https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
036de46 Phabricator: Add javascript to files.viewable-mime-types files.viewable-mime-types is allowing you to view the different languges in raw format. http://stackoverflow.com/questions/876561/when-serving-javascript-files-is-it-better-to-use-the-application-javascript-or PS8: amended to add 'application/javascript' only (https://www.rfc-editor.org/rfc/rfc4329.txt 7.1 / 7.2) text/javascript (obsolete) per RFC Change-Id: I1932058b0f67ceb6d3f67771dc3031de4e610d18 25 October 2016, 22:32:43 UTC
3915d91 Gerrit: Move jvm logs outside of gerrit logging folder Gerrit's rotation and gzipping scheme is kinda simplistic and the JVM rotation doesn't play nicely with it. While we're here, ensure the git storage location is setup properly too, it should always be there (we can probably remove $git_dir in a subsequent patch) Change-Id: I29eb85b3998b91ad2935e65cb5c877f3bfb5bfd0 25 October 2016, 20:27:56 UTC
30f7011 phabricator: Drop "Phabricator workboards with single column only" query This reverts https://gerrit.wikimedia.org/r/#/c/286133/ The query removed in this change worked before we started to extensively use subprojects and milestones, now its results are incomplete and misleading, and fixing this properly seems too complex and not worth the effort: The results of the query removed in this change do not include parent projects when they have at least one (active or inactive) milestone or when they have an (active or inactive) subproject with a workboard: Once a subproject has a workboard, a row is created in phabricator_project.project_column (though the subproject is not even shown on the parent workboard!) having the projectPHID column referring to the parent project, hence the parent project is now not anymore listed only once in that column (which is the query condition), though the parent project might still only display a single column on the workboard. (The results of the query removed in this change also include names of milestones and subprojects. To look them up in the UI we'd need to know the related parent project and include it in the output. For this we'd have to run a subquery to get the corresponding parent project.name for the referred project.parentProjectPHID on the very same table.) In theory we could also go for only listing top-level projects by adding a condition "project.parentProjectPHID IS NULL" but that would result in not including any subprojects (or parent projects which are not top-level projects) which only have a single column which would also be very incomplete output. Change-Id: If81ac03bcb83d83817d4e6d9f6a9f0206be55567 25 October 2016, 18:38:02 UTC
023413e phabricator: Also display column name when hiding/showing workboard columns The query output listed workboard column names only when creating or renaming columns but not when hiding or showing columns (only the project name is/was shown). Also reorder to show project name and column name first. Change-Id: Id86b4f7dcabe377b0eb0648f6f73f1fe50687ad0 25 October 2016, 18:34:38 UTC
fcb8787 phabricator: Also list parent project for (sub)project creations and name changes The current output provides raw names which is not too helpful, seeing names such as "doing" or "done" being used for milestone projects. Furthermore, milestones are not include when using Phab's project search, hence it's been nearly impossible to locate them to perform potential naming corrections. Change-Id: I1dbc554ff366c8b4da818beacd3fadcecb764261 25 October 2016, 18:23:51 UTC
