https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
3bb5deb ores/otrs/package_builder: Linting changes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: I7720660c061588c30a4daed22e67966da1493801 01 February 2017, 08:20:43 UTC
4e9f212 Add aqs1008-a to the AQS Cassandra cluster Bug: T155654 Change-Id: I05b89d12cc164c566d09296977c9b732275376ff 01 February 2017, 07:27:33 UTC
9658f35 Remove aaron from logstash-roots I've written a script to run consistency checks on group memberships in the WMF cluster. Remove Aaron from logstash-roots since he has cluster- wide root access anyway. Bug: T142836 Change-Id: I6c7bcce816510e024bc0ac1367c2f2278c505317 01 February 2017, 04:21:38 UTC
2093f50 Remove aaron from contint-users I've written a script to run consistency checks on group memberships in the WMF cluster. Remove aaron from contint-users since he has cluster- wide server access anyway. Bug: T142836 Change-Id: I7cf7dda97b28d883d7d65c002f69f5573952c37a 01 February 2017, 04:14:55 UTC
f1dc558 installserver::nginx: use "do_acme" in Hiera instead of custom var Instead of using the custom "apt::wikimedia::active-host" variable in Hiera, use the standard "do_acme: false" to disable Letsencrypt cert creation. This should avoid issues with nginx not starting when the LE config snippet is not generated. Change-Id: Ica12256f6ecf1f62c43c1246f357af0ef7ce6131 01 February 2017, 03:18:03 UTC
adbda44 installserver: add install1002/2002 to hiera Add freshly installed install1002/2002 to Hiera to have debdeploy grains and skip the Letsencrypt cert creation. Bug: T156440 Bug: T132757 Change-Id: I2fd03a4866416d7f5fe96991389e2168aa505d09 01 February 2017, 03:00:11 UTC
3a52c5d DHCP: add install1001,install2001 Install 1002 from 1001 and 2002 from 2001, then delete 1001 and 2001. Bug: T156440 Bug: T132757 Change-Id: I6787c7f583830ac35545335529138d89265b81ae 01 February 2017, 02:31:28 UTC
cac0c1f ganglia: display deprecation banner user_header.tpl is automatically included by header.tpl on each page if present. Display a deprecation banner and remember the user's answer for 14 days. Bug: T145659 Change-Id: I30a027171a17989853972bb4e8024d02914e3dad 01 February 2017, 00:52:30 UTC
d6ededb deployment: Linting fixes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: If8e28cd43be46ef7490c7835caf8c3d69f4c12b3 01 February 2017, 00:45:23 UTC
0b76412 dnsrecursor: Linting fixes Use full names for class names, as relative names are not allowed in future Puppet versions Bug: T93645 Change-Id: I171637fca05d43c627cb562740897ee003d07747 01 February 2017, 00:40:48 UTC
3ac6719 jupyterhub/keyholder: Linting fixes Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: I0926583dc77d9cd242a03bfa9b4912931808e431 01 February 2017, 00:36:25 UTC
93d2c9b wikimania_scholarships, planet: one line per include, full class names Lint fixes as suggested by Juniorsys. (Change-Id: I31cf5969dc8142d et al) Change-Id: I372b86efbf893a39f40868af33c3a90b4303f5ae 01 February 2017, 00:22:46 UTC
65521bd planet: use one line per include, full class names Lint fixes as suggested by Juniorsys. (Change-Id: I31cf5969dc8142d et al) Change-Id: I12b1e750926c1a84b0ac0716d7f87152c1ef635d 01 February 2017, 00:14:53 UTC
93a6f2e add install1002/2002 to replace 1001/2001 Creating install1002 and install2002 which will be installed as identical VMs with reasoanble disk space. They will be installed using the current install servers and then replace them. Bug: T156440 Bug: T132757 Change-Id: Ia88332f2d939254c11da9171b2879fac2be2a187 31 January 2017, 23:25:16 UTC
