| 26a29ea | Ori Livneh | 08 November 2015, 03:43:32 UTC | redis: prohibit commands CONFIG, SLAVEOF and DEBUG by default Make the redis module prohibit the commands CONFIG, SLAVEOF and DEBUG by default, because of the security issues they pose. As suggested by YuviPanda. Change-Id: Ia5f630e8a1ca735b7d4b67f8a66b78e22170f893 | 08 November 2015, 05:17:17 UTC |
| f93e5e0 | Ori Livneh | 08 November 2015, 03:32:08 UTC | coal-web: make the default period 'day' instead of 'hour' 'Hour' is not often useful. 'Day' is a better default. Change-Id: I1e3d2a6111116c01966bab13962f3fef38b56e1c | 08 November 2015, 03:33:07 UTC |
| 8535c9f | Brandon Black | 07 November 2015, 15:22:22 UTC | bring ciphersuite commentary up to date Change-Id: I4e9eac747eff7405236c7e1ed369fa893d4bf7c9 | 07 November 2015, 15:22:28 UTC |
| 4b2e59b | Brandon Black | 07 November 2015, 13:03:44 UTC | remove erroneous comments Change-Id: I1c36ec944f28baddd9f84a7c24ec86b1688f6c14 | 07 November 2015, 13:03:44 UTC |
| ae8abcd | Ori Livneh | 07 November 2015, 02:28:07 UTC | Add cli-shutdown.groovy from Jenkins advisory Change-Id: I78bff57e01cba06cd053cb6de49c12873ee33f40 cf: https://jenkins-ci.org/content/mitigating-unauthenticated-remote-code-execution-0-day-jenkins-cli | 07 November 2015, 02:28:47 UTC |
| 44cabb5 | cpettet | 06 November 2015, 22:31:14 UTC | labtest* hosts pxe and install setup Bug: T117097 Change-Id: Ibeba47ba87c3281eaeb748752285ae6ccf3e71cd | 06 November 2015, 22:41:29 UTC |
| 5a6a3ad | cpettet | 06 November 2015, 22:15:32 UTC | autoinstall setup for labs-hosts1-b-codfw Bug: T115491 Change-Id: Ia0a8704eb51dda98770520dd2d9c736c81403faa | 06 November 2015, 22:40:21 UTC |
| 66ba26d | dzahn | 05 November 2015, 18:15:07 UTC | puppet-lint: re-enable 'unquoted file modes' check We have fixed this particular lint issue all across the repo. I ran puppet-lint on all .pp files and confirmed none of these are left after I09538103759e8f2 was merged. No more "unquoted file modes" ( mode => 0644 etc. ) are left. So we can re-enable this lint check again to stop us from adding any new ones. Bug:T93645 Change-Id: Ibdf27c1bbf557b8a9995b93a936057049d450de4 | 06 November 2015, 21:43:55 UTC |
| a51ce2c | dzahn | 05 November 2015, 15:51:56 UTC | ldap: split client.pp into one file per class Each class should be in a separate file. So i'm removing the existing client.pp and put each class into a separate file. No other changes to the classes. This is the right structure and fixes these: ERROR: ldap::client::pam not in autoload module layout on line 1 ERROR: ldap::client::nss not in autoload module layout on line 37 ERROR: ldap::client::utils not in autoload module layout on line 116 ERROR: ldap::client::sudo not in autoload module layout on line 245 ERROR: ldap::client::openldap not in autoload module layout on line 256 ERROR: ldap::client::includes not in autoload module layout on line 269 Change-Id: I01bfae251fff687fce1efcbbb94794be9bf863b2 | 06 November 2015, 21:39:20 UTC |
| 2fa99f7 | Ricordisamoa | 02 November 2015, 21:32:54 UTC | Redirect pietrodn's intersect-contribs to Tool Labs Query parameters aren't the same unfortunately. Change-Id: Icff46d21b6e17a0d760d40f420746a13aaa6956f | 06 November 2015, 21:35:15 UTC |
| 858df90 | andrewbogott | 06 November 2015, 11:18:32 UTC | Labs: For instance dns, use actual project_name rather than tenant_id. They're the same now, but won't always be. Bug: T117610 Change-Id: Ieaec6180ec2c885c91c8d35e20a53fc9fe9f600a | 06 November 2015, 21:25:42 UTC |
