Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
7fbdfbe Guillaume Lederrey 09 May 2016, 11:28:44 UTC Upgrade osm2pgsql to 0.90.0 0.90.0 is available in Jessie backports. I took eventlogging::service::service as an example of how we pull packages from backports. This new version has been tested on new maps2??? servers and show that initial import and replication are working fine. Bug: T112423 Change-Id: I13cc0a9566a32cdf8f4ce7a85e22bfdab1c50173 09 June 2016, 13:53:47 UTC
f5fcaa3 Guillaume Lederrey 08 June 2016, 16:39:38 UTC Maps tables should all be owned by osmimporter Bug: T134901 Change-Id: Iccf42ba1be5c3b418b71cd899f006d7f4d432315 09 June 2016, 11:29:59 UTC
f078ced amir 08 June 2016, 23:25:13 UTC ores: Add graphite settings Bug: T137367 Change-Id: I5e197abbedba94667c8877fbe82c9d183c17a055 09 June 2016, 11:27:36 UTC
a28bf49 Moritz Muehlenhoff 09 June 2016, 09:51:55 UTC Skip installing the imagemagick profile for now Needs followup fix. Change-Id: I11411c3eb21a90c2c3a5eb71505a833835f54f01 09 June 2016, 09:51:55 UTC
3fb3c17 Moritz Muehlenhoff 08 June 2016, 16:08:11 UTC Provide the firejail containment for imagemagick's convert(1) on all app servers It is also used by the Score extensions which is installed on all app servers and not only on the image scalers. Bug: T135111 Change-Id: I4463ad7285cf93faaed02294a19790be1f516d89 09 June 2016, 09:32:33 UTC
1e5a887 Guillaume Lederrey 31 May 2016, 09:38:22 UTC Change expired file zoom level from 16 to 15. Keeping on zoome level 15 still gives us the ability to oversample on level 16 but saves quite a lot of space. Bug: T136483 Change-Id: If3b286f2540307a8b043cc13de7f710f3024f9cc 09 June 2016, 09:09:49 UTC
98a28ca elukey 08 June 2016, 15:44:40 UTC Force Varnishkafka to output the Resp timestamp. This change will force the timestamp formatter for the Varnish 4 compatible varnishkafkas to output the SLT_Timestamp Resp tag rather than the Start one. This is achieved adding the "end:" prefix to the timestamp format string. Bug: T136314 Change-Id: I4f859ca11b9bd3b6038ae2cfd7ef10579723a264 09 June 2016, 08:39:21 UTC
7811915 amir 08 June 2016, 21:36:45 UTC ores: Add redis settings to worker nodes in labs Per changes we made for prod, now worker nodes in labs doesn't have proper config files. Change-Id: I26d9eeb8f410276e47eb4f5caa09bc1cd05362c8 09 June 2016, 08:25:55 UTC
037c841 Marius Hoch 08 June 2016, 23:35:26 UTC Retry Wikidata dump creation up to three times Related to T137366 Change-Id: I257efd74ff770dbdec0e6856b3be8dfc30b0168d 09 June 2016, 01:14:51 UTC
2585142 Max Semenik 08 June 2016, 23:51:50 UTC Switch OSM replication to HTTPS Change-Id: I796ea1ac2bcda4312e09ee22650e6fa4b2cda60a 08 June 2016, 23:51:50 UTC
859e1a6 Daniel Zahn 08 June 2016, 23:19:10 UTC contint: add firewall rule for nodepool to Jenkins API Allow the nodepool host (currently labnodepool1001) talk to port 443/tcp on contint hosts (gallium/contint1001). Per the flow table on the ticket. This is just like the existing rule above it with the same source but port 8888. Bug:T137323 Change-Id: I562d75efd65eacbe1462b1d4cf4314b2b8dc0af4 08 June 2016, 23:21:16 UTC
272fa17 Ori Livneh 08 June 2016, 21:43:00 UTC apache config for xhprof UI Follows Id29a555. Change-Id: I072e0ddb228a437eaaa518b6c9c0ecab575a7ecc 08 June 2016, 21:43:31 UTC