62b4b26 Require proper file for rsync-published-datasets cron Change-Id: Ie0657ee3f07d586bb557206204d1613f6868e497 31 January 2017, 22:06:05 UTC
fe9a43d Create /srv/published-datasets on stat* boxes, and hardsync them to analytics.wikimedia.org/datasets Bug: T125854 T132594 Change-Id: I37b11112be6265bcd781abc93d2c5b52c5f105d4 31 January 2017, 21:59:50 UTC
a92c5f1 Add hardsync shell script This uses hardlinks to sync multiple source directory content into a single directory. Bug: T125854 Change-Id: I58fbe3242a5895d288a2170df6226e0cf7cf09a1 31 January 2017, 20:48:02 UTC
c5b959a Revert some of the changes last week to datasets.wm.org - we will cleanup at analytics.wm.org instead Bug: T125854 Change-Id: I9aa2ddcfdcf26fb3e62bd744b4678a9f3cd4555f 31 January 2017, 20:20:19 UTC
881623d planet/pmacct/programdashboard/pybal lint changes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: Ia2508c41d679d4679df86f82146a3e715f8dc29e 31 January 2017, 19:49:01 UTC
22d8465 mariadb: Add TLS support for tendril Bug: T111654 Change-Id: I47c171cb4b8c64f172c037d98d4e0ad16b60d9fd 31 January 2017, 17:16:46 UTC
64265ce Revert "adding icinga cert monitoring for *.corp.wikimedia.org" the initial change broke icinga and cannot resolve directory.corp.wikimedia.org. not sure why yet, reverting and will determine why it wont resolve in the check, but will on the command line, without the host bieng in a downtime state on its config. This reverts commit 5ae578eee66d97d40eb13557362183fbc65e166f. Change-Id: I8d0609720753bf498527c74564b9479233e4ec0a 31 January 2017, 17:06:38 UTC
5ae578e adding icinga cert monitoring for *.corp.wikimedia.org using the directory.corp.wikimedia.org service per Byron's suggestion for a public facing point to monitor this ssl certificate. Change-Id: If18ee070e28461993e8acf94e640f9ed133fb5a1 31 January 2017, 16:43:07 UTC
3476b4a elasticsearch - deploy the same administration scripts on Jessie and Trusty The es-tool script was not deployed on Jessie as we feared some incompatibilities with the version of the python-elasticsearch package available on Jessie. Testing shows that things are broken in the same way on Trusty and Jessie, so no need to have a special case. The part that we use regularly are working correctly. Relying on system packages for python-elasticsearch is problematic anyway as the API of elasticsearch changes over time. We should use a version of python-elasticsearch aligned with the version of elasticsearch that we have installed, or better, remove this dependency and talk directly to elasticsearch. The rewrite of es-tool will take some more time, let's align things first. Bug: T151326 Change-Id: I9c2ae2654c4ec70e3608623b3d4a26885af2f657 31 January 2017, 15:34:06 UTC
116e95c Temporarily increase refined webrequest retention to 90 days This will allow us to have a little more time to compute Fundraising Banner Impressions stats for December. Bug: T155141 Change-Id: I893ee67f9f381ddc1e98c3a4d762a599f305f545 31 January 2017, 15:20:49 UTC
b651d5e sanitarium2: Enable TLS, disable Toku-specific config This is in preparation for a full restart & upgrade. Bug: T111654 Change-Id: Iac6a119b84a0221036ded3672be96f908ae6365c 31 January 2017, 14:24:27 UTC
c391ae6 Also remove springle from Icinga config Change-Id: I7617408cbaeac124ed13418f28d6707a65ed8145 31 January 2017, 14:05:10 UTC
793aa26 elasticsearch - ensure data directory with puppet Default data directory is created by elasticsearch .deb package. If we move data to /srv, the data directory needs to be created. Bug: T151328 Change-Id: Ie11729b6af6215106c4db202267efb7ac16fb6c7 31 January 2017, 13:31:24 UTC
