Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
df2fac3 Chad Horohoe 19 April 2016, 15:02:46 UTC Use legacy key exchanges on yurud, like antimony Bug: T123718 Change-Id: I60887e47bb70ffa83ba69855d06407342ff82952 19 April 2016, 15:03:13 UTC
1c240be Giuseppe Lavagetto 12 April 2016, 09:15:32 UTC switchover: make jobrunners in codfw start up This must be done after the datacenter switchover and mediawiki is back to being read-write. Change-Id: I0dc8049dca211e5215d6456138e818b9b9321e72 19 April 2016, 14:54:13 UTC
7df0731 Giuseppe Lavagetto 18 April 2016, 09:47:26 UTC switchover: enable maintenance scripts in codfw Change-Id: Ie4513f3e0bb0a3ef8794ba4e05170bd54ff80d43 19 April 2016, 14:53:17 UTC
23d6bbd Riccardo Coccioli 19 April 2016, 09:30:18 UTC MariaDB: set codfw local masters as masters (s1-s7) - Set master=true and binlog_format=STATEMENT for s1-s7 codfw local masters to become masters Bug: T124699 Change-Id: I4a07204323b0ffd5cbffb02e44587c4b61b2b49f 19 April 2016, 14:32:39 UTC
2840690 Filippo Giunchedi 03 February 2016, 10:23:54 UTC swift: switch to codfw imagescalers Bug: T91869 Change-Id: Ied3bd9d27cbfc506dbfe7f49565708e691c71adb 19 April 2016, 14:20:38 UTC
873614d Brandon Black 12 April 2016, 12:21:49 UTC switchover: switch api/appservers/rendering varnish routing from eqiad to codfw Change-Id: Ic65ed4f9ac6eb15fe562922ffe041d55f9e92622 19 April 2016, 14:18:55 UTC
e7baf5d Giuseppe Lavagetto 12 April 2016, 10:35:15 UTC switchover: set mediawiki master datacenter to codfw Change-Id: I8808ead3636befb433c28890e191a965edec8b2d 19 April 2016, 14:11:32 UTC
f6b2b10 Giuseppe Lavagetto 18 April 2016, 09:43:55 UTC switchover: block maintenance scripts from running in eqiad Change-Id: I9163b73de4b1c67a907cd68320613737797e2e9b 19 April 2016, 13:52:18 UTC
65517a7 Giuseppe Lavagetto 12 April 2016, 09:13:30 UTC switchover: stop jobrunners in eqiad This is part of the switchover process, and should be executed before executing the switchover and putting mediawiki in readonly mode. Change-Id: I5716bebdde01575c0a0a621aa6a051824a68d526 19 April 2016, 13:25:50 UTC
1deeca2 Ori Livneh 19 April 2016, 10:23:22 UTC Configure ganglia-web to cache data in a location it can actually write to The default behavior of ganglia-web is to cache data in a JSON file in its 'conf_dir' directory, which defaults to /var/lib/ganglia-web/conf. But that directory is owned by root:root and has a mode of 755, so ganglia-web (which runs under apache+php-fpm, and hence as www-data) can't write anything there. The fact that it can't doesn't stop it from trying, which it does vigorously. On nearly every request, it constructs a cache object in memory and tries to write to disk. This adds about three to four seconds of latency. So: create /var/cache/ganglia, make sure www-data can write to it, and tell Ganglia to write its cache file there. ganglia-web can also be configured to use memcached. Since the cache data is a few megs in size, I don't think memcached will be any faster than a file on disk which the OS will keep in the page cache anyway, so let's keep it simple. Change-Id: I6c314197218b67a4fea5c7b9aa34d0c613c7e200 19 April 2016, 10:43:07 UTC
3118495 Moritz Muehlenhoff 18 April 2016, 08:22:09 UTC Setup meitnerium as the jessie-based archiva host Change-Id: I078288041d1d335225f130585267ab12df9d72ea 19 April 2016, 10:17:37 UTC