d50e9cd Ori Livneh 08 June 2016, 21:35:30 UTC xhgui: provision xhprof UI It'll be useful for us to be able to upload and share xhprof profiles with one another. So provision the xhprof_html UI that ships with the xhprof extension. Change-Id: Id29a55589284fc064bada78c881d3f2e9e3a9668 08 June 2016, 21:37:15 UTC
41d52e5 Guillaume Lederrey 08 June 2016, 20:11:54 UTC Revert "Scap3 config for tilerator" This reverts commit e0a432e434053a867b9c60f09bd31f659569bc24. Change-Id: I062fa7bdea9970b8a3914a3c540b75d48c166f29 08 June 2016, 20:58:05 UTC
0f96cec Guillaume Lederrey 08 June 2016, 20:19:41 UTC Fixing lint issues those issue were probably introduced while Jenkins was taking a nap... Change-Id: I98ebd391b1ca29d8023e0bbaf37a83e14ea8bca7 08 June 2016, 20:19:41 UTC
e0a432e Tyler Cipriani 27 May 2016, 16:56:26 UTC Scap3 config for tilerator Bug: T129146 Change-Id: I7974ffe28b2f7858bccd90257ece27c409fa144a Depends-On: Ifce82fba9bc29792d636b27721354bdb9ba8edf1 08 June 2016, 19:21:35 UTC
594b7d6 Tyler Cipriani 31 May 2016, 14:51:52 UTC Scap3 config for Kartotherian Bug: T129150 Change-Id: I12a08831cfc07280f2021adedb00262b5e81686e Depends-On: Ie2a956c5d14f068771f4cfbb0e673008870012cb 08 June 2016, 18:20:53 UTC
557fb66 Eric Evans 26 May 2016, 00:03:15 UTC filter out new metrics Over in https://github.com/wikimedia/cassandra-metrics-collector/pull/14, o.a.c.metrics.{Client,Keyspace} was added to the set of collected metrics. This changeset preemptively filters these metrics to enforce the status quo when the change lands in production. Change-Id: If609adc2a0493feda5dd0f5c7633c59af47ab6fb 08 June 2016, 18:15:02 UTC
e5e0090 Brandon Black 08 June 2016, 17:20:48 UTC ssl sid cache: 25h + 4G More experimentation. By tracking shm RSS and the grafana client-connections data over the next day or two, we can see from this which limits us first. We've seen the shm RSS grow as high as ~1.3G usefully (before it becomes polluted with effectively-dead keys) at the 75min + 2G settings. I doubt we'd want to go much further on either dimension, so from here we back down appropriately according to the data (and then implement randomized wipes per-cache-node to preserve FS over the long term). Change-Id: I51eb3fb04c7ea7e38c68a9e19df28f320003a737 08 June 2016, 17:20:48 UTC
8cae073 Marko Obrovac 08 June 2016, 16:49:07 UTC Change Prop: Fix the number of workers to 8 temporarily Change-Id: I81ba4bd4457a3fde02a3e33b131b4efae10e4027 08 June 2016, 16:49:49 UTC
a57c469 Andrew Otto 08 June 2016, 15:36:00 UTC Set max conns to 1024 for all zookeepers Also move sync_limit config out of role into hiera, and update some comments Change-Id: Ic74aa86fc66fd00ca5f114af90b3b1293a8a5fb1 08 June 2016, 15:38:19 UTC
f0185d7 Andrew Otto 08 June 2016, 15:06:14 UTC Move zookeeper max_client_connections to zookeeper.yaml in eqiad for testing Change-Id: I57f997f77797542f2d59c5c3ac3dd72e6bbc037c 08 June 2016, 15:07:48 UTC
39cd9bf Giuseppe Lavagetto 08 June 2016, 15:00:46 UTC contint1001: add zuul Bug: T137265 Change-Id: I5e8cc9cc8e2682699edc02ac9f09306c2dedca44 08 June 2016, 15:05:38 UTC
e57b0cd Marko Obrovac 08 June 2016, 14:55:47 UTC Zookeeper: Limit the number of connections to 200 in eqiad Change-Id: I10a059b08f3cdf872e8885194db24a39c317c13b 08 June 2016, 14:59:03 UTC
3c84449 Giuseppe Lavagetto 08 June 2016, 14:49:24 UTC hiera: rename host file Change-Id: Ie577eca4ff6477b3e2e88bc0623dd72a2236c17f 08 June 2016, 14:49:24 UTC
