Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
7e30b50 Giuseppe Lavagetto 25 July 2015, 16:42:52 UTC mediawiki: catch thumb_handler.php to HHVM as well Given the urls involving thumb_handler.php do include slashed parts after .php, this specific path was not catched and handled via HHVM. Change-Id: Iae4a8d27a3eab7c2fb4efe795fc1a37c57200533 25 July 2015, 16:42:52 UTC
d773c22 Faidon Liambotis 25 July 2015, 10:23:54 UTC Revert "Add ProxyPass rule for thumb_handler.php" Suspected to cause a thumbnailing outage. Fallback to the well-known state of Zend PHP again. This reverts commits: - 9d45102200e7196ba4933103a3fa1144509515a9. - 3bfb0b5d4e874ba66fb857b36feac173918fc458. Change-Id: I65cd348ce9d5f112aac36f1cb832896bbbab0c58 25 July 2015, 10:24:50 UTC
ede8b34 Jakob Warkotsch 11 June 2015, 11:52:15 UTC Add Phragile module. This module configures a server to run a Phragile instance on labs. Bug: T101235 Change-Id: I3909fb4983426587e26f124a6326bb3ef23bffb3 24 July 2015, 22:13:22 UTC
67a9596 Ori Livneh 24 July 2015, 21:25:57 UTC wmflib: validate_array_re( array $items, string $re ) Throw an error if any member of $items does not match the regular expression $re. Examples: # OK -- each array item is a four-digit number. validate_array_re([8123, 8124, 8125], '^\d{4}$') # Fail -- last array item is not a four-digit number. validate_array_re([8123, 8124, 812], '^\d{4}$') Change-Id: I9feca0df99ae42eeb852f84f4eacf6f6e6901f72 24 July 2015, 21:25:57 UTC
8c4bd87 RobH 24 July 2015, 20:18:31 UTC adding in pagerduty paging to icinga this is simply appending a pagerduty contact into our existing configuration. testing pagerduty out as an sms provider. T106589 Change-Id: I9da80c6ffc2daa0508896ecff22ae4d168cf2412 24 July 2015, 20:20:57 UTC
6a5a060 Faidon Liambotis 24 July 2015, 20:05:06 UTC Revert "rubocop: Fixed Style/TrailingWhitespace offense" This is all for third-party code. We don't own this and we should not unnecessarily deviate from upstream for e.g. stylistic reasons. This reverts commit c259aed94be6e91001bafb77efb95c33bf7ac1a3. Change-Id: I9768145d0ec84d6fd33c9ae4b7e1911dacefb43a 24 July 2015, 20:05:30 UTC
f92f132 Coren 24 July 2015, 19:15:21 UTC Make sure storage-replicate only removes the lockdir if it held the lock To avoid an aborted attempt cleaning up when it shouldn't. Change-Id: Id5b8a8a9ef1a1150b5b84394d2392a4464328117 24 July 2015, 19:16:54 UTC
2bb2552 YuviPanda 24 July 2015, 19:14:41 UTC labstore: Fix timestamp for Lockdir Change-Id: I6ed4ad1ae7e098879572b7249d8ef20f90a3c05e 24 July 2015, 19:15:20 UTC
12b7177 YuviPanda 24 July 2015, 18:41:00 UTC labstore: Clean up logging format for storage-replicate Timestamp is provided by systemd Change-Id: Ie3b822de19ec36f9a19c59fff39a3e767bc2ab51 24 July 2015, 18:42:27 UTC
cc1a9ab YuviPanda 24 July 2015, 18:37:33 UTC labstore: Set logging level to INFO fo storage-replicate Default is WARN I think Change-Id: Id948abf44e7d0610d9de378177ccb1515b318d87 24 July 2015, 18:38:00 UTC
ac2d725 Ori Livneh 24 July 2015, 18:08:06 UTC Follow-up for Ia9a53a6a49: rotate beaconImpression logs Change-Id: I2d673a761c425a64bacba61f76dd57a46e1dd8be 24 July 2015, 18:14:00 UTC
8d3a1a2 YuviPanda 24 July 2015, 18:12:14 UTC labstore: Increase resolution of snapshot naming to include HHMMSS Change-Id: Ibcb4365eb5d9ce821f0e13fa2ee5f3a4cf82ed65 24 July 2015, 18:12:33 UTC
4e94965 YuviPanda 24 July 2015, 18:08:16 UTC labstore: Make storage-replicate executable Change-Id: I65aa744ee1fc06d8964fd2c0001edb77e729a972 24 July 2015, 18:08:31 UTC