deb7ad0 Remove access credentials for springle He confirmed that he doesn't need access any longer. Change-Id: I341c6a91c0c2a0e21704a123296665628ad8c61d 31 January 2017, 12:43:25 UTC
a2b25b3 prometheus: Linting changes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: Id2c2fbc1a892708a057ce260c3696f517d1b3a73 31 January 2017, 12:13:09 UTC
3f82d4f wdqs - categorize wdqs1003 as a wdqs node in site.pp Bug: T152643 Change-Id: I1e3f3b7cc91b9bb5115d9643b9ac4c618bb1c5c1 31 January 2017, 11:03:58 UTC
5b54541 wdqs - configure new wdqs1003 node As we are moving toward the more standard use of /srv as a data partition, the default data location in the wdqs class has been updated. wdqs100[1-2] are treated as the exceptions, until they are reimaged with the new data location. Bug: T152643 Change-Id: I93ca1b32f8bfe56fb41387e060b8dcd7cf8b12d8 31 January 2017, 09:29:43 UTC
5555690 Revert "Keystone: Turn on caching of tokens and catalog" This didn't fix the one thing I wanted it to fix, and who the hell knows what else it might break... tonight keystone seemed to be handing expired or invalid tokens over to nova-api. This reverts commit 03f55287c8ee09f0f19d405f0a5dd63dcbe025d4. Change-Id: I38ee1c37a142fa1df7fab110d8b45ea2e8d2ca38 31 January 2017, 03:59:43 UTC
852b182 decom db2015 old db host being decommissioned Bug:T149102 Change-Id: I8adae574ab7ba16f9d97cd1c577452c1ac469375 31 January 2017, 00:02:02 UTC
ddff9b8 Scap: Bump version to 3.5.1-1 Update scap version and modify config for new version. Bug: T127762 Change-Id: I015350dca1ffc7ee5746d587c8370d428383af35 30 January 2017, 20:45:25 UTC
b61b14b admin: fix log file perms for dc-ops on jessie This admin group is supposed to have access to syslog, (just that until recently installservers (carbon) were on precise so the "syslog" line did the trick there. Now that install1001/2001 are installservers on jessie and have systemd that doesn't work there. So to fix this regression, add the standard journalctl line we use in many other admin groups as well. Otherwise it means papaul can't do things such as debug DHCP issues when installing servers and it slows us down. Do not remove the old line just yet until carbon is gone for real. Bug: T156529 Change-Id: I437f534326146b84941dc62764fca05b087c2537 30 January 2017, 19:02:54 UTC
87bfc35 labs: Fix novaproxy not working when use_ssl is false Change-Id: I952c49924c0aa6d2967423c9976cbdfde9a87894 30 January 2017, 18:30:54 UTC
f21ce59 Tools: Disable automatic backups of aptly repositories Currently Puppet usually hits the timeout in puppet-run on tools-services-01 because backing up the aptly repositories to NFS takes an immense amount of time. On the other hand, the backups on every Puppet run are of no true value as meaningful changes to the repositories only happen once per weeks or months, and in those cases it is easy to manually trigger a backup. Thus this change disables the automatic backups of aptly repositories. Bug: T150726 Change-Id: I6e06e9e2e4c4be5b3f6555c22c0bb36181675318 30 January 2017, 15:23:37 UTC
85cd775 Add aqs1007 to AQS's conftool data Bug: T155654 Change-Id: I17d8eb73e3aaa76d9755bbb4825af179e9a5bb90 30 January 2017, 15:02:16 UTC
8da5703 maps - increase replication frequency to each minute on maps-test cluster We have a hard to reproduce bug related to OSM synchronization (T145534). Increasing the sync frequency might help reproduce the bug more often and help understand (and fix) it. Note: when deploying this, the state file (/srv/osmosis/state.txt) needs to be updated accordingly with minutely state.txt (eg. https://planet.openstreetmap.org/replication/minute/002/295/440.state.txt). Bug: T145534 Change-Id: Iee5e10a3644d8a6585e72347b86af748b4cf8aa9 30 January 2017, 13:56:02 UTC