cadbdff Giuseppe Lavagetto 08 June 2016, 14:41:01 UTC jenkins: declare the home directory explicitly Change-Id: Ibd70cd5825f7723b276abd37d79da5b310ea038d 08 June 2016, 14:43:20 UTC
fce440e Giuseppe Lavagetto 08 June 2016, 14:25:43 UTC role::contint::*: try to resolve circular dependencies correctly Change-Id: Ie0ea276575272af94d395b8a59fa7b42e93f5982 08 June 2016, 14:32:26 UTC
a129d40 Andrew Otto 08 June 2016, 14:16:00 UTC Update zookeeper submodule with change to no longer subscribe to config files Change-Id: I3958bfb3514cd0a344b534265d5886a5a7cef710 08 June 2016, 14:26:54 UTC
11f510e Brandon Black 08 June 2016, 14:21:12 UTC ssl sid cache: 15m -> 75m part of the ongoing series of experiments to maximize our ssl sessionid re-use (after which we trim back to reasonable resource waste and solve the breaks in forward-secrecy separately). Change-Id: I9450e9090a3838b3f3f5b942b17de8ca0fba8061 08 June 2016, 14:21:14 UTC
565181a Giuseppe Lavagetto 08 June 2016, 13:53:10 UTC role::ci::slave: require /srv/ssd as a file, not mountpoint Change-Id: I6184de472c31301d1bcbbaf7661cf1ed6918b39d 08 June 2016, 13:54:14 UTC
f87540b Giuseppe Lavagetto 08 June 2016, 13:47:44 UTC role::ci::website: require role::ci::slave Change-Id: I0f4b7240b582a5ab18a6b1595106efcaf9eb2d57 08 June 2016, 13:49:13 UTC
e30a890 Marko Obrovac 08 June 2016, 13:41:56 UTC Change Prop: Lower the concurrency limit to 30 Change-Id: I039d1ac678bf7833d1345189a7849c081d4ee3fb 08 June 2016, 13:41:56 UTC
799343b Giuseppe Lavagetto 08 June 2016, 13:36:53 UTC role::ci::master: hotfix for /srv/ssd Change-Id: I69a40b9bffcf8d157c16a581198ff02481c2cc66 08 June 2016, 13:36:53 UTC
23cbd8c Giuseppe Lavagetto 08 June 2016, 13:29:50 UTC role::ci::master: require role::ci::website Change-Id: Ie6eb98dfd5d1bbd4e452baf219bb12de95a19edc 08 June 2016, 13:29:50 UTC
f817888 Giuseppe Lavagetto 08 June 2016, 13:07:17 UTC dhcp: fix typo in contint1001 name Change-Id: Ia0f8ca7fd6b9e8bd887ea6d8a5bb5d588452eba3 08 June 2016, 13:09:43 UTC
f09fae5 Giuseppe Lavagetto 08 June 2016, 13:04:29 UTC contint1001: add role::ci::master Bug: T137265 Change-Id: I489b0dd1d1d449c351dddfbf00eefe92ec02e9d6 08 June 2016, 13:08:08 UTC
ec9b447 Antoine Musso 08 June 2016, 13:05:41 UTC contint: hiera conf for contint1001.eqiad.wmnet Copy paste the hiera data from gallium to contint1001. Bug: T137265 Change-Id: I61a41b3dd29319231f660706d5c5bc1d67686542 08 June 2016, 13:05:41 UTC
e50bae3 Antoine Musso 08 June 2016, 12:33:04 UTC contint: remove packages from prod slave contint::packages was historically for the production slaves. Today we only have gallium (replaced by contint1001) and it barely run any jobs. Move most packages from contint::packages to contint::packages::labs so we get less mess installed on the production slave. Keep: - doxygen / graphviz that is build directly on the host hosting doc.wikimedia.org due (it takes hours on labs). - python-requests for the python script that auto update VisualEditor in Gerrit. Migrate Analytics related packages to contint::packages::analytics maven to contint::packages::java. Also make sure openjdk-7-jdk is required from there. mediawiki::packages is now solely on labs. That brings a LOT of packages which are not needed on the prod slave / zuul / Jenkins server. Move the rest of misc packages directly in contint::packages::labs. Change-Id: I8d70b7857faab38ee5f565f771228f8b4f8d3773 08 June 2016, 12:59:40 UTC