33395e5 YuviPanda 24 July 2015, 18:05:38 UTC labstore: Fix boolean conditional to do actual needed check Change-Id: I2f16568550775fe8843912287008f93124e6716e 24 July 2015, 18:05:57 UTC
cd259f1 YuviPanda 24 July 2015, 18:02:17 UTC base: Properly support not specifying service {} in service_unit Change-Id: I9a2c49ad0dbebd39c244b279ac6a38199a4ca3e7 24 July 2015, 18:02:42 UTC
fa7b6a8 YuviPanda 24 July 2015, 17:54:00 UTC labstore: Remove extra base::service_unit Change-Id: I5c0f85662a2983174b76751057a7217e8d4f0f4d 24 July 2015, 17:54:20 UTC
3dfb6fc YuviPanda 24 July 2015, 17:33:13 UTC labstore: Add systemd units for replicating NFS volumes - Also add a param to base::service_unit to allow it to not declare service stanzas, which is needed in this case since we do not want them to autostart yet Change-Id: Ib8be8230011a1f3dacdf8ca026ecadb4c6037cf4 24 July 2015, 17:50:31 UTC
8b6b9ee Coren 24 July 2015, 17:18:17 UTC labstore: Minor python3 fix to storage-replicate Correct for the bytes vs string distinction which either did not previously exist or was handled implicitly. Change-Id: Id692a7a67f9a0b1ab8a50fbf5fc34087d6a60ed1 24 July 2015, 17:20:59 UTC
599bf45 Andrew Otto 24 July 2015, 17:14:20 UTC Add tjones to bastiononly group so he can ssh into stat1002 Bug: T106175 Change-Id: I37c51aadda2b0d793c1b312b6ccfc2a9c48121e4 24 July 2015, 17:14:20 UTC
cc1f3f9 YuviPanda 24 July 2015, 16:54:02 UTC labstore: PEP8 fixes and other minor corrections Only other minor correction is renaming RuntimeError to ContextError Change-Id: Idd3e9a0bffc8c04f862848fbe866911115610476 24 July 2015, 17:02:03 UTC
3bfb0b5 Ori Livneh 24 July 2015, 16:45:32 UTC Follow-up for Ie17cb06: add thumb_handler.php ProxyPass rule to all vhosts Bug: T84842 Bug: T106743 Change-Id: I9da3c2bb860cd361cb8c65a6b753de2fc2dbdd1d 24 July 2015, 16:46:23 UTC
a5864e3 YuviPanda 24 July 2015, 16:28:06 UTC labstore: Move ssh hiera settings into proper place Change-Id: I03c0510c64910c17f971cb4330ddac26e922ad47 24 July 2015, 16:28:06 UTC
89d8bd6 Coren 10 July 2015, 13:09:04 UTC Labs: Script to back labstore filesystems up This will create the snapshot as needed to make a time- consistent copy. TODO: clean snapshots up as free space is becoming low or they are becoming full. Bug: T105027 Change-Id: I078179f84a323957a4124f502aea3073d5c993b5 24 July 2015, 16:07:32 UTC
6712d8c Giuseppe Lavagetto 24 July 2015, 13:32:38 UTC contint::packages: factor c::p::apt out Change-Id: I9a40fb865904c09244eb10bce7f292fdcbe8101a 24 July 2015, 14:31:11 UTC
ad466b2 Giuseppe Lavagetto 24 July 2015, 12:41:12 UTC contint::packages: factor c::p::python out We want to factor a few functionality out of the contint::packages::labs as having that all inside one single class could make it harder to have dedicated slaves that are simpler to build. Change-Id: I3949a7e65c662d2c800965fb8d7c895bac0194e6 24 July 2015, 14:28:53 UTC
cf2ea63 John F. Lewis 24 July 2015, 13:21:49 UTC admin: add new ssh key for joal Bug: T106812 Change-Id: I4f9150f89b702440e728e99b13a5842919d00358 24 July 2015, 13:21:49 UTC
aacd597 Moritz Mühlenhoff 21 July 2015, 14:25:40 UTC Add ferm rules for MX mail servers Bug: T104979 Change-Id: Ic6aa913c2a8e43c4a5e4d9e8889723777f04f1d0 24 July 2015, 12:47:44 UTC
03ce1f0 Antoine Musso 24 July 2015, 10:30:09 UTC contint: drop require to a user in LDAP The puppet requirement upon a User in LDAP does not work: require => User['jenkins-deploy'] Drop the requirement, the actual command will just fail if the user can not be found via LDAP. Bug: T62720 Change-Id: Ie29a4572eccdc025def46a5b38e22480ca49cd4e 24 July 2015, 10:53:58 UTC