0e72141 phabricator: Also list name of acting user for project creations and name changes Change-Id: Ifb6c2073d1c3a187f73c98605ae0cf6755b67b8a 25 October 2016, 18:01:03 UTC
f9e7221 phabricator: exclude entries with oldValue=null in "Project changes" results They are no "project changes" but actually project creations. Project creations are already covered in the first list. Change-Id: Ifa17e15c374277a2b6c90a1d5c47aafc0321c158 25 October 2016, 17:55:55 UTC
7c0c74f Rename potassium as poolcounter1002 Bug: T123734 Change-Id: I1e755f1519981cc8bca2fa6c9026c662011eba37 25 October 2016, 17:42:27 UTC
1132c14 Fix-up for Iff996299 Change-Id: I4c6e3859917c7b34d76c23eb0628402a188f60a2 25 October 2016, 17:38:20 UTC
99d4853 puppet: kill manifests/roles, move under $modulepath Bug: T119042 Change-Id: Ibb167b2cd663347e4e5c3c0e2af0dbfa565ba9fe 25 October 2016, 17:18:01 UTC
efc1d23 neon: Warn against neon deprecation The usual 2 week deprecation notice Change-Id: Ib639de4dcad40720e7d6f79fc8a90b33a9fedbc3 25 October 2016, 16:32:29 UTC
104d373 Gerrit: Enable logging for jvm gc Pretty sure something is thrashing, so let's find out what. Bug: T148478 Change-Id: I1007b1ae51090b27f2ed521b4957db8060d42e2d 25 October 2016, 16:24:28 UTC
b70546a Gerrit: Let log4j.properties be read by anyone Change-Id: Ia914c77919d5be0485a7e5e31784537384e1f736 25 October 2016, 16:07:02 UTC
e525597 Revert "Gerrit: Have log4j re-read its configuration every 60 seconds" monitorInterval isn't reliable. This reverts commit 939eb2cb39b03a3006a2ae51480764bae5a60211. Change-Id: I817293da668d8df97a087854404227265097be85 25 October 2016, 15:58:44 UTC
e961ca3 icinga: Update the icons Debian Jessie Icinga 1.11.6 ships those icons under "vendors" subdirectory instead of the "base" Ubuntu Precise Icinga 1.6 does Update this Change-Id: Idc706893fa2c55844cbfcc5480be22309fc981f8 25 October 2016, 15:56:05 UTC
4f7da6e Replace neon with einsteinium where applicable Replacing the functionality provided by neon with einsteinium where applicable throughout the tree Change-Id: I63f7040d2ebffcb483ebde219992a4370660501c 25 October 2016, 15:22:13 UTC
5b1d1db coal: using stdlib's logging Using syslog.syslog() is fine, except exception info doesn't end up there. We could use logging.handlers.sysLogHandler, but let's just log to stderr and let systemd manage the output. Change-Id: Iff9962998211edba9f94cf3662ccd18c685eeee6 25 October 2016, 15:15:46 UTC
16c4425 coal: die if no events in N seconds Sometimes coal will keep running even when the publisher has stopped sending it events for whatever reason, and then we have to restart it. Automate this by dying if three minutes pass with no events. Change-Id: Ic7b7b601028605afd24144090f49c98e001e2921 25 October 2016, 15:15:08 UTC
eac16d7 switch neon and einsteinium as primary/backup icinga hosts Enable everything on einsteinium, disable on neon Change-Id: I742e9ad411a7cf3ccd65330f3432f900c3c9af18 25 October 2016, 15:01:52 UTC
3110624 icinga: Add einstenium/tegmen in some openstack places This is hideous and the entire thing needs to be restructured to use hiera (as at least one comment says). But for now just update it and hope I don't break anything Change-Id: I224ee3877b4d5f1566d5d1911907d9aff2738034 25 October 2016, 14:54:56 UTC
b1e25f6 logstash: Stop dropping mod_proxy_fcgi warnings Bug: T73487 Change-Id: Icdb49b9e5f4a6ffbbd2b5f4c112b1ee99cae893d 25 October 2016, 14:08:06 UTC
12a4ca6 kubernetes: add monitoring cluster, debdeploy config Change-Id: I7eb652560854cabcd0420b84b2836529cf514ad1 25 October 2016, 13:49:39 UTC