2a84173 Marko Obrovac 08 June 2016, 12:32:57 UTC Zookeeper: set maxClientCnxns to 0 (aka unlimited) Change-Id: I1da6067bb345114d8916b37ac05402cfb4b1515f 08 June 2016, 12:58:59 UTC
025143a Emanuele Rocca 08 June 2016, 12:13:45 UTC Add 'varnish_version' salt grain Bug: T131499 Change-Id: Ib50ac2829ef0cbcb494d62a7ca84205c5fc2075b 08 June 2016, 12:35:30 UTC
189a74d Marko Obrovac 08 June 2016, 11:46:43 UTC Change Prop: Fix indentation for transclusions Ic3fe4004b89116772376684dcb1efd0ff01526f5 added the transclusion rules for Change Prop, but the indentation was wrong. This commit fixes it. Change-Id: Icb63aa1581d4ad3c72e93b20ac6fa1a67b5d5bb0 08 June 2016, 11:59:23 UTC
a660414 Adam Roses Wight 08 June 2016, 06:15:27 UTC Reinstate Adam Wight's SSH key "snack" Accidentally removed in c0f2f4a3c17ab604708dfde2606c496743454582 Bug: T137162 Change-Id: I46523665e7f2c93b6f7b7e56c6326d8e43dc90df 08 June 2016, 11:54:55 UTC
e368bd2 Giuseppe Lavagetto 08 June 2016, 09:35:32 UTC contint: add contint1001 as gallium replacement Bug: T137265 Change-Id: I6cf8901bdc076403f63d5e051a5fca6268f94274 08 June 2016, 10:43:03 UTC
90506d7 Petr Pchelko 06 June 2016, 08:31:50 UTC Change-Prop: Enable file transclusions updates. Moving one more piece from RESTBaseUpdateJobs to change-propagation. This will enable processing of the file transclusions. Also, set the formatversion to 2 by default. Depends on: https://github.com/wikimedia/change-propagation/pull/38 Change-Id: Ic3fe4004b89116772376684dcb1efd0ff01526f5 08 June 2016, 07:47:43 UTC
9f67697 Moritz Muehlenhoff 08 June 2016, 07:13:56 UTC Disable ferm on palladium again The puppetmaster fetches it's own catalog from the secondary host, which fails since the rules are being setup sequentially. Revert for now and figure out a better way. Change-Id: I25b292595d8cefbb6163a9d0d8d13af689fa112e 08 June 2016, 07:15:33 UTC
6226513 Moritz Muehlenhoff 02 June 2016, 12:36:20 UTC Enable base::firewall for palladium Change-Id: I973446963f8116a0ea89c03af331e74dc702db4b 08 June 2016, 06:44:13 UTC
56f42af Bryan Davis 07 June 2016, 21:22:56 UTC tools: Add role::toollabs::merlbot_proxy Role to provision an nginx server acting as an HTTP -> HTTPS reverse proxy. This is a temporary solution for issues with MerlBot and the impending closure of the HTTP POST loophole. Bug: T137235 Change-Id: Id49c79d524654b409cc991634effb473b38fb78b 08 June 2016, 01:51:12 UTC
d7673f6 pt1979 08 June 2016, 00:12:55 UTC adding install params for mw2215 to mw2250 Bug: TT135466 Change-Id: I63a9cb4cfe772ca8f6d28089115c099803b92ec7 08 June 2016, 00:50:14 UTC
94ce952 amir 07 June 2016, 21:52:08 UTC ores: Add support for Norwegian Change-Id: Iaf8533802e3318a0234874d7a7991738bc94fb17 07 June 2016, 22:29:25 UTC
1c8f684 pt1979 07 June 2016, 21:17:57 UTC DHCP: Add MAC address entries for mw2215-mw2238 skipping mw2218 Bug:T135466 Change-Id: I1f42fd235a60abe4c4c0b8f8be95bd417a4e2c46 07 June 2016, 22:09:51 UTC
566f2a6 RobH 07 June 2016, 21:21:00 UTC setting install params for relforge100[12] setting dhcp and netboot updates T136708 Change-Id: Ib5b7609dcc317215819d8756cd2f31f186d18838 07 June 2016, 21:21:00 UTC
e91d6e2 Brandon Black 07 June 2016, 20:55:32 UTC nginx: bump session cache by 10x experimenting further with the limits and tradeoffs here. Note labs is differentiated so we don't oom a small VM. Change-Id: I4061ae09b375eae58ca2023fdc1be663cfc23715 07 June 2016, 20:55:36 UTC
