fd73 05 March 2015, 19:16:28 UTC
c3f9064 repool cp301[48] Change-Id: I59e87ed9c551a2b3a5a94ad2c60e85a0f6ba51b2 05 March 2015, 19:02:46 UTC
91ac2f4 swap cp301[48] roles, depool temporarily Change-Id: If4d6a827b206ff02005fc3d8302a470a48766355 05 March 2015, 18:45:44 UTC
95d9f20 Merge "dbtree: add Apache config, move to own docroot" into production 05 March 2015, 18:43:48 UTC
366d9e0 Merge "dbtree: add to misc varnish config" into production 05 March 2015, 18:40:51 UTC
04f9efc Fix for e988ac4 To avoid errors during the first run, touch the file first Change-Id: Ic50d9cdbc9d4a2071680518926ba35e963b82ed3 05 March 2015, 18:27:06 UTC
e988ac4 Drop the umask from puppet-run, ensure log file permissions We set up a umask for puppet-run with the log of protecting the puppet log file which may have sensitive information. This however messes up puppet agent behavior in some cases like T91525. Undo the umask and ensure the log file permissions on every run Change-Id: I5b316786e065bfc7c5af71015045dcd063757c5c 05 March 2015, 18:19:20 UTC
7077518 ganglia: add codfw jobrunners to the web views https://en.wikipedia.org/wiki/Don%27t_repeat_yourself Change-Id: I4d410b6fba2825e06aeb89cfb665f1d6d474f7fd 05 March 2015, 17:43:33 UTC
db411df mediawiki: arrange mw-related clusters across rows Shuffle the distribution of mediawiki appservers so that we have them evenly distributed across rows. In this configuration we would have: - 12 jobrunners - 8 imagescalers - 2 videoscalers - 119 appservers - 93 api appservers this balancing may change, but should guarantee an evenly distributed load from our experiences with eqiad. Change-Id: I5daba194fc662593c7b8b63e9e44e7e538be4ed1 05 March 2015, 16:56:50 UTC
85f92b4 Merge "CX: Add Kyrgyz (ky) and Punjabi( pa) in target" into production 05 March 2015, 16:27:35 UTC
90addd6 repool cp301[48] backends Change-Id: Id063c7d28433308cf2d4d4c050e62fa95bcde28b 05 March 2015, 16:02:29 UTC
13e5276 Merge "fix cp30xx storage sizes" into production 05 March 2015, 15:57:25 UTC
3deae00 fix cp30xx storage sizes Change-Id: I56def3a2676b1a008d014ee70f6fc1f7e5b6fe99 05 March 2015, 15:56:14 UTC
39bd5fd jobrunner: add ganglia config for codfw Change-Id: I09ce6cafb4178f32aa8383afc39d8759a29a8c33 05 March 2015, 15:54:44 UTC
55d0cc8 Minor lint Change-Id: I6493ff877c90b910c63684cad66640e157cbbae8 05 March 2015, 15:42:55 UTC
558e179 cp3018 -> jessie, s/upload/mobile/ Change-Id: Ic6b3a07dc686b7252e4c7cca08a2c688e25a06d6 05 March 2015, 15:16:34 UTC
6777169 cp3014 -> jessie, s/mobile/upload/ Change-Id: Ie1e97582f1663aabf559666034c2776668695e32 05 March 2015, 14:48:59 UTC
127307b progress on cp3xxx storage config Change-Id: I3d25aa5df2d7f6f089d3101bcf4d1d91845b2312 05 March 2015, 14:41:44 UTC
825d09e wdq-mm: Stop monit It might be restarting wdq-mm before it has a chance to complete initialization. See if that is the issue. Change-Id: I117396973e298d6586a0f0702d60e4eaab75548b 05 March 2015, 14:38:39 UTC
d2d255a txstatsd: ensure $init_file attributes Puppet is especially flaky when it comes to how it populates file resources with no owner, group and mode attributes on target systems. Group both systemd and upstart into a single file resource to DRY and specify them Change-Id: I4cc81b2c2f1853867f8c0ae67d33590a0b55c2f2 05 March 2015, 13:11:15 UTC
95af5ce Merge "lvs: init.pp lint" into production 05 March 2015, 12:48:42 UTC
b856f10 Merge "sysctl: move selector outside resource block" into production 05 March 2015, 12:47:02 UTC
d13c051 Merge "varnish: fix param order" into production 05 March 2015, 12:45:39 UTC
2d3a41a varnish: fix param order Change-Id: Icc73bcd1259b71f9b1379f62a2f6d58188dc1932 05 March 2015, 12:25:41 UTC
a4337c4 Include hiera classes in lab instance role Bug: T90592 Change-Id: Ie748f117caa41fca559232e58a07f707d796f78a 05 March 2015, 12:24:58 UTC
6540755 sysctl: move selector outside resource block Change-Id: I53d29d32752b7c282d707714d9adf5d286c16a52 05 March 2015, 12:18:30 UTC