8ffbe39 tegmen/einsteinium: Use the same resolv.conf as neon I 'll admit I don't think this is necessary, but I 'll bite the bullet in the interest of moving forward Change-Id: Ic83916f6b8f6f218952497311cf3418ffc9285c8 25 October 2016, 13:34:11 UTC
6a78054 Revert "Install parallel gzip (pigz) and parallel xz (pxz) on all servers" This reverts commit 207ae68102d0ed53c7c82c53f2ab17d43accde33. Change-Id: Icd5ebe147f48c63a939e470e2646c0a61c9bdd0a 25 October 2016, 10:36:32 UTC
207ae68 Install parallel gzip (pigz) and parallel xz (pxz) on all servers I already have pigz as a dependency on all database serveres, it multiplies by 5 the speed of cloning there where there is compresible data and cpu is not a bottleneck (both may not scale 100% linearly in all cases, but in many it makes the difference between being able to clone a raw disk or partition in 40 minutes or in 8 hours. Last time, the filesystem was in read only mode and I could not install these utilities. Their size is so small, that make them available by default (in addition to the already installed gzip and xz) can be life-saving. I won't push too hard for this (I have it fixed for dbs), but I highly recommend whenever there is the possibility of needing data copy or a partition recovery process, like the recent almost- defunct gallium. Examples of usage: dd if=/dev/sda | pv | pigz -c | openssl aes-256-cbc -salt \ -k $pass | nc $backup-host 4444 tar cvf - /srv/sqldata | pv | pigz -c > /mnt/sqldata.tar.gz Change-Id: If1d8337a16cb48e1cfba10d302a7c52e7c2dd724 25 October 2016, 09:56:09 UTC
59f9cc4 einsteinium: Assign the icinga box roles icinga, tendril, tcpircbot Change-Id: I2369611811cb226eb8ea460db2ed65f8e41e377a 25 October 2016, 09:38:14 UTC
d15d136 maps/cassandra - ensure that system_auth keyspace is replicated Bug: T149074 Change-Id: I605f2d1b088f3f215012fad6ffa92c1cb375a510 25 October 2016, 08:57:09 UTC
d3c8b4d proxysql: fix line separator I cannot use double quotes because linting complains, I prefer to break the line max size. Bug: T148500 Change-Id: I0e1e47c33529697c56319bde21950ccdb6dea19c 25 October 2016, 08:25:28 UTC
943a98f proxysql: Add notrack to firewall I do not know what I am doing. Bug: T148500 Change-Id: I76999784258966552893405ec8aebd54cc2a3185 25 October 2016, 07:53:40 UTC
539bfee role::tcpircbot: Add an ensure parameter Allow role::tcpircbot to be selectively disabled, based on an ensure parameter. Set this to absent for einstenium and tegmen Change-Id: Icfb4cbc96d83939eb9568d5df7208e3a4eddf250 25 October 2016, 07:48:32 UTC
7d1e3b0 icinga: Remove event_profiling_enabled Newer versions of icinga spew out warning about it. It is no longer a valid config setting Warning: config setting 'event_profiling_enabled' unknown. Remove it from your configuration! Change-Id: If09bd2626c2176801eb06e6c91a88feb78129623 25 October 2016, 07:47:30 UTC
58ac416 Remove absented /etc/icinga/puppet_hostextinfo.cfg entry No longer relevant Change-Id: Ic0e1f897c61ef23b6cbff586b0d609d9cb3471f6 25 October 2016, 07:45:05 UTC
aeca4ea proxysql: Add firewall to labs role Allow only port 3306 (proxy listening service). Bug: T148500 Change-Id: I0bd928f9110c7243d9ff7b134941113986aab7de 25 October 2016, 07:41:54 UTC
32e2008 add poincare.acc.umu.se to dumps mirrors Change-Id: I7d67da08acebe38601a567ef35692bc6c001fbee 25 October 2016, 07:30:50 UTC
1f99934 phab/ex gitblit: Strip out branch HEAD in git.wikimedia.org tree link regex is by @Danny_B Bug: T141965 Change-Id: I7f79a86bfd2d5b1f3168cc685b3aac3589fd1755 25 October 2016, 01:56:46 UTC