d171ca7 Brandon Black 07 June 2016, 18:26:55 UTC text VCL: fixup hfp for X-Cache-Int Change-Id: Ia7e6bbebd304ff4393668fa5f0fd3de3a08c7110 07 June 2016, 20:42:55 UTC
af0cb43 Daniel Zahn 26 May 2016, 06:20:12 UTC varnish: move errorpage.html from misc to module Change-Id: Iedb78347fa8db42bc4eaca74433d530014991e70 07 June 2016, 19:21:17 UTC
909424a Antoine Musso 07 June 2016, 18:49:55 UTC contint: move libav-tools to contint::browsertests It is required for the Selenium browser tests. Makes more sense to have it there instead of the overly generic contint::packages::labs. Change-Id: If2ef4c0cb7d3de6956de15e6a5a4334a0d8feb02 07 June 2016, 18:50:45 UTC
66505b3 Daniel Zahn 07 June 2016, 02:30:21 UTC DHCP: switch default installer to jessie - switch the default installer from trusty to jessie - remove all jessie installer lines - manually set all trusty and precise installers - remove a few hosts that don't exist in DNS anymore - misc: -- pc1001-1003 removed (T124962) -- osm-cp removed (T104869) -- beryllium, boron removed (not in DNS, Fundraising) Bug:T133539 Change-Id: I470aa3600e3317d84610f4e85127d16982e3fd8f 07 June 2016, 18:33:47 UTC
6e64d7a Daniel Zahn 06 June 2016, 18:08:47 UTC remove furud from site.pp,dhcp,installserver furud was meant to be a 'gitblit on jessie' replacement for precise host antimony. But only until diffusion takes over and now its not going to be replaced, instead URLs are going to be rewritten to diffusion. gerrit replication was turned off in Ib64d4eaf5744caf5e Bug:T123718 Change-Id: Iffd2f44cf2de4954059b8aeb29432c211eb854b0 07 June 2016, 16:42:20 UTC
7def544 Moritz Muehlenhoff 01 June 2016, 07:25:25 UTC ircyall: Stop using package=>latest Updates in production are managed centrally and in labs via unattended-uprades. Change-Id: I070153c6ec4c900959f6c519745f3cbebde20cc0 07 June 2016, 16:34:33 UTC
0c28cdd Faidon Liambotis 07 June 2016, 16:23:28 UTC smokeping: properly include module class In commit 66ce6e420c12a87ce676a3ba4a0055fc5aab6da2 I mentioned: - include ::smokeping, not smokeping, from role::smokeping (typical recursion error) This commit actually does that :) Change-Id: I45b7f4e917c627e820bd2d5e8186b11110220d40 07 June 2016, 16:27:59 UTC
26c7d8b RobH 24 May 2016, 22:40:36 UTC admin: access request for Joe Sutherland This is adding a new user, foks, and adds them to the analytics-privatedata-users and restricted groups. Bug: T136137 Change-Id: I1023e4072764299765ccb23d545cdda3698c7868 07 June 2016, 15:36:15 UTC
c0f2f4a Faidon Liambotis 07 June 2016, 15:29:30 UTC admin: replace Adam Wight's SSH keys Bug: T137162 Change-Id: Ie30e3dd6996d8858a324922b92f91afe4052d49a 07 June 2016, 15:29:30 UTC
66ce6e4 Faidon Liambotis 07 June 2016, 15:22:45 UTC smokeping: various cleanups I'm suspecting this class has never worked properly (the suspicion arises by the fact that we define two System::Role['smokeping'] in what should be the same catalog, but this doesn't result in a conflict). Cleanup a things a little bit. More specificallY: - include ::smokeping, not smokeping, from role::smokeping (typical recursion error) - Remove the system::role from the module; it only belongs in the role class - Fold class smokeping::config into class smokeping (no point in having it different). Also drop the Package -> Class dependency which is a no-op given where it's defined. Change-Id: Ic7777b8ab39e3ac7939a95ca8761c01bc736980c 07 June 2016, 15:25:13 UTC