19ce477 Antoine Musso 24 July 2015, 10:22:10 UTC contint: fully qualify unix command 54b111324 added some exec commands that missed the full paths causing puppet error: Failed to apply catalog: Parameter unless failed on Exec[jenkins-deploy kvm membership]: 'grep -q 'kvm\S*jenkins-deploy' /etc/group' is not qualified and no path was specified. Please qualify the command or specify a path. at /etc/puppet/modules/contint/manifests/packages/labs.pp:158 Fully qualify the commands: grep -> /bin/grep usermod -> /usr/sbin/usermod Bug: T62720 Change-Id: I79ab5fc5ca0075ef9f388954c325631d1acd6951 24 July 2015, 10:52:24 UTC
eb5cb69 Antoine Musso 24 July 2015, 10:15:10 UTC contint: pin tox to version 1.9.2 With T46443 we have python tox installed using the puppet 'pip' provider and ensure => present. I guess that installs whatever latest version is available in pipy, so we want to pin it to a specific version. Looking at puppet code, it seems we can pass the version to the ensure parameters. Currently all slaves have 1.9.2, so ensure 1.9.2 instead of present. Puppet runs: Debug: Executing '/usr/bin/pip install -q tox==1.9.2' Notice: /Stage[main]/Contint::Packages::Labs/Package[tox]/ensure: created Bug: T106799 Change-Id: If4a12931146b04078b12f7f891f32e35d4ffcdd8 24 July 2015, 10:45:31 UTC
70ec758 Matanya Moses 23 July 2015, 20:04:03 UTC access: grant Tilman Bayer access the Analytics data Bug: T105748 Change-Id: Iaca3da6e924ceb70d9e4d0f8b7ca36ed6cddf877 24 July 2015, 09:44:24 UTC
6ecde4d Matanya Moses 21 July 2015, 18:54:51 UTC access: add dcausse to statistics-privatedata-users bug: T106370 Change-Id: I08840310f37ff4fbabe14c30e03049348d530518 24 July 2015, 09:36:45 UTC
627dd95 Matanya Moses 23 July 2015, 07:54:10 UTC access: grant srijan access to stat1003 via research group bug: T106407 Change-Id: If72c7c0532ebb58bc3702318afe9897f1ed078f4 24 July 2015, 09:29:55 UTC
2ddefaf Matanya Moses 23 July 2015, 07:52:34 UTC access: shell account for Srijan Kumar bug: T106407 Change-Id: Ide2854b507b1138bb965e503e480bd9c6435c360 24 July 2015, 09:29:17 UTC
d9e6cd0 Matanya Moses 23 July 2015, 07:35:40 UTC access: New production ssh key for awight bug: T106625 Change-Id: Iac2424b30944c6aee3366ee22f82bdbbc5b1ecec 24 July 2015, 09:20:18 UTC
ae17722 Antoine Musso 24 July 2015, 09:17:00 UTC contint: install etcd latest on Jessie light slaves There is no straightforward way to build the 'etcd' package for Ubuntu Trusty. To avoid a pain in the a**, the test jobs will be run on the Jessie light slave just like we did for gdnsd linting. Ensure we have the latest 'etcd' package on the light slaves (which are all Jessie). Change-Id: Id7c7c1378e155d348a80e4fdd08f33f7679122a8 24 July 2015, 09:18:12 UTC
88a339c Filippo Giunchedi 21 July 2015, 10:33:34 UTC admin: add daniel to analytics-privatedata-users group Bug: T106047 Change-Id: I1ae34cba3a31658f9f95151d2c332f9442f48818 24 July 2015, 09:14:20 UTC
dfde70f Moritz Mühlenhoff 21 July 2015, 12:34:21 UTC Enable ferm for mc2* systems in codfw Change-Id: I6c42be1a241f8630603e4ab63100844b7669bbdc 24 July 2015, 08:18:43 UTC
70ee5eb dzahn 09 July 2015, 23:27:20 UTC add admin group 'wikidata query service deployers' As explained by Joe in the ticket, we need a new admin group for Wikidata Query Service deployers and grant it sudo rights to start/stop/restart the wqds service. Per Smalyshev there will be two services, wdqs-blazegraph and wdqs-update are the suggested names. We are also adding journalctl for access to logs. Bug:T105185 Change-Id: I4c19134e652f71e4da6df92bb75d235725d9ac24 24 July 2015, 07:58:14 UTC