| 29bd946 | cpettet | 06 November 2015, 15:56:47 UTC | decom: haedus/capella were removed in august 2015 Bug: T94474 Change-Id: Ica3424fccccc461bf663667aa578dbddbf3cedb4 | 06 November 2015, 20:34:19 UTC |
| c8ef95e | Ori Livneh | 06 November 2015, 19:07:42 UTC | jobrunners: add rdb1007 to queue_servers and aggr_servers Change-Id: I5f185a566f91f11a288730da062f07f740a9fe15 | 06 November 2015, 19:07:42 UTC |
| da00f60 | dzahn | 06 November 2015, 18:05:17 UTC | mw1083: add back to dsh group This had a hardware issue and the disk has been replaced by cmjohnson. Bug:T116184 Change-Id: I987d6574783c764089049134fe3605c9faa50623 | 06 November 2015, 18:08:05 UTC |
| ff52128 | Ori Livneh | 06 November 2015, 17:30:53 UTC | add Restart=always to webperf jobs Change-Id: I1a12526a9ab7412099472fa50886e56976c574a1 | 06 November 2015, 17:30:53 UTC |
| 32882b6 | Filippo Giunchedi | 06 November 2015, 16:31:46 UTC | ferm: add new swift machines Change-Id: I71014a29a32a8c47b8e8485f627a652a52cb30e3 | 06 November 2015, 16:34:14 UTC |
| b28959c | Jcrespo | 06 November 2015, 15:01:37 UTC | Deploy the new db20XX databases with the actual shards provisioned This is the final distribution: s7 ====== db2029 (M) B6 db2040 C6 db2047 C6 db2054 D6 db2061 D6 db2068 D6 s6 ====== db2028 (M) B6 db2039 C6 db2046 C6 db2053 D6 db2060 D6 db2067 D6 s5 ====== db2023 (M) B6 db2038 C6 db2045 C6 db2052 D6 db2059 D6 db2066 D6 s4 ====== db2019 (M) B6 db2037 C6 db2044 C6 db2051 C6 db2058 D6 db2065 D6 s3 ====== db2018 (M) B6 db2036 C6 db2043 C6 db2050 C6 db2057 D6 s2 ====== db2017 (M) B6 db2035 C6 db2041 C6 db2049 C6 db2056 D6 db2063 D6 db2064 D6 s1 ====== db2016 (M) B6 db2034 C6 db2042 C6 db2048 C6 db2055 D6 db2062 D6 db2069 D6 db2070 D6 Bug: T84428 Change-Id: Ieae74a18437b6fe8b4b4b05a77a3e7114ab9d316 | 06 November 2015, 15:25:31 UTC |
| ffa0aee | Joseph Allemandou | 06 November 2015, 14:05:41 UTC | Update mediawiki_CirrusSearchREquestSet camus cron Add --check parameter to the job to provide _IMPORTED files in imported folders. Change-Id: Iab07e285289b8332cdd269d83bea57a146c8d1a7 | 06 November 2015, 14:47:29 UTC |
| 2545739 | RobH | 06 November 2015, 13:57:20 UTC | scandium needs to be jessie updating dhcpd lease file T95046 Change-Id: I06da3a121959c5f902e628a9fbfb6d6a5370b2a1 | 06 November 2015, 13:58:42 UTC |
| bb535f7 | Antoine Musso | 06 November 2015, 11:20:45 UTC | contint: get libgnutls28-dev on Jessie c0c126b2 installed libcurl4-gnutls-dev. On Ubuntu it depends on libgnutls-dev but on Debian Jessie it is only a suggestion. Explicitly install libgnutls28-dev on Jessie. Bug: T117955 Change-Id: I439b96fa7589f00e16b2356d1e2bbbf41e7bf619 | 06 November 2015, 11:20:45 UTC |
| c0c126b | Antoine Musso | 06 November 2015, 09:46:24 UTC | contint: explicitly set ssl/tls libcurl dev package libcurl-dev is a virtual package and does not install anything causing: Building dependency tree... Reading state information... Package libcurl-dev is a virtual package provided by: libcurl4-openssl-dev 7.38.0-4+deb8u2 libcurl4-nss-dev 7.38.0-4+deb8u2 libcurl4-gnutls-dev 7.38.0-4+deb8u2 E: Package 'libcurl-dev' has no installation candidate So we have to pick a specific library. On all three distributions we use, the python-pycurl package is build against gnutls. Install libcurl4-gnutls-dev instead of referencing libcurl-dev. This reverts commit: ab5e658c61572170739d4e5e5d971871c1b6105c "Add libcurl-dev to Python Jenkins" Bug: T111005 Bug: T117955 Change-Id: I5e8cbb6af9b462bd9df1b0c39819f18c61e39580 | 06 November 2015, 10:49:36 UTC |