4c87401 Filippo Giunchedi 19 April 2016, 09:36:02 UTC cassandra: remove restbase100[56] Bug: T125842 Change-Id: Ibff17ccd82e01692afbb9396a3b569fbd4b6d573 19 April 2016, 09:37:45 UTC
b3ee63c Jaime Crespo 19 April 2016, 09:00:05 UTC Correct mariadb error due to missing full patch Change-Id: I5148f11a55371aaa3f21564f1b0057838f6e1395 19 April 2016, 09:02:22 UTC
ee0c999 Filippo Giunchedi 18 April 2016, 15:54:07 UTC graphite: add graphite1003 Change-Id: Ib84c85a78efccce7c6a988e8c0adc2819e7a76b7 19 April 2016, 09:01:48 UTC
d744836 Jaime Crespo 18 April 2016, 14:47:11 UTC Install pt-heartbeat-wikimedia on all relevant servers Any host that that is a candidate master will have it installed, only enabled on the actual master. Convert pc* hosts into 3 shards, with potentially one master running pt-heartbeat. Change-Id: Ie0be85409da0782c0f9b5b25d9ec3dc922b3e7ee 19 April 2016, 08:41:25 UTC
f5ad157 dzahn 18 April 2016, 21:29:06 UTC debdeploy: rename init.pp to master.pp to match class name This is to fix: "ERROR: debdeploy::master not in autoload module layout" Change-Id: I528099c868a1ed37b86b6a54b4b6e98eaa890b2a 19 April 2016, 06:58:36 UTC
ba634af Ori.livneh 19 April 2016, 06:05:37 UTC Revert "ganglia-web: don't send Content-Disposition header with JSON / CSV data" This reverts commit 941412303. Responses with a content disposition of "inline" should actually be viewed by the browser. Not sure why Chrome is refusing to do that. Change-Id: Ie4c18c3c181ea7cf2bd92324104f38a563877e6e 19 April 2016, 06:05:37 UTC
9414123 Ori Livneh 19 April 2016, 05:34:29 UTC ganglia-web: don't send Content-Disposition header with JSON / CSV data Make Ganglia not send a "Content-Disposition: inline; filename=..." header when responding to requests for CSV or JSON data, so that such data could be more easily viewed in the browser. Change-Id: I626eb3020f1e4eb5d4d648cc563c9e391227558d 19 April 2016, 05:40:43 UTC
2027f6c Ori Livneh 19 April 2016, 05:20:32 UTC Increase php memory-limit for ganglia-web from 256 to 768 ganglia-web is sluggish and uranium has the RAM. Change-Id: I8359ebca799e646bbbb800bae02520ae044489ec 19 April 2016, 05:38:40 UTC
c97d644 Brandon Black 19 April 2016, 00:10:22 UTC secure CP cookie Bug: T119576 Change-Id: Ie6dd296869468d8ca173b8fb9d3fb5de80fbbae8 19 April 2016, 00:12:03 UTC
25a0dca Brandon Black 19 April 2016, 00:09:10 UTC secure WMF-Last-Access cookie Note I did this before, but stupidly only changed the varnish4 case, back in commit 80327148 Bug: T119576 Change-Id: I9b019f4fd5484d21fe733b64ada0f4bf267b7f2c 19 April 2016, 00:12:03 UTC
59ab6c4 dzahn 18 April 2016, 23:40:58 UTC gitblit: fix unit file, don't use /opt/ Change-Id: I21d0191f5ad6b628e611ff6c81405617859e25b9 18 April 2016, 23:45:15 UTC
14ffb6c Timo Tijhof 19 February 2016, 18:34:31 UTC rcstream: Add documentation link Add second link from official documentation that corroborates the pattern of using ip_hash in this way. Change-Id: I4f2fc3a460cdb127eaf0724bcac0a10b5b777ac9 18 April 2016, 23:26:10 UTC
18c38a3 Chad Horohoe 18 April 2016, 22:41:31 UTC Adding furud as antimony replacement to git replication Change-Id: I1b64e766734a20643031672dc13735bbc2d48e95 18 April 2016, 23:22:34 UTC
73c7dc8 dzahn 18 April 2016, 23:09:23 UTC gitblit: install openjdk-7-jre Bug:T123718 Change-Id: I7982496a462878d524ce7e45289bc374543f88f3 18 April 2016, 23:10:43 UTC