94666b0 Remove elukey from analytics-admins I've written a script to run consistency checks on group memberships in the WMF cluster. Remove elukey from analytics-admins since he has cluster- wide full sudo anyway. Bug: T142836 Change-Id: I66851b03d010286e89770176d76dc12a8005477b 30 January 2017, 13:40:29 UTC
71f3adf ores::redis: Enable diamond collector Enable the diamond collector for redis in the ORES redis environment. That should allow us to create graph to monitor the databases more closely Change-Id: Idf752db74219df64ad892a23cf4e25ef7cdb42ad 30 January 2017, 12:26:06 UTC
fe81792 More email addresses Change-Id: I7f41368b0e7429f28647c63fd115d8f796f342ac 30 January 2017, 11:40:03 UTC
c7fd39d Turn off centralauth table dumps. Bug: T153633 Change-Id: Idc2b085c33f2d76c67fec32a965d4da368226385 30 January 2017, 10:56:22 UTC
4ba86fd cache: remove varnish_version4 from hiera and salt We have been running Varnish 4 for a while now, no reason to specify the version in hiera/salt. Change-Id: I539fc29f634bd4d3a9b3e092f9d6eca23d54d80e 30 January 2017, 10:40:04 UTC
b5ca759 Revert "Remove broken Thumbor IP throttling from configuration" This reverts commit 82e128d167dc4b563236faf95226a28e11a620c8. Change-Id: I851705e4fd97a0d0fc7680f9df4e5317ea9f5d33 Depends-On: Id2c3cd2800e632e10974cdf189c3f627b3eb5d37 30 January 2017, 09:48:45 UTC
c4a746c Enable AQS aqs1007-b cassandra instance Bug: T155654 Change-Id: I0eae04930d8d3e0cd8ffae2d86c1df531576d69a 30 January 2017, 09:16:18 UTC
a76d098 Switch app servers in codfw to systemd-timesyncd Test-drive systemd-timesyncd on some selected servers for a month before enabling it in general; already enabled on cp4* and swift servers in esams. Bug: T150257 Change-Id: I0ddb7fba1331eaec2cce2a11f6272bf548028384 30 January 2017, 07:35:51 UTC
c39665b Keystone: Define some stopped services on the spare host uwsgi-keystone-admin and uwsgi-keystone-public services are referred to in varions refresh lines, so they need to be defined on labcontrol1002 even though the services don't run there. Change-Id: Ic49b51ca7c17fa93968918e572d4d74ebc45fc57 27 January 2017, 23:13:10 UTC
016335d aptrepo: add second rsync module for entire /srv/ To also sync things like /srv/junos, /srv/megacli and others that are not inside /srv/wikimedia. The question is if these technically belong in the aptrepo module but at least sync them once before shutting down carbon. Bug: T132757 Change-Id: Ief81c69d8d2c473e6e35ac9efb2a1346e6076e22 27 January 2017, 22:19:26 UTC
31882dc ores:Adds aspell-ro to ores base. Change-Id: Ic06ab72ddb095dc3a3352121e88ce823a7ea318b 27 January 2017, 22:12:26 UTC
a62f64c Keystone: use uwsgi::app instead of service::uwsgi Bug: T156337 Change-Id: I6285d053eb1c445a9d8feb7a3f65058dd65ea7b3 27 January 2017, 21:40:45 UTC
56d79f2 ssl: delete stream.wikimedia.org cert This cert has expired in 2016 and stream.wikimedia.org now resolves to misc-web varnish, so this should not be used anymore. openssl x509 -noout -dates < stream.wikimedia.org.crt notBefore=Jun 23 00:00:00 2014 GMT notAfter=Jun 27 12:00:00 2016 GMT Bug: T134361 Bug: T155524 Change-Id: I4136168a21e7fd1013ced88c397db130dee0d7c5 27 January 2017, 19:35:26 UTC
03f5528 Keystone: Turn on caching of tokens and catalog Bug: T156337 Change-Id: If9677640253afc8d856ad4888c7808c5f14e2635 27 January 2017, 17:22:02 UTC