| 956785a | Filippo Giunchedi | 06 November 2015, 10:16:54 UTC | Revert "cassandra: add xenon-b instance" ATM the eqiad test cluster doesn't have enough disk space to accomodate two instances per machine This reverts commit 81a2424920db5444defda61c6577efb477b99db0. Change-Id: I84a7db19bcf372ce4e4644e9e5a3058502303c6a | 06 November 2015, 10:17:04 UTC |
| 955faa2 | Giuseppe Lavagetto | 06 November 2015, 08:57:15 UTC | redis: install two additional redis servers These are old lsearchd boxes we're repurposing temporarily, while we wait for the new hardware. Bug: T117916 Change-Id: I7c2263aeae2dd38f3066b8dedeaca944cf64d2c4 | 06 November 2015, 09:01:30 UTC |
| 81d3fed | Moritz Muehlenhoff | 04 November 2015, 16:48:14 UTC | Assign salt grains for dbstore systems These don't use the role keyword (and are not straightforward to convert since they instantiate parametrised classes), so define the Hiera values via regex.yaml Change-Id: I9e1c28a8698c76e508c7610a933d5afb48d3656f | 06 November 2015, 08:34:38 UTC |
| d76f731 | Max Semenik | 23 October 2015, 17:22:26 UTC | Beta: deploy www.wikipedia.beta.wmflabs.org/ from version control Change-Id: I8fceb0e5a4514392281d189eeca417f2ed867fe8 | 06 November 2015, 01:13:12 UTC |
| 5db8a47 | YuviPanda | 06 November 2015, 00:44:34 UTC | uwsgi: Fix notify behavior Previously, changing the contents of the ini file does not restart uwsgi, thus not picking up changes Change-Id: I534b186c64d1eb0fb4770a51a996b324258c4f2e | 06 November 2015, 00:44:34 UTC |
| 7fdc93f | YuviPanda | 06 November 2015, 00:39:58 UTC | dynamicproxy: Tweak uwsgi parameters some more Change-Id: Ied98572997707d23e132fad6bbca296324608c03 | 06 November 2015, 00:39:58 UTC |
| 94d0e73 | YuviPanda | 06 November 2015, 00:13:10 UTC | dynamicproxy: Mount dynamicproxy API on a prefix Change-Id: I08239e674ffa8eb901bd696e1f4f6a3a2456c394 | 06 November 2015, 00:13:10 UTC |
| 80e0985 | YuviPanda | 06 November 2015, 00:05:35 UTC | dynamicproxy: Explicitly specify callable for uwsgi Change-Id: I737cd3b42eb102f793bcb2dddc56f02e6125d609 | 06 November 2015, 00:05:35 UTC |
| e147659 | YuviPanda | 05 November 2015, 23:54:00 UTC | dynamicproxy: Install proper flask package Change-Id: I7ea7947bc56fc59569c14c0136b36cbd4d533d0e | 05 November 2015, 23:54:00 UTC |
| f42775a | YuviPanda | 05 November 2015, 00:32:29 UTC | dynamicproxy: Move invisible-unicorn into puppet - Was just one file, no point in it being in a separate deb - Also get rid of nginx layer, uwsgi can serve itself now - Fix some pep8 warnings! - Add a .pep8 file into the module so it stops complaining about the stupid part of pep8 Change-Id: I8f6be94adab53625a9e8d607beb66b530c30276e | 05 November 2015, 23:49:59 UTC |
| ab5e658 | Gilles Dubuc | 05 November 2015, 23:08:00 UTC | Add libcurl-dev to Python Jenkins Needed by Jenkins for I253a96525d988f835ec2b1df432fd225a6883420 Bug: T111005 Change-Id: I9c513cc9683d8232a3e9cedf359ef620f57686bd | 05 November 2015, 23:08:00 UTC |
| 1bf954b | Dan Duvall | 05 November 2015, 22:25:45 UTC | Install libjpeg-dev for diagrams in documentation The scap3 documentation contains blockdiag diagrams which require libjpeg-dev somewhere down the dependency graph. Change-Id: Ic20f98d6423cdd9c809385fb64c7a6fc074e5003 | 05 November 2015, 22:25:45 UTC |