9abebf7 dzahn 18 April 2016, 22:46:36 UTC gitblit: add systemd unit, if jessie use it Bug:T123718 Change-Id: I1e1bf8c25476a77ebdaa1cbc82061a4c880adf3e 18 April 2016, 22:49:39 UTC
566683f cpettet 18 April 2016, 22:30:18 UTC labstore: shape NFS read for dumps traffic We have been having issues with hosts hammering dumps for read and rendering the host unusable for other users. This is similar to measures taken elsewhere with a higher ceiling. Change-Id: Ia323a8634bb092795de2a904435f537519e016ac 18 April 2016, 22:32:22 UTC
f0d2c97 dzahn 18 April 2016, 21:26:26 UTC torrus: ignore lint issue with include for tests Change-Id: I43b5cbbe3db6df6772a294fd031cc9edd1a40454 18 April 2016, 22:24:09 UTC
9b2ab78 dzahn 18 April 2016, 22:20:18 UTC gitblit: ensure ./data/ subdir also exists Change-Id: I25099a8760923e0528feaa6318ab32414e998325 18 April 2016, 22:21:34 UTC
2b0debc Alex Monk 16 April 2016, 20:08:15 UTC deployment-prep shinken: deployment-salt is no longer the puppetmaster Use role::beta::puppetmaster to determine this instead of configuring it here Change-Id: Ib13961edc5700720e80233eca33c397565d8e0e9 18 April 2016, 22:13:03 UTC
5322d39 dzahn 18 April 2016, 22:09:24 UTC gitblit: ensure /var/lib/gitblit exists When applied on a new host this directory is missing. Bug:T123718 Change-Id: I1430d5cc6f4a2c56eec64a2acdb9fa0a1c2e1731 18 April 2016, 22:10:24 UTC
247dd41 YuviPanda 18 April 2016, 21:36:39 UTC Revert "Allow horizon to query the labs puppetmaster for a list of classes" This seems to have borked the labs puppetmaster. This reverts commit 3cffbde3dfc84a6956bc9b8d08eae9231fbe52c2. Change-Id: If6c85ba1a8a4b11323b016fc103e8d61ce8b0d36 18 April 2016, 21:37:09 UTC
340ad67 Emanuele Rocca 15 April 2016, 15:37:49 UTC Reuse update-initramfs in lvs::balancer and interface::rps Reuse Exec['update-initramfs'], introduced in ebe9658, in interface::rps::modparams and lvs::balancer. Change-Id: Ib0f29e999d20aeb8957bcf46cdf4676b6124b85b 18 April 2016, 21:28:05 UTC
ba3a23d andrewbogott 16 April 2016, 04:14:58 UTC Horizon: Add some help_text to the login fields Bug: T132694 Change-Id: I4676728a02c7269626939d2abc00f9e8eed243da 18 April 2016, 21:08:35 UTC
3cffbde andrewbogott 15 April 2016, 09:33:17 UTC Allow horizon to query the labs puppetmaster for a list of classes Change-Id: I0353597429468f9aaba4f419f0fb8974a53f9b02 18 April 2016, 21:03:18 UTC
53cea60 YuviPanda 18 April 2016, 20:57:59 UTC tools: Install toollabs-webservice on services hosts Since webservicemonitor needs these now Change-Id: I95fe90f57efd00c2e0dc40a81cd07ae0e7f58ec4 18 April 2016, 20:58:32 UTC
040cecc YuviPanda 18 April 2016, 20:49:10 UTC tools: Ensure the latest version of the webservice package Change-Id: Ia1a60158b9e9cbdeb21afa9c37f8a6e6e8fab856 18 April 2016, 20:50:29 UTC
163211a Faidon Liambotis 18 April 2016, 20:29:01 UTC phabricator/phab_epipe: use tempfile to write /tmp files Makes it a little more secure by avoiding a couple of minor tmpfile overwrite vulnerabilities. Change-Id: I6dad9afce8ad7510126da924a8122ba3b4692cb6 18 April 2016, 20:29:50 UTC
186ea43 Faidon Liambotis 18 April 2016, 20:14:56 UTC phabricator/phab_epipe: use get_content_type() ..instead of manually parsing e['Content-Type']. Change-Id: Ia47cc67f7f7b367adf0fb893c59e5773926ab474 18 April 2016, 20:29:50 UTC