3e6455f icinga: also schedule host services downtime In addition to host downtime also schedule downtime for service(s) on the host, in case recovery of services takes longer than the host's. Change-Id: I29e029932392b08e90527fffc761f72248e4bba2 25 October 2016, 01:43:33 UTC
e4a98ec icinga: default duration for icinga-downtime Provide 2h default downtime, for convenience Change-Id: I577b488764ca020d0fcfcb762ac1c7ecec950015 25 October 2016, 01:41:15 UTC
282a226 role: add prometheus ipv6 ferm rules to varnish_exporter Change-Id: Ib8d240aa7adc9422e7b46c341eb33aee94b28b5c 24 October 2016, 23:33:56 UTC
1be74f7 Gerrit: Clean up cron job definitions * Log rotation cron goes to jetty manifest, that's what needs it * Move logs back to review_site so they get gzipped by Gerrit * Remaining crons only matter if we're the master, so move them into that stanza so they're not on slaves Change-Id: I526b8325abf6aaf878b8a95edff7e71e57b5a673 24 October 2016, 20:21:13 UTC
49d0a48 Revert "base: send syslog only to codfw to reimage lithium" This reverts commit 849ca062946ee8fc82f63dad9c81c5c0b828bc29. Bug: T143307 Change-Id: Ib20dd8951938b34abafa663ff7c0c3fde2894a92 24 October 2016, 19:35:53 UTC
ffdfa28 Labs images: Only add fqdn of instance to /etc/hosts Adding the simple hostname seems to break hostname -d Bug: T120830 Change-Id: Ib100fed1d8e3d93f5aee385ac403f575f3fe0be4 24 October 2016, 18:51:41 UTC
177f895 Add missing wiki to RB Bug: T148861 Change-Id: I1ed68aa9ceb15e907bf0080e37f2a9ba42407141 24 October 2016, 18:40:07 UTC
24fe6a7 Adding Tyler to releasers-mediawiki group Do not merge until approved. Bug: T148681 Change-Id: Id57b2edba69e6b1c7c013a6b31418ed479c79c7d 24 October 2016, 18:34:05 UTC
b8e50da prometheus-node-exporter: allow access from ipv6 too Prometheus hosts got ipv6, allow access from those too. Both ferm rules can be folded into MONITORING_HOSTS too and removed from the role. Change-Id: I78c9d2b4e56b7c87e6d8ce9e076895c123df103f 24 October 2016, 18:19:20 UTC
849ca06 base: send syslog only to codfw to reimage lithium Lithium can't reliably boot from PXE if it is being swamped by udp packets from the fleet. Bug: T143307 Change-Id: I75d8734724144fb7e19e79c307d71f15073d521b 24 October 2016, 18:07:22 UTC
1ba188e http2 concurrency: back to defaults Bug: T107749 Change-Id: I3c50fc3d7863fc85692bf0a930e5b48d5d2f3cd2 24 October 2016, 17:33:42 UTC
f784b5c http2 concurrency: 32 Bug: T107749 Change-Id: I3d164b1817d5350597af07311b4266cb0f16f145 24 October 2016, 17:23:52 UTC
5729397 proxysql: Fix process check and user permissions; Fix .my.cnf By default, make root the default owner. Fix mistake on .my.cnf template not adding the password for access. Fix wrong default mysql socket on manifest. Bug: T148500 Change-Id: Ice1fde7c6f61d8492840dc24f14771ad40c0ac0b 24 October 2016, 17:21:12 UTC
15c4c2f Add user pmiazga to the 'deployment' group Remark: approved by manager and Ops meeting. Bug: T148477 Change-Id: I4eea4f75776be5d1dfae0372625dde91f088e3fb 24 October 2016, 17:14:05 UTC
f524e55 tcpircbot: Use base::service_unit Add systemd initscript and move into the base::service_unit structure Change-Id: Ic58d75717ad168103edeaf86e3c67f65b0451a6f 24 October 2016, 17:11:35 UTC
c9371f5 tlsproxy: http2: limit concurrency to 512 (was 64) Bug: T107749 Change-Id: I21ab71a4b6599a741b1ff48cf8a0c25b7526f568 24 October 2016, 17:03:39 UTC
1f138a5 Add ppchelko to the deployment group Please note: this change should only be merged after the next ops meeting (if accepted of course). Bug: T148475 Change-Id: I611d533030bc81c275fab906c80ea3ea4968e94b 24 October 2016, 17:01:28 UTC
ecc3c2d proxysql: Fix typos on role Also add missing require. Bug: T148500 Change-Id: Ia795f692c658130eba03fd8338d1f0de847d78bb 24 October 2016, 15:48:53 UTC