4181239 Parameterize roles for labs Parameterize role::puppet::self and role::salt::minions. Allow for project-wide puppetmaster and salt master. Bug: T90592 Change-Id: I9d3160362f3c7ed73091f8c6ad0d5af632cdeeb8 05 March 2015, 11:49:07 UTC
32442f9 Remove "shell" from monthly Phabricator statistics email. "shell" got killed in T87623. Change-Id: I9b7379db9a28429c0e6e753ff414ca4373667fee 05 March 2015, 11:36:29 UTC
1f98496 Tools: Install at Bug: T72324 Change-Id: Idbda0356da4e8b8a77538fc93a447e3c9074f53d 05 March 2015, 11:34:57 UTC
3f806fe Merge "ipsec: facts in the right scope" into production 05 March 2015, 11:28:58 UTC
b3d10f6 ipsec: facts in the right scope Change-Id: I4f89861a456b39de569b341950393422cc26b732 05 March 2015, 11:27:35 UTC
482d903 mediawiki: correct codfw nutcracker servers list Change-Id: I64892394c1ce31a00fcb0e71920dd7c9965dae0a 05 March 2015, 11:10:58 UTC
0a89015 beta: Complain if there have been *any* cherry-picks for 48h Bug: T76392 Change-Id: I28f881ca04fbfa8ae51d69c641deff0e021839ce 05 March 2015, 11:09:24 UTC
3bf7243 lvs: init.pp lint Change-Id: If9b0514793c19d8b9a03de153d20ac8934bfe43a 05 March 2015, 11:00:48 UTC
e3383f3 base: move selector outside resource block Change-Id: Ia100343eee8c3565539d6287f6548dea42c7abd0 05 March 2015, 10:55:17 UTC
259e762 network: add codfw to the appservers network ranges Change-Id: I553fa034f5ca3d5c99c47c45b4c6e75a061bac66 05 March 2015, 10:43:24 UTC
a2f16b5 Revert "mediawiki: correct dependency of php.ini file" This reverts commit 249c1aac62c126b5627ac8ec324eb1d80afcffbc. Change-Id: I1e6fcc1d3389f048fbff2883e1eedf4a00d75319 05 March 2015, 10:37:33 UTC
249c1aa mediawiki: correct dependency of php.ini file Change-Id: I7a9e8626dd6ef5d132c0f5ac7de13331c3afd7b6 05 March 2015, 10:04:48 UTC
f4a505a apache: install mpm files after the package Change-Id: I6a4556eeb7359e08ca46a07603a8dfa22a3b21d9 05 March 2015, 10:04:48 UTC
18cea3e Merge "Put clearer Login/Register instructions on the Phabricator login page" into production 05 March 2015, 09:40:46 UTC
865f756 Tools: Deploy root web automatically Change-Id: I7c0ef8c86511a2bdd1637ddd848e463d79360d03 05 March 2015, 07:59:19 UTC
06739e9 CX: Add Kyrgyz (ky) and Punjabi( pa) in target Kyrgyz wiki also wants Kazakh, Russian and Turkish as source languages. Bug: T89337 T89635 Change-Id: I5ef8629d7090a0849cc4a14d953ab1cc624b0a0c 05 March 2015, 06:16:55 UTC
a35eedc Merge "noc apache,adjust old path to this file in comment" into production 05 March 2015, 05:12:16 UTC
f85ad37 formalizing milimetric's access to stat1001 dan's user was not added via puppet admin module, fixing. details of process on phabricator task. T90956 Change-Id: I52d13e86d5172ee7a8baf35c56ab823ff927ca55 05 March 2015, 01:51:19 UTC
8532fb8 Remove restbase1006 from cassandra & restbase hosts This host is down, pending repair. See T89639. Change-Id: I84d4045417e351b4bb69bf6a24a6511682d43f76 05 March 2015, 01:49:08 UTC
c38bb67 reduce static ssl buffer size to fit 1 packet always As noted in the config commentary, this may need further tweaking as we go, but this is a better starting point than the default (16k). Bug: T86666 Change-Id: Ic799b3e8c6becadbe594769fe3aa88f3343a9f4e 04 March 2015, 23:23:40 UTC
53e4b13 Add package 'tig' to tin (via deployment role) to assist with deployment I use tig to quickly see the state of a git repo. This would be very helpful when I'm doing the train deployments. Change-Id: Idcc2f548f28bdaa0253dcdbfdf0ca03b9f736df9 04 March 2015, 23:12:39 UTC
a4346fa Enable test/phase0 and *.wikipedia.org wikis in restbase For the first deploy we are focusing on public wikipedias and test wikis. We could consider templating more of this (rather than modifying the template), but for now this looks like the simplest way forward. With our new shiny column family sharing logic the resources used per wiki are close to zero, so it's fine to enable all these wikis even in beta labs. Change-Id: Ia5bbefccc843c0155bd9e642160c90308179d140 04 March 2015, 22:48:54 UTC