f431285 Faidon Liambotis 18 April 2016, 20:06:12 UTC phabricator/phab_epipe: decode base64/qp body parts get_payload() accepts a decode kwarg that obeys Content-Transfer-Encoding and decodes the body parts according to their transfer encoding. Use it to avoid base64 texts being pasted into Phabricator tasks. Change-Id: I09ade73f1144a23247ecfe1a533591f156f3b52d 18 April 2016, 20:29:50 UTC
d2ecc5e Brandon Black 16 April 2016, 10:58:15 UTC OCSP Stapling: make icinga alerts more aggressive Bug: T132835 Change-Id: I2e4e8094c2bb5c8020c9d559d8e01fdb0aa7ede5 18 April 2016, 20:25:55 UTC
aa49365 Brandon Black 18 April 2016, 17:45:07 UTC update-ocsp: fix minor pep8 issues Change-Id: I9f7c52fedde495d9f772d695b0c22341b93d1656 18 April 2016, 20:23:48 UTC
ab0dd56 Brandon Black 18 April 2016, 17:41:41 UTC update-ocsp: fix command exceptions This function was original intended to raise an exception if the executed command returned a non-zero exit value, but the exception-raising was written poorly. During a later refactor the exception was removed (but it still was writing to stdout). This puts the exception back in place. Change-Id: Ia1b591580b26713a2b9406b28ab1812f74d1f865 18 April 2016, 20:21:33 UTC
c8a4446 YuviPanda 18 April 2016, 20:05:43 UTC tools: Don't touch webservice-new webservices from webservice Change-Id: I1d71e66b3b8fdf5ff7339fe9f595263b8ebc7f91 18 April 2016, 20:13:46 UTC
0da22e1 pt1979 18 April 2016, 18:31:19 UTC adding install params for conf200[1-3] Bug:T131959 Change-Id: I195f15091b626a0f4453d6b23de4cc85704f7bd5 18 April 2016, 18:40:05 UTC
4e9e701 pt1979 18 April 2016, 18:14:06 UTC DHCP: Adding MAC address entries for conf200[1-3] Bug: T131959 Change-Id: Id53297d24a5742c283830462afa939ecdda61979 18 April 2016, 18:23:32 UTC
227f61c dzahn 18 April 2016, 18:06:57 UTC kafka: bump submodule to add .gitreview Update submodule in main repo to add .gitreview file from I69ae337873a0. Change-Id: I8612c2c3204cc1b9437b38ab21e144ea9237647f 18 April 2016, 18:06:57 UTC
b79923a elukey 18 April 2016, 17:17:34 UTC Update the kafkatee submodule with the latest rsyslog/logrotate updates. Bug: T132324 Change-Id: I83400807e6a7bd73517d556e2404b0bf944074f1 18 April 2016, 17:19:21 UTC
29c4d13 Alexandros Kosiaris 15 April 2016, 09:35:25 UTC servermon: Add Krenair (Alex Monk) to servermon users Alex Monk will be assisting with the development of servermon, access is required for that Change-Id: Id42fcc468d28ed027416e8c011458ffa743d9ded 18 April 2016, 17:01:52 UTC
0e91313 Moritz Muehlenhoff 18 April 2016, 16:11:12 UTC Followup fix for require_package fix for archiva The former fix remove two lines too many... Change-Id: I5cb87e4fb63fe1fd05bc2e21f249f128c5dd2093 18 April 2016, 16:11:38 UTC
958796c Moritz Muehlenhoff 18 April 2016, 07:34:53 UTC Use require_package in archiva role Change-Id: Ie594dc944c696f8444bc360452d1fa37272ae7b3 18 April 2016, 16:04:27 UTC
4e95e12 Giuseppe Lavagetto 18 April 2016, 10:45:22 UTC elasticsearch: enable ganglia in codfw Change-Id: I627b40388c480a9d462d2c11408f98fe0b32cc0f 18 April 2016, 15:18:37 UTC
47d208a Moritz Muehlenhoff 18 April 2016, 11:13:34 UTC Enable base::firewall for rhenium 179/tcp and 2100/udp are covered by the ferm services 'bgp' and 'netflow'. There's an unpuppetised postgres instance used in earlier tests, which doesn't need to be accounted for. The rest is covered by the standard rules provided by base::firewall. Change-Id: I7af174be8ec1b7c77054c2d9d082bc2fdb8d766d 18 April 2016, 15:11:16 UTC