24dec31 tlsproxy: http2: limit concurrency to 64 (was 128) Bug: T107749 Change-Id: I4eeaa824978ae02dd682642a51f421909ba6d905 24 October 2016, 15:41:10 UTC
3d4587d postgis - postgis scripts package does not exist for precise Packaging of postgis is different on precise. The postgresql-9.1-postgis-scripts package does not exist. The postgis scripts are packaged with the main postgresql-9.1-postgis package. Trusty and Jessie have the same packaging structure. Bug: T144763 Change-Id: I79ff8fe3922e691f79837ed30f62c78db56e2481 24 October 2016, 15:24:07 UTC
3f83e7b icinga::ircbot: Add an ensure parameter This will allow to not run the ircbot based on a flag. Set the flag to false for tegmen, einsteinium Change-Id: I483e81e070999a9e8077c093892561530a29751c 24 October 2016, 14:49:19 UTC
6192bb5 tendril: Apache 2.4 syntax in If clause guards Support apache 2.4 as well in the apache vhost without the need for mod_access_compat Change-Id: I50264ba0eed696fd09b4b2d64184aec2e997859c 24 October 2016, 14:48:54 UTC
050c216 bugfix for e23f699fe2 Bug: T107749 Change-Id: I857cf4d90f987da39daf5d1927d786d77cd58ef4 24 October 2016, 14:44:27 UTC
4ba3ff3 tendril: Set short_open_tag to true in virtual host Tendril is old enough that it requires short_open_tag set to true. Do this in the virtualhost instead of doing it globally on the box Change-Id: I69a3c33e7a0c470f8609401a3a673b036df181c8 24 October 2016, 14:43:10 UTC
78dec90 tendril: Install php5-mysql package Since tendril needs it Change-Id: I4847c4c64604c1fe45b986bdf48d6b68336a1187 24 October 2016, 14:42:18 UTC
788ab25 reduce cache local ports slightly Just In Case. 1024-65535 seems a bit heavy-handed. 1024 itself is technically a "reserved" port and shouldn't be used. 65535 is probably suspicious for breaking an edge case. Also, we make heavy use of ports in the 3xxx range for varnish itself. In the net, this reduces the available ephemeral port count from 64512 to 61534. If that's actually an issue, we have bigger issues (also, the 8x varnish-fe ports should help mitigate this regardless). Bug: T107749 Change-Id: Iea0de3c8ebfd7bd480240821dd77ce7f5b9ffcb9 24 October 2016, 14:38:20 UTC
8e7ef46 tlsproxy: raise worker connection limits, too Bug: T107749 Change-Id: Id15ef81f96027371ff70cf6d72676622e7856386 24 October 2016, 14:38:05 UTC
e23f699 tlsproxy: use 8x FE ports to balance Bug: T107749 Change-Id: I918b0ffe1163e705b11e4e74ca4189cfe8026ae0 24 October 2016, 14:37:44 UTC
ce282f8 Enable role::tcpircbot on tegmen Enabling the final of tegmen's roles Change-Id: I1b9f9a19b4f30cd624df53740ddfa5c0fd153b5e 24 October 2016, 14:11:40 UTC
9344d7c postgis - upgrade to postgis 2.3 This upgrade affests only jessie nodes (maps1*, maps2* and maps-test*). It has already been manually applied and tested on maps1* cluster. Bug: T144763 Change-Id: I30a268466857f472bd9c0560da4b22293bf048ca 24 October 2016, 13:31:07 UTC
06e7492 Revert "Let's disable l10nupdate completely until we have /srv/mediawiki-staging back" This reverts commit 493f0fe7b4d8d17e1ab17612a49a1a2cdce03962. Change-Id: I1ce41cebd4db964ec2dfb41f0f10876bd08a24e3 24 October 2016, 13:20:38 UTC
39570ba check_eth: blacklist docker0 as well Change-Id: I840ceee3ba4970b1a2cfa1f9c54369fab80ab259 24 October 2016, 13:08:11 UTC
f87516e cache frontends: 8x local ports 3120-3127 Bug: T107749 Change-Id: Iee6bf43ef7a3a380f435bf866272da3b8b45cd10 24 October 2016, 13:05:21 UTC