e620086 Two more email addresses for ISI Foundation researchers Also move to organisational email addresses instead. Change-Id: Ia027f168ae323465b1930b9772fb99be09223b3c 27 January 2017, 16:27:01 UTC
5038439 Two more researchers Change-Id: I7c390f3a2831a6624496df089b28f502f8adc21e 27 January 2017, 16:09:55 UTC
28c1ddb Two special cases; account expiry dates for research fellows Change-Id: Ib9553f7bd90d49485befe860ed8f238a5dc7e9a8 27 January 2017, 15:55:00 UTC
d2566a3 More email addresses Change-Id: Id3acd9ce21de75b08bb1596b0ca6ffd2b45904c1 27 January 2017, 15:39:23 UTC
35b63e0 Add more researchers (email and expiries) Change-Id: I1bb8bf9183ea4197aaa204022b9826941d4af9e1 27 January 2017, 14:52:54 UTC
27119b9 Text VCL: consolidate mobile hostname rewrite regex Extend the mobile hostname rewrite regex to work with all hostnames, not only language-specific ones such as en.m.wikipedia.org. The two cases left out are m.mediawiki.org and m.wikidata.org, which currently need www in the rewritten hostname. Bug: T155504 Change-Id: I5fcb334639c4b7bbb6ab82704cfd3d543b21af4c 27 January 2017, 14:41:34 UTC
86a20e9 Add more email addresses and account expiration dates Change-Id: Icdb64139d5cd79d571662e045bd3816223cfd8eb 27 January 2017, 14:29:36 UTC
f767240 DHCP: Add DHCP entries for mc2019-mc2036 Bug:T155755 Change-Id: Iccad560a18199ae849d713f7fe9e5366155cc269 27 January 2017, 14:16:12 UTC
3dfa92b labs: remove keystone alerts Clearly noone is paying attention to them: $ egrep -c '(has roles in every|has only observer|admin and observer)' icinga.log* icinga.log:1555 icinga.log.1:3108 icinga.log.2:2790 icinga.log.3:2277 icinga.log.4:2774 icinga.log.5:3200 icinga.log.6:4471 icinga.log.7:3645 Running the check results in an error once every 20 times or so, with a backtrace that ends with the following error: keystoneauth1.exceptions.connection.ConnectFailure: Unable to establish connection to http://labcontrol1001.wikimedia.org:35357/v3/roles Change-Id: I421fbb11019db3a155217e9fba1130b97a08f95c 27 January 2017, 14:05:09 UTC
4044898 phabricator: Increase phabricator dbs buffer pool It used to be 50% of available memory. Since all MyIsam tables have been migrated to InnoDB, increase the memory usage to the standard for other servers. Usage on the active server is 37GB out of 64, which is a waste of resources. Change-Id: I0a4e0946d2530a1e0fa957258291c1452d4766de 27 January 2017, 13:58:36 UTC
084d02b Provision MediaWiki-Vagrant on Jessie hosts Add support for provisioning MediaWiki-Vagrant on Debian Jessie Labs instances using LXC 2 packages provided via jessie-backports. Bug: T154340 Depends-on: I13f1989070e24127a75addeb538c2be58633dd2a Change-Id: I9b6d53609f28f1f35622ff2a0688059ef4de067f 27 January 2017, 13:25:16 UTC
d92279c k8s: Linting fixes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: Ida3bb09f921c00aca1ced61fc33b8773a9dc3544 27 January 2017, 13:19:57 UTC
87d5809 geowiki module: Lint changes + modes/umask quoting Use full names for class names, as relative names are not allowed in future Puppet versions. Quote mode and umask values. Unquoted mode values in a File resource type in later Puppet versions will generate an error, as will unquoted umask values for Exec resource types. Bug: T93645 Change-Id: Ica9a6038b8a84293cda8dfadf2f3bf2f05a06a23 27 January 2017, 13:19:22 UTC
f959d02 elasticsearch: Lint fixes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: I26001c23a2cf4f2a763b5be407f2d5d04e46555d 27 January 2017, 12:23:28 UTC