| 7934653 | RobH | 05 November 2015, 22:15:23 UTC | setting install params for rdb1007-1008 setting install params for rdb1007-1008, also fixing ordering of rdb2XXX systems in lease file. 117916 Change-Id: I666a0a83beb1ecf06d279ba45ee6fa38cdbf8834 | 05 November 2015, 22:15:23 UTC |
| 43510a3 | Ori Livneh | 05 November 2015, 03:26:00 UTC | Relax and extend the Content-Type regexp that controls gzipping Many backend responses specify a charset encoding, in which case the current regexp (which is anchored with a '$') may not match. The most common one that the regexp misses is 'application/json; charset=utf-8'. I think there is a lesson here, which is that the programmer instinct to make regular expressions maximally specific is not always good. The updated regexp provided here is not anchored, does not attempt to match the whole header, and covers a few additional cases. To determine which common content-types are compressible, I combed through <https://github.com/jshttp/mime-db/blob/master/src/custom-types.json>. Change-Id: I90315c4af6f9a72cc9c7f905879e3f6a0f1e6c66 | 05 November 2015, 21:50:57 UTC |
| d8f0326 | Coren | 05 November 2015, 18:20:02 UTC | Labs: make disk space alerts for compute nodes paging Since they will stop working properly (suspend instances) if disk space runs out and the scheduler does not attempt to avoid overallocation. Change-Id: If5918e18826724898ff29f6bb2caa3acc40b4569 | 05 November 2015, 18:46:01 UTC |
| 2015be7 | Chad Horohoe | 19 October 2015, 18:29:26 UTC | scap: Add co-master configuration Configuration for scap to facilitate master-master replication. Needed by: I3d2b4e7495d75540c914b2eb999124ad1ee6f8b0 Bug: T104826 Change-Id: I5c0a1fd283cc545ab073a514e933a87d5fe23996 | 05 November 2015, 18:42:38 UTC |
| 8c428ea | Gilles Dubuc | 05 October 2015, 23:42:50 UTC | Fix varnishmedia comment This was a copypasta from varnishrls Change-Id: Id41377ec979233c1ac822c88be16a0053890d6e7 | 05 November 2015, 18:28:33 UTC |
| c008403 | Coren | 05 November 2015, 18:12:43 UTC | Make host check_disk alerts optionally critical So that we can turn on paging for hosts/roles where disk space is important enough to page. Change-Id: Iecde40ef99c8624e8e8712bb9a4e625c8c8e6830 | 05 November 2015, 18:20:50 UTC |
| 64b31fd | dzahn | 05 November 2015, 16:03:06 UTC | osm: minimal lint fixes fixes the last "WARNING: unquoted file mode" across the repo. and a few indentations. Change-Id: I09538103759e8f2efba01f84464b5cb6a7d38e54 | 05 November 2015, 18:04:33 UTC |
| c544850 | Filippo Giunchedi | 05 November 2015, 17:17:01 UTC | cassandra: add praseodymium-a instance Change-Id: If278c96423f4f163676807cc2d7845121fe8b53c | 05 November 2015, 18:02:47 UTC |
| 200a60c | Filippo Giunchedi | 05 November 2015, 17:16:22 UTC | cassandra: add praseodymium instances to seeds Change-Id: I049af52a063d41b30a0fa465e6d870c7b4324a03 | 05 November 2015, 17:47:40 UTC |
| 0e6674b | Brandon Black | 14 July 2015, 01:54:10 UTC | HTTPS redirects: remove InstantCommons exception Bug: T102566 Change-Id: Id099415d36b02c6a88938fe62c1e6e102f674d64 | 05 November 2015, 16:36:40 UTC |
| ad06538 | Giuseppe Lavagetto | 05 November 2015, 15:36:01 UTC | mw1152: allow connecting to labswiki database Change-Id: Ifc6e8711c4cf3ca62fa811735ade5b5c72bd596b | 05 November 2015, 15:47:50 UTC |