0b5fc17 naggen2: Kill hostextinfo support Nagios has deprecated hostextinfo for some time and newer icinga versions loudly complain when it is used. Remove support for it from naggen2 Change-Id: Iae42ecda3a10d9aebf5a1a55467a01e1c105fb41 24 October 2016, 12:29:30 UTC
19fe855 monitoring::host: default to $main_ipaddress On servers where docker is installed, docker0 will be selected by the 'ipaddress' fact and this return a wrong result. Change-Id: Ib750a1366256ffdafb6e0fec553b909d234e938b 24 October 2016, 12:02:16 UTC
1ab6af5 nrpe: use main_ipaddress, not the ipaddress fact On servers where docker is installed, docker0 will be selected by the 'ipaddress' fact and this return a wrong result. Bug: T147181 Change-Id: I2af2f2cd3a80832bf1532482984077a389d3a749 24 October 2016, 11:57:55 UTC
6220513 docker::engine: add dependency of the service on the storage Bug: T147181 Change-Id: I77dc8f71db45c8c48af08c51361fa32563ffb43f 24 October 2016, 09:51:34 UTC
1267bd3 proxysql: Setup dbproxy1011 as a test host for labs::db::proxy dbproxy is in production, the eventual host has to live on labs- support. however, this will allow us to test proxysql without endangering data access. Bug: T148500 Bug: T141097 Change-Id: I348942ceb49fc010724c63121487d71e0cf5255d 24 October 2016, 09:34:40 UTC
b6e761a docker: refactor the storage setup, allow thick pools Since the lvm2 version on debian jessie does not support thin pools, refactor our docker storage configuration into separate profiles, which I intended to do anyways. Bug: T147181 Change-Id: Ic5c1075ff7448dd9751cf596c93bdd1b99b5ef80 24 October 2016, 09:14:01 UTC
7fa013b mediawiki::web: Add ShortUrl support on wikimedia.org docroot sites This is an alternate version of If258a076 using the RewriteRule (that works) instead of ProxyPass (that does not). Bug: T146014 Change-Id: Ib00621ebe715932a9ceeaf7e8bd6494a338087ad 24 October 2016, 08:00:12 UTC
76b48a3 Add user pmiazga to analytics-privatedata-users Bug: T148477 Change-Id: I5e15ec33eb83baa39ab496b99f70734e7ab36fe0 24 October 2016, 07:33:37 UTC
0067bc7 mediawiki::web: use Rewrites for ShortUrl extension In general, ProxyPass and RewriteRule are almost equivalent, and they're surely redundant once both are declared. Actually, given the ProxyPass alone didn't work and ProxyPass directives get processed before RewriteRules one could imagine that this change could fix a few cases. Bug: T146014 Change-Id: Ic2c0769d8d5464ab3058fc673504d10e38fde15e 24 October 2016, 07:25:07 UTC
ae57a8a Revert "apache: Standardise ShortURL config per Giuseppe on If258a076" This reverts commit 7edca169702b0fc03e06fbf8732e3c7ae3c9befd. Change-Id: I567cd1439f22b17a07e37ee995869677536f6d36 24 October 2016, 07:17:57 UTC
24ea738 Add user pmiazga and its related ssh key Piotr Miazga is a new hire. He will need access to deployment and analytics groups, that will be handled on a separate code change. Bug: T148477 Change-Id: If32f799c07b20e6d41f376ab5f1a047e46cf5551 24 October 2016, 07:12:36 UTC
7edca16 apache: Standardise ShortURL config per Giuseppe on If258a076 This issue blocks copying of the config to new VHosts. Change-Id: Iddb794748c8c84036149b68dd2ff2286ae6e3d8f 24 October 2016, 07:07:39 UTC
174eaf4 move kafka1003 to use raid10 with lvm servers should put data in lvm volumes whenever possible T148849 Change-Id: Ibb405e57bd51cbf6c75a425f140d4f31b36f239a 21 October 2016, 22:32:10 UTC
ca8b789 maps::server: move base::firewall to role Move the "base::firewall" from node level to role, because all nodes have it and should have it in the future and it simplifies site.pp. Change-Id: Iec2455ececf663d1f073d1e7640e8314f04abb28 21 October 2016, 21:01:17 UTC