ad1a5e7 varnish: stop ensuring libvmod-header is absent vmod_header is provided by the varnish-modules package, which we have been installing since 6295bdfe82f6e893f23d149990e2af333de63461. Since libvmod-header has been removed from the archive on apt.w.o, stop ensuring it's absent. Change-Id: I204dbf053592265415b0381b38cde4e1139bc127 27 January 2017, 09:40:22 UTC
119b25f Add a uptime threshold check to check_leaked_hhvm_threads This workaround is a possible solution to limit false positives caused by Apache Busy Workers to be set to 0 when a graceful restart happens. Change-Id: I50dd1dd71cdfa19e4a4c0edbe50521088da75dd2 27 January 2017, 08:47:40 UTC
4cc93bf toolchecker: Add script to manage toolchecker* services Change-Id: Iae1c38c5abb405b38eac98bad8f75f66eb1874bb 27 January 2017, 03:38:42 UTC
1c6db8a toolchecker: Update path for k8s etcd check Change-Id: Ibd1d12bea6f8ba364bc3b85948e089fe014a4764 27 January 2017, 02:04:03 UTC
5358b1c toolschecker: Fix upstart conf files path Change-Id: I547eb3611a63ccb4c78780c9bc5b5728c6205fd4 27 January 2017, 01:53:04 UTC
4b31d00 toolchecker: Fix directory dependencies Change-Id: I957faaf3ab074d1e5fafdfaeec9aaf4fe9a348ad 27 January 2017, 01:29:51 UTC
1d94bf7 toolschecker: Fix service dependencies Change-Id: I95752b3d5b888efa81212c0480541866ecb38082 27 January 2017, 01:01:08 UTC
a5a0d37 toolschecker: Split each check into a separate uwsgi application Change-Id: I4095763b46b38b3c4e3900cd1b9fcbea43713f9f 27 January 2017, 00:31:37 UTC
34141b6 Testreduce: allow to decide the state of the services * Temporary stop parsoid-vd and parsoid-vd-client services Bug: T156177 Change-Id: I5dab4415739fcda1f5c27b82ef13c0fab9efdc1e 27 January 2017, 00:06:14 UTC
9f91dd0 docker: Linting fixes Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: Ic24d47d92cb9c5d63f5ba298a3728897ae07a3ae 26 January 2017, 23:53:23 UTC
72eac95 monitoring: linting changes Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: I2a9448bb478ddbb5af5b75cd22360c2f79d823d7 26 January 2017, 23:49:08 UTC
baa8a2e jenkins: Linting fixes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: If0b44623322c486eea69f173c65ac5b0ec28b716 26 January 2017, 23:45:40 UTC
df4d55b archiva.w.o converted to le removing the old certificate Bug:T154942 Change-Id: I11813b3e2d6123e8bcd3d85de5b86c400bc18139 26 January 2017, 23:40:10 UTC
12c3996 gerrit/git/graphite: Linting fixes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: Ide7a42c5815dfbd0efa255b0a5c63dc9cf3baaaf 26 January 2017, 23:38:21 UTC
a36ec88 icinga: Linting fixes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: I90a1f30ce6b5f9eb9db317dfbbc8dc6650b158a6 26 January 2017, 23:33:48 UTC
7db2a60 update archiva.w.o to use LE cert 2 of 2 (planned) this patch should set the correct certificate file paths on the archiva.w.o system. the first patch already generated the files in place on the system for reference. Bug:T154942 Change-Id: I9a29c20fbcf798fb9acdcaa410400985ddc07738 26 January 2017, 23:31:38 UTC
f3a67e3 phabricator: Linting changes Use full names for class names, as relative names are not allowed in future Puppet versions Add trailing commas to abide by the Coding Style guidelines Bug: T93645 Change-Id: I817b8454ab8629651d2bb57ddf0a9f4b0c881401 26 January 2017, 23:21:37 UTC
0a02f04 setting archiva.w.o to use le 1 or 2 this patch should generate the challenge file and setup new LE certs in place on the archiva host. it does NOT change the actual certificate path, since doing that before generation will cause a race condition failure. (it tries to restart to create the challenge file, but cannot reference the non-existent LE cert until its been generated.) Bug:T154942 Change-Id: I16f899efd72013f428d54fb1e44b2ad6fd3632a0 26 January 2017, 23:12:18 UTC