0850fa2 Moritz Mühlenhoff 23 July 2015, 10:25:42 UTC Add ferm rules for HHVM admin site Change-Id: Ic497ed9278d753e6bb06fb13607a20ea62cb132d 24 July 2015, 07:56:58 UTC
e0ba615 Moritz Muehlenhoff 03 July 2015, 09:49:55 UTC add ferm rules for redis Change-Id: Idec2e936f6072b7c77d0be70d3f2ed729f53fa88 24 July 2015, 07:45:17 UTC
bf8e696 Gergő Tisza 08 July 2015, 20:20:56 UTC Fix graphite keys in API dashboard 'MediaWiki' comes from RequestContext::getStats(), the rest from I8b9366407c0d1713790d08e69aaa518130f01977. Bug: T85841 Change-Id: Iabe75aad40a5e99fca321fd3499bf806885408cb 24 July 2015, 05:11:36 UTC
c259aed Željko Filipin 16 July 2015, 21:04:06 UTC rubocop: Fixed Style/TrailingWhitespace offense Bug: T102020 Change-Id: I96e2e47c0e0a0b0868d0b5ec27f79fd191a76272 24 July 2015, 03:00:28 UTC
1311677 Željko Filipin 15 July 2015, 19:56:44 UTC rubocop: Add basic configuration All violations are ignored for now. For more information see: - https://www.mediawiki.org/wiki/Repositories_with_Ruby_code - https://www.mediawiki.org/wiki/Manual:Coding_conventions/Ruby - http://filipin.eu/rubocop/ Bug: T102020 Change-Id: Ifca0319e9d49f9a546a420c4a7a9a26d73b04101 24 July 2015, 02:58:59 UTC
9d45102 Ori Livneh 24 July 2015, 00:11:22 UTC Add ProxyPass rule for thumb_handler.php URLs with path components /w/thumb_handler.php/8/83/... won't match the main ProxyPass match ^/w/(.*\.(php|hh))$, and Zend PHP will end up handling the request instead. Bug: T84842 Bug: T106743 Change-Id: Ie17cb06ce61db5e5cc76c13b9773194cf0fd88be 24 July 2015, 00:15:50 UTC
10d2a5f Ori Livneh 23 July 2015, 23:48:21 UTC erbium: add a log for beacon/impression Add a log stream, matching the configuration of the Special:RecordImpression log stream, for beacon/impression. Bug: T106624 Change-Id: Ia9a53a6a495970107ce1af47d5e6126385fd6845 23 July 2015, 23:50:18 UTC
9c040fb Yuvipanda 23 July 2015, 23:44:58 UTC Revert "cassandra: Fix strict puppet-lint warnings" These were actually necessary to cast the integers into strings, otherwise we end up with: Error 400 on SERVER: validate_re(): 18 does not match "^[0-9]+$" at /etc/puppet/modules/cassandra/manifests/init.pp:236 This reverts commit 67ecf83610337a4ee8eff75f0d26e69a0714dcf2. Change-Id: I203f7b89d316c724132e66e7dae612bec5f5098e 23 July 2015, 23:45:04 UTC
54b1113 Stephen Niedzielski 21 July 2015, 22:37:51 UTC Add Android emulation prerequisites - Install emulation package dependency, qemu. - Add Jenkins runner to kvm group. Change-Id: Ib21e15df25e733ba2053b5d91f133ffb36fa9096 Bug: T62720 23 July 2015, 23:37:30 UTC
67ecf83 Tim Landscheidt 22 July 2015, 20:23:31 UTC cassandra: Fix strict puppet-lint warnings Bug: T87132 Change-Id: I5760bd4c8e32af82d66e25ed07c837f6e6b84e2a 23 July 2015, 23:20:53 UTC
d988f39 Tim Landscheidt 23 July 2015, 15:35:45 UTC Tools: Remove grid host alias for deleted instance Bug: T104919 Change-Id: If0072fdfcd759deec4f51306690ee6a54f1fb813 23 July 2015, 23:07:36 UTC