| ca805ea | Giuseppe Lavagetto | 05 November 2015, 11:45:15 UTC | noc: point misc-varnish to mw1152 for both noc and dbtree Change-Id: I9f79eeddcb20fa9bbea4511b841b80718bd2a621 | 05 November 2015, 15:19:46 UTC |
| 6bfa209 | Giuseppe Lavagetto | 02 November 2015, 10:43:05 UTC | gdash: deprecate reqerror dashboard, minor correction The dashboard on grafana actually has more information, and I think it's time to start referencing the new dashboards whenever possible. Also, the link in the jobqueue dashboard is amended. Change-Id: If538e5f5cfb2f357a9eb57cc5a46eab2881c2dcc | 05 November 2015, 15:15:07 UTC |
| 62e960f | Filippo Giunchedi | 04 November 2015, 14:12:02 UTC | swift: don't wait for data disks on boot if a swift disk has failed we shouldn't wait for it to be mounted at boot Bug: T107416 Change-Id: I7d1e95f286f9e3e678204f93ce1c093b38071c67 | 05 November 2015, 15:06:26 UTC |
| 025497a | Giuseppe Lavagetto | 05 November 2015, 13:12:11 UTC | noc: puppetize dbtree directories Change-Id: I8fa9c482d2fe17faf646a64c6513f3017711ba14 | 05 November 2015, 13:12:11 UTC |
| 0ad788e | Giuseppe Lavagetto | 05 November 2015, 11:43:34 UTC | noc: add role to mw1152 Change-Id: I63b8cc27c871dfe9fff382c6048253b259e8b4de | 05 November 2015, 13:02:09 UTC |
| 34b045a | Giuseppe Lavagetto | 05 November 2015, 11:42:35 UTC | noc: make noc virtualhost compatible with apache 2.4 Change-Id: Ibbb930966db1a3596cd6fc146de0f7233a070fcd | 05 November 2015, 12:54:49 UTC |
| c529a5d | Giuseppe Lavagetto | 05 November 2015, 11:18:17 UTC | mediawiki: extract php config from web::modules, use in noc As we want to make ::noc compatible with trusty, we need to include the relevant configuration in the module. We abstract this common config to a separate class that we can include here as well. Change-Id: Ifeacd1610660085979f33c036463124f1eaee287 | 05 November 2015, 12:42:11 UTC |
| f6d8eaf | Giuseppe Lavagetto | 05 November 2015, 10:57:40 UTC | noc: remove mod_userdir inclusion It's not needed in noc since we now redirect to people.w.o Change-Id: I78bb1e7b47b23a39ea12e92b7bf8a5b932a20842 | 05 November 2015, 12:38:09 UTC |
| 7458658 | Giuseppe Lavagetto | 05 November 2015, 10:38:57 UTC | noc: remove mod_cgi it's not compatible with apache 2.4, and it's apparently unused (no AddHandler directive or ScriptAlias to speak of on terbium). Probably just a relic of a past time. Change-Id: I97b8de7f21547a26cd48be0d602c39aa9d0d6c75 | 05 November 2015, 12:26:45 UTC |
| d3d8a0b | Giuseppe Lavagetto | 05 November 2015, 10:34:43 UTC | noc: remove unused ssl settings Change-Id: Ibd15fda78e05cbacb6311a2502bb4fa3ae5802e0 | 05 November 2015, 12:18:18 UTC |
| 76b3dcc | Filippo Giunchedi | 05 November 2015, 12:04:23 UTC | fully deprovision tungsten Bug: T97274 Change-Id: I5dbec26cae171799f944231c915daa8f595ce57a | 05 November 2015, 12:06:08 UTC |
| c2afca9 | Moritz Muehlenhoff | 30 October 2015, 14:42:20 UTC | Add schema definitions for openldap/labs to be passed in $extra_schemas Bug: T101299 Change-Id: Ibc369e15fe0bd95d448066363f3c4ee94f5afdad | 05 November 2015, 10:38:31 UTC |
| 2ffc621 | Moritz Muehlenhoff | 30 October 2015, 14:36:49 UTC | openldap: Allow specifying an additional set of LDAP schemas Bug: T101299 Change-Id: I376e2d320fc555cb069c27f9b18d7cd4af6879ad | 05 November 2015, 10:32:03 UTC |
| c8fe050 | Giuseppe Lavagetto | 04 November 2015, 09:08:48 UTC | terbium: move mediawiki monitoring Bug: T116728 Change-Id: I299e49da8b5563a44c989928c4c47697ef7eb614 | 05 November 2015, 09:20:17 UTC |