0e4996d Jaime Crespo 02 June 2016, 19:05:18 UTC Grant grafana-admin.wm.o access to LDAP group grafana-admin Posts/Puts/etc. are limited on the grafana. domain, those are allowed for certain groups on the grafana-admin. domain. Aside from ops, wmf employees and nda users, allow an additional LDAP group "grafana-admin" to access the admin interface. The proposed rules for adding people to this group are: 1) The user doesn't need to have signed an NDA, as grafana does not contain any private data 2) The user has expressed an reasonable need for the service (e.g. needs to create dashboards as part of his job, has volunteer to perform graph maintenance) 3) The user is trusted by ops or has another trusted user (wmf/ nda) endorsing him Change-Id: I61317d2b83e53b2bc9c839cd02017a2d6c6439da 07 June 2016, 15:19:17 UTC
d6976b7 Faidon Liambotis 07 June 2016, 12:50:45 UTC smokeping: add more codfw hosts Change-Id: Ia811f11b074d41f3360dafeb99e1560bdb71812f 07 June 2016, 12:50:45 UTC
1f0f691 Giuseppe Lavagetto 07 June 2016, 08:41:18 UTC mediawiki: add mw1261/2 to mediawiki-installation, pybal Change-Id: I75f309941664f479751877f65289ccb58061d79b 07 June 2016, 09:56:57 UTC
9e55f21 Giuseppe Lavagetto 07 June 2016, 08:59:44 UTC mediawiki: fix hiera regex for new appservers Change-Id: I708543842ec281e2bda1bdac7706abb82ee0e977 07 June 2016, 09:14:58 UTC
32b4381 Emanuele Rocca 06 June 2016, 14:55:18 UTC Don't install apt-show-versions apt-show-versions is responsible for frequent cronspam and does not seem to be in use. Bug: T132324 Change-Id: I72f424c34ce8dcfee538edb28bc19c769922fbeb 07 June 2016, 07:37:04 UTC
3043503 YuviPanda 07 June 2016, 02:28:33 UTC tools: Switch the label selector used in kube2proxy More consistent with k8s label naming schemes Change-Id: I32c4633eb0ccbfd70c20e1e1d41cf8010e027d61 07 June 2016, 02:47:35 UTC
5ac81c7 Faidon Liambotis 06 June 2016, 23:37:41 UTC exim: add wmflabs.org to wikimedia_domains Change-Id: I8f9811854732a515fc2444f411595c683006cbb1 06 June 2016, 23:37:41 UTC
c5bce53 Alexandros Kosiaris 06 June 2016, 23:25:33 UTC admin: Add ladsgroup/halfak to deploy-service group Bug: T136406 Change-Id: Ie55c4cc8b56e0eda7c8ab00d56297bc859e2956f 06 June 2016, 23:25:33 UTC
4d118a1 Alexandros Kosiaris 06 June 2016, 23:07:19 UTC admin: One more try to get it right Change-Id: Ib34878ca057a40f34c4d7b11a3e27c78f753f1cb 06 June 2016, 23:07:19 UTC
fbac732 Alexandros Kosiaris 06 June 2016, 23:04:35 UTC admin: Fix typo introduced in If2e2be807eea90b7002 Bug: T136406 Change-Id: I305910a9578b3b3e3d2af0c8c87cd9b8c9c24829 06 June 2016, 23:04:35 UTC
9c0d666 Alexandros Kosiaris 06 June 2016, 22:59:40 UTC admin: Add ladsgroup to deployment group Bug: T136406 Change-Id: If2e2be807eea90b7002ceda78b3ed7ed461f012c 06 June 2016, 23:01:12 UTC
f9b1d07 Brandon Black 06 June 2016, 19:44:30 UTC clamav package update broken config workaround Change-Id: Ia6070c01122f294249ddd6f30b2db63655f7d212 06 June 2016, 19:44:45 UTC
fb60ce3 Daniel Zahn 04 June 2016, 01:24:40 UTC redirect moon.wikimedia.org to meta page redirect moon.wikimedia.org (added in Ia54153b424e6a) to https://meta.wikimedia.org/wiki/Wikipedia_to_the_Moon as requested on the ticket. Bug:T136557 Change-Id: I9066da317e003aef4813eae1565c8209c2fbcddc 06 June 2016, 18:53:21 UTC