b7d0340 Ori Livneh 23 July 2015, 22:52:44 UTC asset-check: compute payload size correctly * Set a custom Accept-Encoding header to avoid receiving compressed replies, which mess up our ability to compute payload size. See <https://github.com/ariya/phantomjs/issues/10930> for details. * Don't track the number of compressed responses. We no longer send a header indicating that we accept compressed responses, so we shouldn't be getting any, and hence the number will always be zero. * Update payload size calculation code for <https://github.com/ariya/phantomjs/pull/13195>. I re-packaged phantomjs on hafnium to include this patch. * Conform with MediaWiki JavaScript code style. Change-Id: I55cf5556867463a3315d74b213efb00231fa0b9b 23 July 2015, 22:55:35 UTC
34ee0c9 Ori Livneh 23 July 2015, 20:38:25 UTC navtiming.py: add firstPaint metric Change-Id: Ie4d611b1b160010f7f8113cf629b3266e381a8b1 23 July 2015, 20:38:25 UTC
86b95b9 Ori Livneh 23 July 2015, 18:51:12 UTC asset-check: use HTTPS urls; use TLSv1 By default, PhantomJS tries to use SSLv3, which we no longer support. Bug: T105354 Change-Id: If29976349abe3969b50ff20667e10a31692ec2b0 23 July 2015, 18:52:13 UTC
2124132 Timo Tijhof 22 July 2015, 23:46:02 UTC contint: Remove krinkle from contint alert groups I'm no longer actively involved in monitoring the day-to-day operations of the continuous integration infrastructure. Change-Id: I2eb8a4ff5f43ea21b0fd66adfc6b7bd8298b9dd4 23 July 2015, 17:47:05 UTC
738572a jcrespo 23 July 2015, 16:51:00 UTC Reenabling firejail on systemd-based services In reality, the problem with the script lied on using the quote sign (") for user and group, where it is not accepted. The script never worked in the first place. Change-Id: I93770483c65d715850faee9499fb7bc7999837c5 References: T106667 23 July 2015, 16:51:00 UTC
d590836 Moritz Mühlenhoff 23 July 2015, 14:30:32 UTC Don't use firejail for systemd-based services yet. systemd refuses to start setuid binaries (such as firejail) if User= or Group= are specified in the unit file. That can probably be configured, but let's sort that out later. Change-Id: Ibfc4a3e14e550d2f9c6d513c8455a29551da2471 23 July 2015, 15:49:27 UTC
59f0ace Faidon Liambotis 23 July 2015, 15:31:30 UTC Revoke gage's SSH key Change-Id: Id938b381d9748c98a26c53f5e3c51b3882b79ffd 23 July 2015, 15:31:30 UTC
0185cf7 Andrew Otto 23 July 2015, 13:51:24 UTC Provision analytics1042-1045 as analytics worker nodes Change-Id: I3c08274287ddb42178b6598b26fca7d28c1091cf 23 July 2015, 13:52:06 UTC
1b15f47 Giuseppe Lavagetto 23 July 2015, 13:28:13 UTC graphoid: enable spec-based monitoring Bug: T94821 Change-Id: If0c5b0790583794275dc43de458fa167d8bb24b5 23 July 2015, 13:44:55 UTC
20d1c18 Giuseppe Lavagetto 23 July 2015, 08:11:37 UTC service::checker: add support for other HTTP verbs Also manage non-string response objects. Change-Id: I8833812e4ea476f7ad006243a7975590b8573aeb 23 July 2015, 13:17:24 UTC
357366a Moritz Mühlenhoff 22 July 2015, 09:03:54 UTC Remove firejail conditional Now that firejail, graphoid and mathoid have been migrated to firejail in production, remove the "firejail" conditional in service::node and use firejailed execution for all upcoming services. Bug: T101870 Change-Id: I0970967a2eb7e8d9b21ef361d6107702f20e15d1 23 July 2015, 07:30:11 UTC
501e9c5 Giuseppe Lavagetto 23 July 2015, 07:01:55 UTC admin: grant access to stat1003 and eventlogging to legoktm Bug: T106184 Change-Id: I042c9030223da84811c509ce2be5a05566b2ac11 23 July 2015, 07:08:58 UTC
a69a915 Yuri Astrakhan 22 July 2015, 21:15:03 UTC Fixed possible port mistype Kartotherian by default is on port 4000. The services.yaml uses the port 400, which i suspect is a typoo. Please double check Change-Id: Ib37c769297ef9c0e4c6ca0289abe70dcd260c247 22 July 2015, 22:24:53 UTC