01f3111 maps - swithing traffic to eqiad phase 2 Change-Id: I37e287741e5315bada0ed1502703823a098f9990 21 October 2016, 19:37:11 UTC
72d4c06 setting kafka1003 install params system is identical to kafka1002, uses similar settings T148849 Change-Id: If87f14a7656d344894890411d7f84f3db9ebb75a 21 October 2016, 19:28:50 UTC
ede0a65 maps switching maps traffic to eqiad phase 1 Change-Id: Ic4e8a2a7f2de8ce714fc841ca1e55cdcd3eb8e87 21 October 2016, 19:25:35 UTC
c1f5712 maps: switch backend to eqiad Change-Id: I355edbfef4aa98d558693827f2338e16b9ecb64a 21 October 2016, 19:19:23 UTC
3680c1a kartotherian: define eqiad backend for caches Change-Id: Id230f5351f72145151aa0e496d2b0b5f37fa7480 21 October 2016, 19:18:37 UTC
4d22469 Remove mc1019 from role memcached (new host) This host is new and not ready to be productionized. While we have redis and memcached IPs configured in Hiera it may cause confusion to have a host fully equipped but not in any pool. Bug: T137345 Change-Id: I26164e6cd573613c471c2ab59719c4a94ae0b177 21 October 2016, 16:53:04 UTC
73adc52 wmf-auto-reimage: improve messaging Bug: T148815 Change-Id: I597872c935a84b5fbf3db957775f4e6b9d47d903 21 October 2016, 15:45:28 UTC
355f184 elasticsearch - drop nginx access logs nginx generates ~5GB of access log per day. This is almost only information that is already available by other means (hive, mediawiki logs, ...). It is very unlikely that those logs will ever be needed. Change-Id: Ia6a50bd606f2d015e599ee88e48f367464e46571 21 October 2016, 14:42:58 UTC
2951525 profile::docker::engine: enable memory cgroup Change-Id: Id2c68113e566db101e7e3d01c4fd027022f26b6c 21 October 2016, 14:18:29 UTC
9b11ce2 Add tendril role to tegmen Merging the tendril role to tegmen Change-Id: I0e512c946078c865bfcd1b1b8edda7254393b9cc 21 October 2016, 14:03:13 UTC
c89f092 monitoring: Add the missed *interval calls Add the rest of the *_interval calls Fix for fd00070bce6 and b400cf7b25c74 Change-Id: I734f3abc5a1d8ec612e4e85190bc02f5c2bb1d99 21 October 2016, 13:43:59 UTC
db7c626 icinga: retry_check_interval => retry_interval The directive has changed name in newer versions and the former is deprecated Change-Id: Ie19d6cc4ed6315f56fcc62ffa276e51746ac7b5c 21 October 2016, 13:37:08 UTC
fd00070 icinga: normal_check_interval => check_interval The directive has changed name in newer versions and the former is deprecated Change-Id: I0c429861b54ca5f45fcfc06890d9a892d9aeb69b 21 October 2016, 13:36:39 UTC
b400cf7 profile::docker::engine: fix docker config Change-Id: Ia74d87568a69d16bc70ff9b3fc1177b6282e8789 21 October 2016, 13:33:48 UTC
daa38cf icinga: Kill /etc/icinga/puppet_hostextinfo.cfg With 0007b880cdf0d merged, puppet_hostexinfo is no longer relevant much. Ensure it absent and remove all the usages of it Change-Id: I4d01ca85d8f7b8a1e837bff34af6c3f190d35e14 21 October 2016, 13:30:50 UTC
c96a0b5 Create labs::db::proxy role to load balance and failover replicas Bug: T148500 Bug: T141097 Bug: T148507 Change-Id: I8f7c8b4da37a3f804e1034f337ff5fbced1b6c81 21 October 2016, 12:22:03 UTC
5a89941 puppet-facts-export: remove "trusted" fact That makes the puppet compiler fail. Change-Id: I8ef5a1ad5b3e2268ad94241cb7b6966a7e117e95 21 October 2016, 11:46:33 UTC
f5fe005 proxysql: install mysql-client alongside the proxy for admin proxysql has a mysql interface- even for the administration (not only for the proxying itself). Install the client so it can be administrated from localhost. Also create a root-controled .my.cnf file to the admin connection. Bug: T148500 Change-Id: I489ee9963e2782b8b4c70c8a82f63d09456d3f4e 21 October 2016, 11:35:57 UTC
back to top