| 9f78ed2 | Moritz Muehlenhoff | 05 November 2015, 08:13:04 UTC | Assign Salt grain through the role, not by host The grains are genereally assigned per role (with the only exception being one-off canary hosts). Also add the new grain to a server group. Change-Id: Idecb57e51baff82bda6cfc9490755d0747df59bf | 05 November 2015, 08:13:04 UTC |
| 29787ea | Ori Livneh | 05 November 2015, 01:56:12 UTC | Revert "Remove /etc/wikimedia-image-scaler" This reverts commit 8a9257f41dd9. $wgDisableOutputCompression Setting $wgDisableOutputCompression to 'true' across the fleet (in If792de0112) was not a no-op, contrary to my expectation. So there is still a need to differentiate the scalers from other app servers at the PHP configuration level for now. Change-Id: I7f9f7f3d8885fe0ca90b4628ed2257f3c5b965be | 05 November 2015, 02:07:18 UTC |
| 0a95053 | andrewbogott | 04 November 2015, 22:54:29 UTC | Update keystone policy.json to allow the 'observer' role to observe. Bug: T104588 Change-Id: Icebee3a5868864c4e967d8ccd9c3a922a983ffe2 | 05 November 2015, 00:32:31 UTC |
| 07db321 | YuviPanda | 05 November 2015, 00:16:57 UTC | dnsrecursor: Fix permissions for config YAML file Change-Id: Ie851537fcf917343006968e9d0ea961e712134f8 | 05 November 2015, 00:17:32 UTC |
| 18881de | YuviPanda | 05 November 2015, 00:05:17 UTC | labs: Open up nova API access to other DNS host too Change-Id: I2c76cfb3f241f3e651b6ee32802e4fdea54c44ef | 05 November 2015, 00:13:33 UTC |
| f76287c | andrewbogott | 04 November 2015, 22:13:16 UTC | Add modern nova policy file. Change-Id: Ia9c4ce11cc0530fba22b411369ec189933f14d40 | 04 November 2015, 23:16:23 UTC |
| b7a12b2 | dzahn | 27 October 2015, 00:37:58 UTC | mariadb: 32 lint fixes puppet-lint mariadb.pp | wc -l before: 72 after: 40 Change-Id: If7b7ea27ef3ce1b5d0a4260cb64289de4b0400c6 | 04 November 2015, 23:14:11 UTC |
| 4601bd7 | dzahn | 30 October 2015, 18:56:20 UTC | postgresl,sslcert: minimal lint fixes Change-Id: I9fe2f7e0628115ef2f507f68659264a3d2de1fe9 | 04 November 2015, 23:12:17 UTC |
| b6cb5cc | YuviPanda | 04 November 2015, 23:09:48 UTC | labsdns: Use the proper comment character for lua WHY CAN WE NOT HAVE ONE THING THAT WE ALL AGREE ON! Change-Id: Ifd47cdf5cda6eee838f8aa2c65eb56af156db05d | 04 November 2015, 23:10:33 UTC |
| b1d6124 | andrewbogott | 04 November 2015, 22:54:06 UTC | Update novaenv for keystone v3 api Change-Id: I0cb34b1f641ff5e3e1233c8b0f74c9d52ec5fcdb | 04 November 2015, 23:05:00 UTC |
| fe8faa9 | YuviPanda | 04 November 2015, 23:03:11 UTC | labsdns: Fix typo in variable name Change-Id: I150b5f61983cb919793f7539475a68284d2cff0e | 04 November 2015, 23:03:11 UTC |
| eb46870 | YuviPanda | 04 November 2015, 22:58:00 UTC | labsdns: Include nova password class before using it Change-Id: Id851ac91387d82a01440527ee05c24352f47de76 | 04 November 2015, 22:58:00 UTC |
| 75adf0c | Alex Monk | 02 October 2015, 23:19:02 UTC | LabsDNS: Stop hardcoding instance IPs in Puppet Bug: T100990 Change-Id: I260f219cb477270f5f5b5f59d35c1f1abc7cd930 | 04 November 2015, 22:46:03 UTC |
| 28f79f8 | YuviPanda | 04 November 2015, 22:45:18 UTC | openstack: Make designate use require_package To prevent the package declarations from conflicting with the next patch Change-Id: I786ba5e26a8581e649d88714a68ac99ff6116edc | 04 November 2015, 22:46:01 UTC |