f380111 Yuri Astrakhan 22 July 2015, 21:21:24 UTC Change kartotherian config params Added a missing parameter "sources:" Change-Id: Id806c8c782d9c5c589b892a7769abf88321c5cce 22 July 2015, 22:18:25 UTC
e8c64e2 Bryan Davis 01 March 2015, 07:55:58 UTC Add role::labs::mediawiki_vagrant Add a role and modules to provision and configure Vagrant to manage an LXC container to run as a MediaWiki-Vagrant instance. * Create a new trusty instance (doesn't work on jessie) * Apply ::role::labs::mediawiki_vagrant * Force a puppet run * Log out and log back in to pick up profile.d magic * cd /srv/mediawiki-vagrant * vagrant up * Setup wikitech to proxy to :8080 on your vm * Profit! Requires: I343c8da6e345933e29f92523638d3b19e133894b Requires: I0ee0caf19019ce6415519561ff33b3453b310468 Bug: T106213 Change-Id: I04cfa3d143cad92b2be57d3813f0b09ecfb45bf5 22 July 2015, 21:43:29 UTC
2b97a19 YuviPanda 22 July 2015, 19:45:20 UTC labstore: Add timeout of 5s to urlopen call to wikitech Bug: T106076 Change-Id: Id220aac96efceb293a8ac0a408301007136ead8d 22 July 2015, 19:46:37 UTC
d32452a YuviPanda 06 July 2015, 18:30:17 UTC labstore: Use safe_load vs load for yaml loading Arbitrary code execution, etc Change-Id: I44ecca04e7e7647e09c1d8fd7a0266ebe172cb0c 22 July 2015, 19:46:13 UTC
b9cb21c Erik Bernhardson 22 July 2015, 16:41:55 UTC Fix IndentationError in es-tool Trying to run this script resulted in: File "/usr/local/bin/es-tool", line 204 return os.EX_UNAVAILABLE ^ IndentationError: unindent does not match any outer indentation level Change-Id: I6ba90e18dcb841cbf24826034b10dfe1025ceff2 22 July 2015, 16:54:31 UTC
97babf3 Giuseppe Lavagetto 20 July 2015, 10:31:58 UTC hhvm: expire APC keys after 2 days We don't want keys to live indefinitely in APC in HHVM (as it implies memory starving), so we set an upper limit to the TTL of any key. Bug: T104769 Change-Id: I2259991ac6d68bc107c9c3c8ced4bd1a9abfe3c1 22 July 2015, 16:46:20 UTC
c716d6c Antoine Musso 22 July 2015, 14:32:43 UTC nodepool: fix erb expansion for dib_cache_dir <% @foobar -%>, does not yield anything. Was missing an equal sign. Change-Id: I79fee2ca8b901ae541d6f1a9429cb586845945ca 22 July 2015, 14:46:15 UTC
470956c Antoine Musso 10 July 2015, 15:39:36 UTC nodepool: systemd wrapper Puppetize a basic systemd unit for Nodepool. systemd default to stopping the service with SIGTERM which Nodepool handle by abruptly exiting. Instead stop it with the provided `nodepool-graceful-stop` which is feed with the PID systemd knows for nodepool. Eventually after systemd TimeoutStopSec expired, SIGKILL will be sent wich finish the process. systemd launch nodepool in interactive mode (with -d) and keep tracks of the process PID. Hence there is no need for a pid file under /var/run/nodepool stdout/stderr are sent to syslog. Quite useful to find warnings and errors via journalctl. For later: * Need to define some new commands, such as dump_stack to send SIGUSR2 and maybe graceful-stop / force-stop. We will see. * Include all of this in the Debian package. Easier to handle via puppet for now. Bug: T96867 Change-Id: Idd917f3ef4ade088c5f9ca322a181077d9442173 22 July 2015, 14:45:29 UTC
cd0e67a Giuseppe Lavagetto 22 July 2015, 14:19:07 UTC role::ganglia::web: fully qualify class inclusion Change-Id: I5550737a505a4d5217292b54e048250a45121724 22 July 2015, 14:19:07 UTC
449bfc2 Giuseppe Lavagetto 20 July 2015, 14:20:15 UTC ganglia: rename ganglia_new to ganglia Change-Id: I1e92bc3e994e9a522c82b3b7c3b5136622d34250 22 July 2015, 14:11:02 UTC