4272788 Filippo Giunchedi 18 April 2016, 14:57:22 UTC install_server: graphite1003 with jessie Change-Id: I7014be7d4eaf7e0ec889fba343ae2d0386ad00c0 18 April 2016, 14:59:45 UTC
d38bab8 sabya 16 March 2016, 18:00:19 UTC ores: Add support for running precached as a systemd unit Precaching as a daemon is vital for ORES Change-Id: I6c16cec2d6f5d17e94d1e0b68aa670d5e3ac1399 18 April 2016, 14:26:43 UTC
dcaeeff Marko Obrovac 18 April 2016, 10:28:17 UTC RESTBase: remove rb100[56] from the list of eqiad seeds Change-Id: I5b3fd225ea98cec2cb79de1ffe6a6fde32d82d81 18 April 2016, 10:28:17 UTC
99ee715 Giuseppe Lavagetto 18 April 2016, 09:33:09 UTC cache: switch to codfw for restbase/citoid/cxserver This is part of the planned DC switchover. Change-Id: Ifcbbaede44a7c0ee3167fc155a22883bc09eec8c 18 April 2016, 09:33:09 UTC
d85bb0f Jaime Crespo 18 April 2016, 07:06:08 UTC Set db2018 binlog_format to MIXED; testing it as the reason for lag Potentialy the cause of lag on db2036, db2043, db2050 and db2057. Change-Id: I2a50b546b40258720278221274c7b17a29c34a1c 18 April 2016, 07:06:08 UTC
7553859 Alex Monk 15 April 2016, 14:36:12 UTC deployment-prep shinken: fix check_command for cxserver check_http_on_port doesn't accept a URL parameter, we need check_http_port_url Bug: T132733 Change-Id: I63846671f86bbfeec3708e7af38c2ac8b477eeb8 16 April 2016, 17:51:56 UTC
9a83bbf Chad 15 April 2016, 23:49:05 UTC Revert "Revert "Cut off lead replication for a bit. SSH is busted"" SSH is weird. This reverts commit d0e9dd6e7257a21062e223158c73d0d1efabf2ec. Change-Id: I9358c34bd5450552d0cbd017c1a4987552226fa5 15 April 2016, 23:49:05 UTC
d0e9dd6 Chad 15 April 2016, 15:54:27 UTC Revert "Cut off lead replication for a bit. SSH is busted" Turning it back on so we can test again This reverts commit b1f4d7e95ef541bd8cea3a02dea0d5493d8289a8. Change-Id: Idfeabccbd12bbdb1d88cb654daac459a12154ed0 15 April 2016, 22:33:35 UTC
8b72bb4 andrewbogott 15 April 2016, 20:18:10 UTC Removed the unused is_puppet_master var Change-Id: I9176a107b4fe61a840f3e7437be92e41589d0b49 15 April 2016, 21:16:55 UTC
429dbd8 andrewbogott 15 April 2016, 09:31:19 UTC Eliminate the old, unlintable us_labs_puppet_master global Change-Id: I0f8dc6a0234b161601c3affebd562a7a57e9bad2 15 April 2016, 21:10:53 UTC
3b103a9 Moritz Muehlenhoff 15 April 2016, 13:44:07 UTC Extend Hiera data for yubiauth role yubiauth_servers is a list of all Yubi authentication servers yubiauth_server_primary is the host to which the AEAD key files are copied after creation. From this host, they are synchronised via rsync to the other auth servers. Change-Id: Ie1ebbea10a2efe3aaff2d755000c0ff90cf1228a 15 April 2016, 20:11:51 UTC
0f5815e andrewbogott 15 April 2016, 05:57:54 UTC Remove references to stats.wikipedia.org Bug: T126281 Change-Id: Icd328fb8798ac6b29cdb6ccb645d3cb5c00bc7d4 15 April 2016, 17:42:16 UTC
8a27caa Andrew Otto 15 April 2016, 16:29:22 UTC Change stats user git email address This updates it to match the one in gerrit Change-Id: I84aed5f87069113e85793408f33c7cfa4b9f022e 15 April 2016, 16:29:22 UTC
7ad3b60 Andrew Otto 15 April 2016, 15:47:08 UTC Update kafka submodule disabling MaxLax icinga alert Bug: T121407 Change-Id: I646179ed44ff0fd2908af8011dc38146be82faca 15 April 2016, 15:47:08 UTC