1ee435d site.pp, DHCP: remove db1019, db1042 Bug: T149793 Bug: T146265 Change-Id: I6be5d51a99f36887330f1007fb0f1008e8c38c27 26 January 2017, 22:33:46 UTC
ea7138d Icinga: fix contact group membership Bug: T156294 Change-Id: I200dce9194c0e31e6a542fce3f91369fcdf90a12 26 January 2017, 20:48:38 UTC
764e66d etcd: add missing group definition for codfw cluster Bug: T156009 Change-Id: I6b7b3a76848aedb7c3ad24e341bcaf7ffdd165e3 26 January 2017, 20:42:03 UTC
a01aff7 Icinga: fix typo Bug: T156294 Change-Id: I65a16e14d0ca2a768c007fa930f8fc2a4598cf37 26 January 2017, 20:20:57 UTC
e0cfc73 More Krenair access removals Change-Id: I5d3cbfa2aca6d7c07baf9f6f7ac6a19e9b963545 26 January 2017, 19:35:50 UTC
127b10a Remove Krenair's access Change-Id: I7ad20e2b32da79a3d65397cbb3069ca2a182f6a5 26 January 2017, 18:56:47 UTC
e80c63b Fix multiline yaml parsing in eventstreams stream description Somewhere in the rendering of spec.yaml, the multiline description was being put on a single line without quotes, and the second ':' after Schema: was causing a parse error. Change-Id: I035434fdef70155aaac1659491882a7b342bb6d8 26 January 2017, 18:39:31 UTC
1e21ed3 Horizon: Remove more steps from the mitaka instance creation workflow Change-Id: I8b05181c6f92b66d2d0fa404ee127ded046f39e0 26 January 2017, 09:37:44 UTC
785b83c Configure recentchange stream endpoint in EventStreams Bug: T143925 Change-Id: Icc490c328a3fee99aea5448d8aa793c8c67c6c16 26 January 2017, 18:20:28 UTC
ffea918 profile::etcd::tlsproxy: add etcd-like 401 response Change-Id: I96b7ad9d7fd78b3a6a41c406335e138a677156dc 26 January 2017, 17:52:14 UTC
8be9c94 Add aqs1007 to site.pp and bootstrap aqs1007-a This is the first new instance of the aqs100[789] node expansion planned by Analytics. We are going to keep the Cassandra Logical Racks (stated in rack_awereness) equals to the replication factor, so the instances on aqs1007 will get the same rack id as the ones on aqs1004. Since an instance is specified in the aqs1007 per host config in Hiera, the first puppet run will try to bootstrap aqs1007-a. Usually this step is done in a separate commit for Restbase, because there is no risk that the default instance (configured automatically if no instance is specified) will bootstrap correctly (for example, due to the absence of the SSL certificates in the private repo). In AQS this assumption does not hold, so it is very likely that during the first puppet run the default instance will try to bootstrapif no instance is specified in Hiera. Bug: T155654 Change-Id: Ie35c289970d01a3ebb55c4e15bbb98ea48ed14d4 26 January 2017, 17:42:23 UTC
6bb2fca profile::etcd::tlsproxy: minor fixes Change-Id: Ifdd59c23221a52bc1a029ebd5070fc9d5c884faa 26 January 2017, 17:39:44 UTC
725fad6 profile::etcd: listen on localhost for clients if a TLS proxy is present Change-Id: If9410dedcc03d125edbbf6c9160bfedb2106551f 26 January 2017, 17:24:17 UTC
1ce2d65 icinga/wikitech-static: add contact_group for https monitor Add a new contact group to Icinga called wikitech-static, consisting of admins (IRC bot) and krenair. Use contact group for newly added HTTPS monitoring of wikitech-static for email notifications. Bug: T156294 Change-Id: Ib018d82092b319eb58811015181cd38fe400ed68 26 January 2017, 17:17:28 UTC
45ad436 labtesthorizon: bugfix cache_misc routing Change-Id: Ib0f832754b972e4c1e167bc3e88a14b2ae8d3de6 26 January 2017, 16:37:57 UTC
back to top