a4d7c3b Moritz Mühlenhoff 21 July 2015, 18:57:06 UTC Enable ferm on labnodepool mariadb only listens on localhost and https://www.mediawiki.org/wiki/Continuous_integration/Architecture/Isolation#Security_matrix only lists further outgoing connections (which are not restricted by default). I suggest we enable base::firewall and all further service added can then be whitelisted in ferm as they get added? Change-Id: I851d18b1ff8703d600e4c24e353a5198b1836435 22 July 2015, 13:43:20 UTC
b55ae25 Matanya Moses 21 July 2015, 18:49:03 UTC access: add Trey Jones to statistics-privatedata-users bug: T106175 Change-Id: Ib47fb9140e68d9d8f6bc92f973d4cd823da30507 22 July 2015, 09:57:25 UTC
0d191fb Matanya Moses 21 July 2015, 14:24:42 UTC access: shell account for Trey Jones bug: T106175 Change-Id: I5d7aacda04918b0893b906a345c1fd01ce99da11 22 July 2015, 09:54:27 UTC
356a345 Gabriel Wicke 21 July 2015, 18:20:47 UTC Make compaction alert less sensitive to short-time spikes Compaction backlogs often spike into the thousands, but typically clear within 10-20 minutes. We are interested in general long-term back-ups, which means that this should be the case for more than 50% of one hour. Change-Id: I2fd07119efdd23b77ac41269cbad68f1bb9a61e4 22 July 2015, 09:46:26 UTC
acdad27 Giuseppe Lavagetto 22 July 2015, 08:22:04 UTC ganglia: correctly use variable, not bareword This broke puppet in beta Change-Id: I2d66c7c144c3821d93588aa19918f219636e7d1d 22 July 2015, 08:42:15 UTC
f6d32e7 Moritz Mühlenhoff 22 June 2015, 10:10:34 UTC Enable firejail for graphoid Enable firejail for graphoid (preliminary tests on deployment-sca02 were fine, but more tests to follow) Bug: T103095 Change-Id: Ifbedad623496f0267e86f10798872fa1df191d55 22 July 2015, 08:38:41 UTC
5a15145 Giuseppe Lavagetto 20 July 2015, 14:09:47 UTC ganglia: standardize has_ganglia Change-Id: I589e992486b1ea601c7e066b279a20511fb300e3 22 July 2015, 07:36:31 UTC
86f221d YuviPanda 21 July 2015, 23:01:38 UTC ssh: Remove ssh_restrict_network LDAP variable Introduced in https://gerrit.wikimedia.org/r/#/c/57447/ but completely unused in labs and prod. Killing since Coren isn't sure what it was for either. Bug: T101447 Change-Id: Iaa6a755657f6de20c71609d30005ffc095f9fcff 21 July 2015, 23:31:06 UTC
c2133d3 YuviPanda 21 July 2015, 22:47:51 UTC ssh: Disable LDAP key lookup for HBA Verified that only tools project uses this, and that is handled by hiera now Bug: T101447 Change-Id: I59e184d6c30215e9018ab8d555895e11d4ffa6b0 21 July 2015, 23:30:51 UTC
d847086 cpettet 21 July 2015, 22:38:44 UTC phab: syntax fixes for extension management Change-Id: I01628347918c12ead4780c2267663ba24e9098bb 21 July 2015, 22:38:44 UTC
a4e0947 Andrew Otto 06 July 2015, 19:17:47 UTC Symlink .wars for git-fat in Archiva too Change-Id: I7023ff86550c84e017a4aa5ce70c34bc905d045e 21 July 2015, 21:06:06 UTC
672af2a YuviPanda 21 July 2015, 20:57:59 UTC diamond: Use require_package instead of ensure_packages Conflicts with an require_package on other places, such as modules/service/manifests/monitoring.pp Change-Id: I50a7d0816ac47987c24f39d31ebd219939648aa7 21 July 2015, 21:03:55 UTC
ed6350c Stanislav Malyshev 21 July 2015, 20:13:58 UTC Fix package_dir dependency for wdqs Change-Id: Idb795ff23c0c28e1f9bda83f452205d7ec5fc931 21 July 2015, 20:19:21 UTC
121ed17 Mukunda Modell 20 July 2015, 22:39:25 UTC Ensure that phabricator/src/extensions exists Gotta have the directory created before adding symlinks there. This should fix T104904. Bug: T104904 Change-Id: Ic1ae541b99e87f17efba517065a88deb70509b37 21 July 2015, 19:06:39 UTC