a7d23c8 Andrew Otto 15 April 2016, 15:23:05 UTC Adjust eventlogging icinga alert thresholds eventlogging_throughput can handle more than 500 / s eventlogging_overall_inserted_rate is currently less than 100 / s, we shouldn't warn at under 100 Bring back eventlogging_NavigationTiming_throughput alert, the metric had just changed in graphite Bug: T132770 Change-Id: I2e068fe259f68e3fbe1e44cbc55c4e0da4d1cf77 15 April 2016, 15:33:43 UTC
ebe9658 Emanuele Rocca 14 April 2016, 15:26:14 UTC Workaround for mdadm boot-time race condition The boot-time race condition assembling raid devices reported in T131961 can be avoided by sleeping a few seconds in initramfs-tools' local-top stage, after which the root device is expected to be present. See FAQ 26. in /usr/share/doc/mdadm/FAQ.gz. This patch introduces a new puppet module called initramfs, allowing to define initramfs hooks and scripts. Bug: T131961 Change-Id: I12db18dee30c67f98f7dd567e7527d43c134c5a7 15 April 2016, 15:24:04 UTC
df20277 Moritz Muehlenhoff 15 April 2016, 14:07:03 UTC Add Yubico AEADs to backup Strictly speaking we'd only need to add these files to the backup on a single authentication server (since the other syncs via rsync), but the disk space requirement is tiny, so I doubt it's worth the effort: A single AEAD file is 54 bytes and we'll use one per user. Change-Id: I2b76be7bf9fa43efb7f79c0bfc813f5add0aa05c 15 April 2016, 15:19:42 UTC
adfa46d Faidon Liambotis 15 April 2016, 14:32:14 UTC Bump Cassandra SSTables per-read alert thresholds < urandom> paravoid: bumping those values by 10 should paper over it for a while Change-Id: I704d29e3a634fb80da91920cdf704913b0612dc0 15 April 2016, 14:33:30 UTC
0ae0b1d Alexandros Kosiaris 15 April 2016, 13:14:15 UTC zotero: change the path of the zotero defaults.js config zotero uses xulrunner and expects the configuration file in defaults/preferences/defaults.js. However, given we want to deploy with scap3, that file must not be in the repo. Shipping it outside the deployed code and relying on a symlink is the way out of that chicken and egg problem Change-Id: I8d8c3d66dbf76a1f8947591132f068a57e57a283 15 April 2016, 14:23:17 UTC
a7f2b44 Faidon Liambotis 15 April 2016, 14:16:05 UTC Kill eventlogging_NavigationTiming_throughput alert Metric has disappeared. At UNKNOWN for 80 days now. Can be reverted if this gets fixed. Bug: T132770 Change-Id: I274e102b1e3f8d653f0a66acbeeb503f955c3156 15 April 2016, 14:17:03 UTC
bf05ed0 Brandon Black 15 April 2016, 13:20:10 UTC add LE cert nginx config for carbon the management of this isn't puppetized yet, but the files exist on the host and they work... Bug: T132450 Change-Id: Ic7fc60be04c105aa1da494db8e6d2ffcf89bf29d 15 April 2016, 13:22:38 UTC
c484a68 Brandon Black 15 April 2016, 13:22:01 UTC add dhparam to install web_server Bug: T132450 Change-Id: I384cb7a89ad8129dce77d06715f500a8448e119b 15 April 2016, 13:22:25 UTC
3e8010c Riccardo Coccioli 15 April 2016, 12:28:09 UTC MariaDB: use Puppet cert for s3 cross-dc replica Bug: T111654 Change-Id: Ie7375d71a7c7e9f7b5bd50479c07a4f083b7174d 15 April 2016, 13:00:15 UTC
333ffaa Brandon Black 15 April 2016, 12:56:58 UTC add https to ferm rules on installserver Change-Id: I9bc98c50acb016be172efb2c7ac2ec2e2d09935b 15 April 2016, 12:57:11 UTC