| e3626e4 | dzahn | 30 October 2015, 20:23:42 UTC | logstash: no "if $hostname" in node blocks, use role no diff: http://puppet-compiler.wmflabs.org/1155/ Change-Id: Ideadb64379e00f26228e46e3f2626788942d1a8a | 04 November 2015, 21:37:42 UTC |
| 6311fb7 | dzahn | 03 November 2015, 06:09:03 UTC | scap: lint fixes Change-Id: I6be5917f6207c289d5bde5385ed24099daebf1a9 | 04 November 2015, 21:27:33 UTC |
| aa4380a | dzahn | 04 November 2015, 20:49:55 UTC | peopleweb: add migration class to rsync homes Adding a migration class to add an rsyncd on rutherfordium, which we can copy the terbium home dirs to. Bug:T116992 Change-Id: I953dd86d95ba6028e2335995c0d8e94b4adcd4a9 | 04 November 2015, 20:52:44 UTC |
| f3b698d | dzahn | 04 November 2015, 20:09:35 UTC | peopleweb: add ferm rules, firewalling Change-Id: I1077001f977f1a6a735651a821f060d425d57904 | 04 November 2015, 20:27:53 UTC |
| 706f677 | Ori Livneh | 04 November 2015, 20:16:43 UTC | mediawiki: allow temp files to linger up to 2 hours after creation ..to allow for video transcodes which can plausibly take longer than that to process. Change-Id: I334c735d208c85b8ada6175b249bef8204b3b82f | 04 November 2015, 20:16:43 UTC |
| 7ac38c6 | YuviPanda | 04 November 2015, 20:03:43 UTC | ores: Allow tuning workers per core for uwsgi Change-Id: If0a261a8d831a73800a07e677275eff89ba140c9 | 04 November 2015, 20:05:30 UTC |
| 287ed9c | dzahn | 04 November 2015, 19:47:41 UTC | rutherfordium: include peopleweb role Include the "peopleweb" (people.wm.org) role on new VM rutherfordium. The "standard" include has moved into the role itself. Bug:T116992 Change-Id: Ic8494ffaf1ac6d8e19903f3e3f3621cbd7979b98 | 04 November 2015, 19:47:41 UTC |
| d4e86c6 | dzahn | 04 November 2015, 19:45:13 UTC | peopleweb: move standard include to role Change-Id: I4d34e4d6a2832ff2d6407fe8d759d1bb8a98ac4b | 04 November 2015, 19:45:13 UTC |
| 7ba2aa7 | dzahn | 04 November 2015, 19:33:19 UTC | rutherfordium: add debdeploy grains, fix typo Add the debdeploy grains, add as standard server. Fix a typo in the group names, it's "udp2log" not "ud2log". Bug:T116992 Change-Id: I1b8535a3f3ad98f4ad13818e5971afa6e7ccd810 | 04 November 2015, 19:33:19 UTC |
| d4a9c4b | dzahn | 04 November 2015, 19:26:30 UTC | rutherfordium: add domain search, fix admin groups The group ocg-render-admins was added twice, causing a puppet error. Adding domain search for user convenience. Bug:T116992 Change-Id: If274c47a0265445d4966c66e01ab7ec43bcdef03 | 04 November 2015, 19:26:30 UTC |
| cbbff05 | dzahn | 04 November 2015, 18:56:12 UTC | admin: add all groups to new "people" host This is a virtual machine to host people.wm.org which will be moved away from terbium. The point is that all shell users can have this service and not just deployers. So adding all existing admin groups here. Bug:T116992 Change-Id: Ibb918d8a26f80ad2f049187d5e9e5ab8eb4ae1fc | 04 November 2015, 18:58:04 UTC |
| 43834cc | Mukunda Modell | 02 November 2015, 05:08:55 UTC | iridium system-wide gitconfig needs http.proxy Phabricator needs to mirror some repos from github. Apparently accessing the internet requires a proxy, so it needs to be specified in the system-wide git configuration. Unfortunately, the proxy does not allow me to access gerrit so the proxy can't be used unconditionally. Change-Id: I9f7b950d8a0d697d72653630c7f23c8fc99f1832 | 04 November 2015, 16:49:27 UTC |
| 3792508 | Moritz Muehlenhoff | 04 November 2015, 16:13:43 UTC | Enable ferm for remaining logstash hosts Change-Id: I7f95ccf4da3afe91ff602f4608e04bfd5d153632 | 04 November 2015, 16:15:09 UTC |