f1b8f55 Timo Tijhof 10 July 2015, 19:00:21 UTC grafana: Set a default dashboard By default the default_route is 'dashboard/file/default.json' which is immutable and not very useful. https://grafana.wikimedia.org/#/dashboard/file/default.json Instead, point to an actual dashboard; one that we can modify: https://grafana.wikimedia.org/#/dashboard/db/home Also fix dead-end url to annotated settings file on GitHub. That file no longer existed in latest upstream master. Use a permalink to v1.8.1 instead, which applies to our install. Avoid naming our custom home 'db/grafana' which is the default name that is chosen when trying to save the file/default.json dashboard – thus overwriting our custom home page. Change-Id: I5f117822ac737f16a1b8e82a585e16dc2dce459e 21 July 2015, 18:45:12 UTC
1927428 Giuseppe Lavagetto 21 July 2015, 17:18:27 UTC ci: fix typo Change-Id: Ib601f78ebc36c18f8fac7f254f021006d905fff2 21 July 2015, 17:18:27 UTC
af09086 Giuseppe Lavagetto 21 July 2015, 17:15:29 UTC ci: fix ganglia plugins hotlinking Change-Id: I7bb5644d74f46fbb880c979bf6c55b40cedc8bda 21 July 2015, 17:15:29 UTC
9bea1ed Ori Livneh 21 July 2015, 16:49:48 UTC ops: +aaron Bug: T106051 Change-Id: Idf30afc8349987cde771574fd76efa88bfaa4f6c 21 July 2015, 17:04:49 UTC
66c2d14 Andrew Otto 21 July 2015, 16:52:48 UTC Add host entries for analytics1042-analytics1045 Bug: T104463 Change-Id: I12c2313319e368f1184d48ddcc0a445be17c9f70 21 July 2015, 16:52:48 UTC
a4bb7f4 cmjohnson 21 July 2015, 16:24:32 UTC Adding mw1090 back to dsh group Change-Id: I063363dcb123368a7375ffb6752fe2445ebdad1e 21 July 2015, 16:31:39 UTC
3f7484f Andrew Otto 21 July 2015, 16:19:54 UTC Using analytics-flex for new Hadoop worker nodes analytics1042-1045 Change-Id: I021175be6b01d616dd0cf9ac76beb258abe7638f 21 July 2015, 16:26:43 UTC
1ee6f3f Giuseppe Lavagetto 21 July 2015, 16:19:48 UTC ganglia: re-define generic ganglia class Change-Id: If6daf577c38098cb9b25eb39c558b5c93a60015f 21 July 2015, 16:19:48 UTC
c9b7e22 Giuseppe Lavagetto 20 July 2015, 13:57:00 UTC ganglia: remove ganglia.pp Change-Id: Ib9c32e2a2b4e01dd149b9f12a9cd4fcb9ecf3d4e 21 July 2015, 16:08:19 UTC
e619f9b cpettet 21 July 2015, 15:53:44 UTC Revert "Ensure that phabricator/src/extensions exists" This reverts commit 4242b2fa038af7454c8f99a213c07158b0c3dcf8. Error: Failed to apply catalog: Parameter require failed on File[/srv/phab/phabricator/src/extensions/MediaWikiUserpageCustomField.php]: No title provided and "/srv/phab/phabricator/src/extensions/" is not a valid resource reference at /etc/puppet/modules/phabricator/manifests/extension.pp:13 Wrapped exception: No title provided and "/srv/phab/phabricator/src/extensions/" is not a valid resource reference Change-Id: Iafe9d8039161c8ab2d62f9f7023a5c6443701fbe 21 July 2015, 15:54:49 UTC
f575e4f Giuseppe Lavagetto 20 July 2015, 13:46:08 UTC ganglia: remove ganglia_class conditionals Change-Id: If749bdc42cffa394e9c235d57bfcc3f1e5c61a44 21 July 2015, 15:52:40 UTC
4242b2f Mukunda Modell 20 July 2015, 22:39:25 UTC Ensure that phabricator/src/extensions exists Gotta have the directory created before adding symlinks there. This should fix T104904. Bug: T104904 Change-Id: I9b9e21a7b51f8a5c9edf797679dc03faf589aad1 21 July 2015, 15:51:43 UTC
cc92af4 Stanislav Malyshev 06 June 2015, 07:57:04 UTC Add definitions for WDQS service Task: T95679, T103904 Change-Id: Ie60e8962304c878a122d042f1d973e7b31ae4470 21 July 2015, 15:19:03 UTC
back to top