b12320d switch all cpNNNN to jessie storage config for installs Change-Id: I96d3de9cb006a6a1974088637ef566a65e8c4c11 04 March 2015, 21:48:59 UTC
b4d1ad8 base: move instance-upstarts to manifest Change-Id: Ie13e9534304af96ca0f7bbf0ae0f5853fd8e75df 04 March 2015, 21:04:54 UTC
4e9c4cc Merge "keyholder/eventlogging: replace UTF-8 chars" into production 04 March 2015, 18:57:38 UTC
b5a4f9c keyholder/eventlogging: replace UTF-8 chars 2 more occurences of UTF-8 chars in *.pp files and then that's all. Replacing them because of T91453 ZeroMQ is a redirect to ØMQ on Wikipedia as well. :p Bug:T91453 Change-Id: I59e95c76520159bcfaac6a6d371f7e8d9b1ada6f 04 March 2015, 18:52:18 UTC
f3863f8 hhvm: convert 'ASCII art' to ASCII In order to fix more "invalid byte sequence in US-ASCII" with ruby 1.9.x. https://tickets.puppetlabs.com/browse/PUP-1031 Bug:T91453 Change-Id: I267f42716320fcb7f4d3af479d301fa75fd729e7 04 March 2015, 18:45:39 UTC
e9fbfbd statistics: remove 2 UTF-8 characters fixing one more "invalid byte sequence in US-ASCII" that only happens with ruby > 1.9.x Bug:T91453 https://tickets.puppetlabs.com/browse/PUP-1031 Change-Id: I46112fcd51877ccd340e0141cfc8fd32a6d24c31 04 March 2015, 17:07:14 UTC
e55ab06 role::deployment: add codfw deployment master (still tin) Change-Id: I79b005a762a5851a5bcfb24c715416cf3ac3ec97 04 March 2015, 15:52:31 UTC
a7ac7b3 added mc2135 Change-Id: I4e4265e004d91c54964ce13f9189cee7547685b3 04 March 2015, 15:41:51 UTC
d7c5780 repool amssq31 Change-Id: Ic30c95f1d614f908bdcaa77f9896bfdcb2f4d021 04 March 2015, 13:59:53 UTC
fcce276 amssq31 -> jessie Change-Id: Ibb21aab13d00656c04c455aa4514a7a2b867baac 04 March 2015, 13:29:08 UTC
4decf90 set amssq caches to new jessie disk layout Change-Id: I9c799aea7d7a19218b7e525552cc14567c8f51e6 04 March 2015, 13:18:10 UTC
94807a5 depool amssq31 for reinstall Change-Id: I4f373f8de45e16b1ce0dc7b8fa21cf5a2974a565 04 March 2015, 13:06:09 UTC
0bfc97d kill exec bit on systemd unit files Change-Id: I02b26d196017d74526e4f31ed4dd4250520e61e7 04 March 2015, 13:04:58 UTC
b1aee2a mediawiki: add jobrunner definitions for codfw Change-Id: I456f5b226d0532bbf8badbc9e41c9eeae8eee898 04 March 2015, 11:36:51 UTC
352721e Beta: Fix config for CX registry in Yandex Change-Id: I95a70dd51221a7fc256017e283c710281ef0e8fd 04 March 2015, 10:14:22 UTC
9b82fb4 Merge "Add apache config for m.{project}.org (-wikipedia)" into production 04 March 2015, 09:09:21 UTC
d875924 Beta: Enable few language for March 2015 user testing Bug: T91371 Change-Id: I3758b83d0fd42c207130143faa9f0b267299b346 04 March 2015, 08:50:44 UTC
ad13d78 Merge "Beta: Enable Armenian (hy) in target wiki" into production 04 March 2015, 08:34:09 UTC
5a007eb Beta: Enable Armenian (hy) in target wiki Change-Id: I19837cd42e5ddff90fcdf07c3590b17be8303496 04 March 2015, 08:28:37 UTC
4c0fcb5 Merge "Use apt::repository instead of file resources" into production 04 March 2015, 08:16:45 UTC
89ec949 noc apache,adjust old path to this file in comment This moved to the noc module a while ago. Fix the confusing comment from before it moved. Change-Id: Ic28b3e01aab4615b809134d56b9c68ab4bde0ac4 04 March 2015, 01:38:16 UTC
cd2719b dbtree: add Apache config, move to own docroot Move the dbtree tool into a separate virtual server and docroot. This way we can be independent from mediawiki deploys, have it in a separate repo and let pupppet deploy it. Bug:T90837 Change-Id: Id442ab305e6b8bea387469fb4c087a39f797b045 04 March 2015, 01:35:02 UTC
41b96b8 dbtree: add to misc varnish config Let the dbtree tool be its own subdomain instead of a directory under noc. All other tools we link to from noc are and this lets us deploy it via puppet and be independent from mediawiki deploy. Bug:T90837 Change-Id: Ib6fefcc4fde81f7d6da08f53551802873405c9c7 04 March 2015, 01:25:08 UTC
back to top