aeabb53 Marko Obrovac 15 April 2016, 11:44:26 UTC Zotero: Use Scap3 for deployment Also, correct a minor bug in scap::target whereby if two repos have the same root directory, duplicate chown Exec and Sudo resources are declared. Bug: T129140 Bug: T129143 Change-Id: I25437210c61d9861f2a493b9a601f91723ffc39f 15 April 2016, 12:33:29 UTC
20c0a0c Brandon Black 15 April 2016, 11:14:34 UTC mirrors::serve: split mirrors/ubuntu site configs Bug: T132450 Change-Id: I4c693daf76098365cee88f0d17a8dc466e7e780d 15 April 2016, 12:15:51 UTC
73f5772 Brandon Black 15 April 2016, 10:53:53 UTC refactor install_server web stuff towards SSL config * makes nginx.conf explicit, with SSL params included * site conf as server_name=apt explicit, + default_server Bug: T132450 Change-Id: I7ac66091125a7a236ad2c7b808ab44d6ad7689d8 15 April 2016, 12:08:20 UTC
ea4d177 Guillaume Lederrey 15 April 2016, 09:15:15 UTC Increase client_max_body_size to 100M in nginx This is aligned with Elasticsearch max request size (https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-http.html) Document update can require fairly large requests. Elasticsearch is not directly user accessible, so this increase should not bring any risk to the platform. Change-Id: I305147e20663830a1da801a7649866ac8d5c4e47 15 April 2016, 12:03:29 UTC
d1eac90 Moritz Muehlenhoff 15 April 2016, 10:44:43 UTC Also enable base::firewall on rcs1001 Already working fine on rcs1002. Change-Id: I99e2cf526d2416bdc0511cd438589e7bd69f9089 15 April 2016, 10:44:43 UTC
db326c8 Faidon Liambotis 15 April 2016, 09:47:26 UTC install_server: avoid DHCP next-servers to self Set the next-server of each install server (currently: carbon, install2001, bast3001, bast4001) to a different site's as to not loop to itself. This also reverts public1-ulsfo's default next-server to bast4001, reverting c9b06390753fc0c151ae3ffbba7f9d21cb23fe98. Change-Id: If7c59d9f922367b25a6ef588c297665b5ff522c6 15 April 2016, 09:50:29 UTC
211e891 Faidon Liambotis 15 April 2016, 09:41:15 UTC install_server: dhcpd.conf cleanups - Remove "Public services subnet" and "Management subnet" which judging from their names and IP ranges are from the dawn of time and obsolete. - Reorder mgmt1-esams to be below private1-esams. - Adjust comments (mostly uncapitalize site names). Change-Id: I4aff614bfaaec744a17a76b0325a65e0dd9d181c 15 April 2016, 09:41:15 UTC
d873a09 Marko Obrovac 15 April 2016, 08:28:45 UTC Mathoid: Use Scap3 as the deployment method Bug: T116338 Change-Id: I9e8cda8f9956e12e5e41bcc8f53bea149c1a9c60 15 April 2016, 09:09:37 UTC
56ebb54 Guillaume Lederrey 14 April 2016, 17:29:11 UTC Revert "remove wdqs1002 from varnish during reinstall / fix" This reverts commit 24646f052c1a1fe9075d0eb8240f1ec74a95b9f5. Bug: T132387 Change-Id: Iba1a8f9840d9e5ff95ba42c479765b94897b6837 15 April 2016, 08:57:20 UTC
e8891e8 Eric Evans 14 April 2016, 22:05:26 UTC revised yaml instance descriptor format It is probably redundant to hang everything off of a top-level instance attribute, (each descriptor is instance-specific). Change-Id: I9ffabcdfe956c23ac58dfe0db702fe9fa509cf2d 15 April 2016, 08:56:26 UTC