d1df37e Brandon Black 06 June 2016, 14:52:37 UTC Set includeSub/preload for wikimedia.org in VCL Bug: T132685 Change-Id: I7d16aaa0dee86a7436b67a686db1997db2e169b5 06 June 2016, 18:44:38 UTC
004a63b Brandon Black 06 June 2016, 14:10:31 UTC ssl_ciphersuite: standardize STS preload Now that wikimedia.org can preload, switch the HSTS argument to a boolean that always sets our standard 1y/includeSub/preload STS string. The default/false leaves out HSTS completely, leaving it up to manual config to set any HSTS, in case of e.g. labs-based services which are outside the scope of our canonical domains/policies. Bug: T132685 Change-Id: I271336e264b01d7a352577dcc5afa0b4ca2be31f 06 June 2016, 18:44:03 UTC
6a64100 Brandon Black 06 June 2016, 18:32:02 UTC fix grafana(-admin) icinga checks Accidentally applied the check_http_unauthorized check to the wrong one earlier in 507e0f51 Change-Id: Ic9600936c79a2bcfca185f67ab8f1d7f2960b6ef 06 June 2016, 18:33:02 UTC
07bcaf9 Alexandros Kosiaris 03 June 2016, 10:51:06 UTC ores: Add varnish backend in the misc cluster Use the misc varnish cluster to drive ores.wikimedia.org. Discussion in T124203. Bug: T124203 Change-Id: Ib5cc70853854e4554db5bb547f1f0896c042adbd 06 June 2016, 18:23:57 UTC
3383f8c amir 30 May 2016, 12:03:31 UTC Add ores-admins group and provide permissions for scb Bug: T136406 Bug: T136612 Change-Id: I9a598211447cac4011207bd06e7909b2aaa6fc82 06 June 2016, 18:21:10 UTC
bc6cc98 amir 03 June 2016, 23:58:21 UTC ores: deprecate flower We use graphite now, removed the role already in https://wikitech.wikimedia.org/w/index.php?oldid=610289 Bug: T137003 Change-Id: I7d37e7143f1ef8b58ee40e0f7937aaae2f098dc2 06 June 2016, 18:20:07 UTC
90809b6 Brandon Black 06 June 2016, 18:09:41 UTC zerofetcher: use secret() directly otherwise puppet logs leak data Change-Id: I547a54807037aac5f7cf6f3a7dcf3f0b9e7862c0 06 June 2016, 18:10:45 UTC
507e0f5 Brandon Black 06 June 2016, 17:09:06 UTC fix piwiki and grafana-admin HTTP checks for 401 Change-Id: I5195859f36a0bc93491372ff4a7481d917e219c1 06 June 2016, 17:12:41 UTC
bc83369 andrewbogott 02 June 2016, 05:17:24 UTC Add tex/latex fonts to tools exec nodes Bug: T137121 Change-Id: Id9fea89132c2acc6d872e65b02c46580cbb206e3 06 June 2016, 17:05:20 UTC
bdd27ef Chad Horohoe 06 June 2016, 15:02:11 UTC Gerrit: kill replication to furud Was going to be gitblit replacement, but we're not going to replace gitblit. Change-Id: Ib64d4eaf5744caf5e5c7d7c2346c94d9c8ea56df 06 June 2016, 16:57:35 UTC
60e8e73 Andrew Bogott 06 June 2016, 16:51:32 UTC Revert "Add 'libertine' fonts to tools exec nodes." Oops, this was already included as part of mediawiki::packages::fonts This reverts commit 456adf4054b5e9db048c724de02591b845a111ee. Change-Id: Ia33a46e9e315b27baef2dc5b7030859bbb2c8534 06 June 2016, 16:51:32 UTC
456adf4 andrewbogott 02 June 2016, 05:17:24 UTC Add 'libertine' fonts to tools exec nodes. Bug: T137121 Change-Id: I1e4f3e8d59db04a5bcb401cb1d5867439720e5de 02 June 2016, 05:17:24 UTC
a24fa84 Guillaume Lederrey 06 June 2016, 14:00:23 UTC Activate more logs on postgresql for maps. test under load show that this generate a reasonable amount of logs as we are only logging queries > 10 seconds. This additional logging is added only to the postgres master Change-Id: If6d942ff4392d34b0f6b83b66fbe2d5a2a36afbf 06 June 2016, 15:30:53 UTC
18d9391 Brandon Black 06 June 2016, 15:25:10 UTC fix arrow alignment .... Change-Id: I1b16417584a711087cf06bc92e677e8e21355fdf 06 June 2016, 15:25:21 UTC