| cb4696e | Filippo Giunchedi | 04 November 2015, 16:12:45 UTC | cassandra: add cerium-{a,b} to seeds Change-Id: I3b9c2e894b988bc9cd61ddcdea9238fe91dad2c3 | 04 November 2015, 16:14:41 UTC |
| b3908ca | Filippo Giunchedi | 04 November 2015, 15:46:12 UTC | cassandra: add cerium-a instance Change-Id: I6fca4070e81ecef73b31701874b0ca12efb82c27 | 04 November 2015, 16:11:37 UTC |
| 5f1ddc4 | Moritz Muehlenhoff | 04 November 2015, 15:48:44 UTC | Enable ferm on logstash1004 Change-Id: I68dcc974c9998c1f2889462be9bf26cfce8c47ad | 04 November 2015, 15:50:56 UTC |
| 26ca62e | Giuseppe Lavagetto | 04 November 2015, 09:05:23 UTC | maintenance: move updatequerypages off of terbium Bug: T116728 Change-Id: I436d8cbfae9cd8faa5949b278726f016a286d02d | 04 November 2015, 15:43:19 UTC |
| 9ddf3e0 | dzahn | 04 November 2015, 02:31:07 UTC | introduce rutherfordium.eqiad.wmnet Bug:T117517 Change-Id: I5ef4f7a68959d1c43499fed0cb4f7b2f98347366 | 04 November 2015, 15:28:51 UTC |
| eef628c | Giuseppe Lavagetto | 04 November 2015, 09:03:40 UTC | maintenance: move update article count off of terbium Bug: T116728 Change-Id: Ib0cdfc616bc8e6ac4241f67a53adb211686473c2 | 04 November 2015, 15:19:42 UTC |
| 56c714f | Giuseppe Lavagetto | 04 November 2015, 09:02:09 UTC | maintenance: move email batch, flaggedrevs off of terbium Bug: T116728 Change-Id: I71c9571ebb24f2ca4cbcef26fcc87d0898a64d01 | 04 November 2015, 15:15:52 UTC |
| ef062de | Giuseppe Lavagetto | 04 November 2015, 08:46:25 UTC | maintenance: move translation-related jobs off of terbium Bug: T116728 Change-Id: Ie4a6ad0567b5c026f6cff99aa3c7ca419341c221 | 04 November 2015, 15:12:31 UTC |
| 3bf35d0 | Giuseppe Lavagetto | 04 November 2015, 08:42:05 UTC | maintenance: move pagetriage off of terbium Bug: T116728 Change-Id: I7d09eb4dcb776bd483e2cede349d38a2a6991311 | 04 November 2015, 15:10:59 UTC |
| 313095b | Subramanya Sastry | 28 October 2015, 14:33:36 UTC | Update Parsoid server.js path in the upstart config * New code is now on the production cluster and it is now safe to update the new path. Change-Id: I9948b5caabe7c63b22c3f96b49c5ec31070b907f | 04 November 2015, 13:42:44 UTC |
| b678a40 | Kartik Mistry | 04 November 2015, 11:33:29 UTC | Beta: Keep deployment-urldownloader format same as other Change-Id: I00b3adc3a94fd88edb782829b291b6bae54b7113 | 04 November 2015, 13:28:54 UTC |
| a05e80c | Kartik Mistry | 04 November 2015, 11:27:34 UTC | Beta: Consistence quote Change-Id: Id1c5382a5fdaa7be4ffa07996cfc08ed3117fb3a | 04 November 2015, 13:25:59 UTC |
| f170e27 | Giuseppe Lavagetto | 04 November 2015, 08:37:57 UTC | maintenance: move refreshlinks off of terbium Bug: T116728 Change-Id: I966dfcda051ef1094b3d1872d90ed82ef18bf2e5 | 04 November 2015, 11:53:21 UTC |
| 590d14a | Giuseppe Lavagetto | 04 November 2015, 08:48:40 UTC | maintenance: move wikidata jobs off of terbium Bug: T116728 Change-Id: I76bab6452177af31510825edb56b53109ae03b98 | 04 November 2015, 11:30:27 UTC |
| 1f8dd93 | Giuseppe Lavagetto | 03 November 2015, 12:45:47 UTC | ganglia: remove jobqueue stats Since we now have a better jobqueue dashboard on grafana (https://grafana.wikimedia.org/dashboard/db/job-queue-health) there is no point in reporting the same data in a different way to ganglia too. Change-Id: I596e56f275db64db148057aee746edb43e97748b | 04 November 2015, 10:11:13 UTC |