e9ef36b Moritz Muehlenhoff 14 April 2016, 14:33:09 UTC Add gnome-pkg-tools to package_builder base file list I tried to build librsvg using pdebuild, but the generation of the source package failed since it requires Makefile snippets provided by gnome-pkg-tools (these need to be present before the build dependencies are installed in the pbuilder environment): (..) debian/rules:7: /usr/share/gnome-pkg-tools/1/rules/uploaders.mk: No such file or directory debian/rules:8: /usr/share/gnome-pkg-tools/1/rules/gnome-get-source.mk: No such file or directory make: *** No rule to make target '/usr/share/gnome-pkg-tools/1/rules/gnome-get-source.mk'. Stop. dpkg-buildpackage: error: fakeroot debian/rules clean gave error exit status 2 Change-Id: Ifb011d1960cbc996663cee5486add1b658764d6a 15 April 2016, 08:29:19 UTC
c256c74 Kartik Mistry 15 April 2016, 05:38:48 UTC Fix cxserver on deployment-cxserver03 returning 404s Bug: T132733 Change-Id: I7d24f26e559a603ea0107c50d819f3a35bfb5d56 15 April 2016, 08:20:33 UTC
dd25b4a Riccardo Coccioli 15 April 2016, 07:49:28 UTC MariaDB: use Puppet cert for s4 cross-dc replica Bug: T111654 Change-Id: Ife31f36a914d106e0cfdc92fb3bbde2407477eb5 15 April 2016, 07:49:28 UTC
176eca7 Giuseppe Lavagetto 12 April 2016, 14:46:54 UTC role::jobqueue_redis: add monitoring of the redis instances Change-Id: I7b3539d38d73a6f2c20a1f815ba6d69cb1fe631b 15 April 2016, 07:43:17 UTC
be69b63 Moritz Muehlenhoff 14 April 2016, 13:40:11 UTC Enable base::firewall on tungsten port 80 is granted via ferm service xhgui_http port 27017 is granted via ferm service xhgui_mongodb (port 28017 provides the web status page, which isn't needed. It could still be access from localhost) The other services are covered by the base rules in base::firewall (like sshd, ntpd) or unwanted (like rpc.statd) Change-Id: Ic4d60cda9eefda349cbcb6f41485b3f6454e97d2 15 April 2016, 06:29:37 UTC
b1f4d7e Chad Horohoe 14 April 2016, 23:15:41 UTC Cut off lead replication for a bit. SSH is busted Change-Id: I622179c60a6aafcd43c906cfd8c1c5ba4ac07367 14 April 2016, 23:32:33 UTC
58dae62 Chad Horohoe 30 March 2016, 18:37:43 UTC delete gitweb_config.perl Unused since ages now Change-Id: I25e6ec5e4b9cd086b43d15794f3516cdab134caa 14 April 2016, 22:31:20 UTC
ce01f4f Mukunda Modell 07 April 2016, 15:48:06 UTC scap: add configuration for phabricator Add deploy-phabricator on deployment servers. This group is needed for keyholder ssh access to phabricator deployment targets (iridium) Bug: T114363 Change-Id: Iab5cad2e2a5881cede2e1e6eab0bdd3660080cd0 14 April 2016, 22:20:39 UTC
2fff7dd andrewbogott 14 April 2016, 16:16:29 UTC Add swift-roots to swift storage and proxy boxes Bug: T130910 Change-Id: Ifadcef0f76517dc4a69d7e0966602bb2783ea1b9 14 April 2016, 21:52:37 UTC
0697f0c andrewbogott 14 April 2016, 16:31:51 UTC Prune another dead hiera setting Change-Id: I216ce8eb3c161e58d63c9b7a0fb274cc508fe578 14 April 2016, 21:49:56 UTC
ee29b88 dzahn 14 April 2016, 21:43:27 UTC etherpad: fix path to moved file follow-up fix to Ided587afd6ba90 Change-Id: I7645819c35de8efa468f514b923e575db4f78619 14 April 2016, 21:43:46 UTC
852ddc6 Chad Horohoe 14 April 2016, 20:14:40 UTC Move etherpad diamond collector script to module Change-Id: Ided587afd6ba90e5584599819a63d60d1da3add9 14 April 2016, 21:33:19 UTC
a71e3d5 dzahn 14 April 2016, 20:58:47 UTC lead: set ssh::server::disable_nist_kex: false We think this is causing the problems with jgit trying to replicate git repos over here. We are getting "Algorithm negotiation fail". Change-Id: I0fd6579d9c4e0563f388fedf8f0cacc89c0ebd1c 14 April 2016, 21:02:13 UTC
back to top