7d9914f Brandon Black 06 June 2016, 14:52:50 UTC fix ferm port 80 for californium/gallium Bug: T137106 Change-Id: Ib09c9ae18d255f3b09714c58c5d6880c891b4fe8 06 June 2016, 14:55:48 UTC
d43c205 Brandon Black 06 June 2016, 13:51:22 UTC Remove TLS bits from internal sites behind cache_misc All of these services live behind cache_misc, which unconditionally provides and enforces standardized HTTPS and HSTS. Getting rid of the redundant redirect/HSTS code in them makes it simpler to audit the puppet repo for functional TLS-related configuration on actual directly-public sites with less confusion. One could make the argument that these role/sites could eventually be re-used for a direct service, but if so the configuration would be completely different. What they do today (port 80 vhost with !XFP->redir, +HSTS) does not make sense for a directly-public site, which would instead have port 80 vhost with unconditional redir and a port 443 vhost with +HSTS. Bug: T132685 Change-Id: I01f49496a73dd30c2e7ad42e94390779b82dbe65 06 June 2016, 14:34:12 UTC
8460859 Guillaume Lederrey 06 June 2016, 14:00:23 UTC Activate more logs on postgresql for maps. test under load show that this generate a reasonable amount of logs as we are only logging queries > 10 seconds. Change-Id: Iba41209dc6ac23bc7bdc91a0a03d4abc2d45680f 06 June 2016, 14:02:30 UTC
7160b64 Emanuele Rocca 06 June 2016, 10:39:07 UTC update-ocsp-all: write output to logfile Use a logfile (and rotate it) instead of cronspamming. Bug: T132835 Bug: T132324 Change-Id: Id4a73844d6218a0e257191690feec898f48db371 06 June 2016, 11:02:07 UTC
4ab5d4a Giuseppe Lavagetto 06 June 2016, 10:22:18 UTC install_server: re-tab netboot/mw-raid1.cfg Change-Id: I847af9d4a479989822e625f6ba1772938e71d40e 06 June 2016, 10:22:18 UTC
dab8723 Giuseppe Lavagetto 06 June 2016, 10:03:08 UTC install_server: fix partman recipe for 2-disks appservers Change-Id: I7462769725c9f7ccfdfdfb0336beb3f202d7f0db 06 June 2016, 10:05:34 UTC
76c8e27 Giuseppe Lavagetto 06 June 2016, 09:25:27 UTC hhvm: fix stacktraces script for jessie Change-Id: Ibdab29a2f80a67e474a44b2acf1b7587345d0464 06 June 2016, 09:27:36 UTC
586da0b Giuseppe Lavagetto 06 June 2016, 09:11:10 UTC mediawiki::cgroup: fix upstart job Right now if the stop part of the job failed, it would be impossible to restart the unit. Make it tolerant to the presence of the directories if they exist already. Change-Id: Ie61f50bb90ecbcd8c8cc66d4f136745a3c1ffa01 06 June 2016, 09:11:10 UTC
0361db3 Giuseppe Lavagetto 06 June 2016, 07:09:54 UTC facter: remove references to $::memorytotal The memorytotal fact is not present in recent versions of facter (anything > 1.7, actually). Before that, the fact was a synonym for memorysize and deprecated: https://docs.puppet.com/facter/1.7/core_facts.html#memorytotal Since we're using facter 2.2 in jessie, convert all references to memorytotal to use memorysize instead. Bug: T131749 Change-Id: Ida15e4880419ba99f350f7e3883d45560184f9c1 06 June 2016, 08:33:40 UTC
078ced2 Giuseppe Lavagetto 01 June 2016, 15:25:12 UTC hhvm::debug: fix hhvm-dump-debug on jessie Change-Id: If5cec3c0e3a516736e9e26d0e4d61f43af620c50 06 June 2016, 08:23:27 UTC
b00a71b Giuseppe Lavagetto 06 June 2016, 08:06:21 UTC mediawiki::cgroup: don't restart upon changes to the unit Change-Id: I2ca62ca42a99235e1cfe07d024bc4aee12e4a16f 06 June 2016, 08:06:21 UTC
back to top