Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
d86d607 Guillaume Lederrey 01 March 2017, 12:58:34 UTC relforge: use experimental apt repo to have access to elasticsearch 5 Bug: T159168 Change-Id: I151b388559cea48f1cdd3409689c668471889f83 01 March 2017, 12:58:34 UTC
0ee25ef Guillaume Lederrey 01 March 2017, 11:35:46 UTC elasticsearch: provide elasticsearch 5.x in the repo Once the migration to elasticsearch 5.x is completed, we will move it to our main repo. In the meantime, we need to have elasticsearch 5.x available to specific hosts. Bug: T159168 Change-Id: If0bb4bdaddbeb59f25cc7e3bfea0f506a89e64b6 01 March 2017, 11:35:46 UTC
c765f20 RobH 24 February 2017, 20:00:11 UTC shell access for Shreyas Lakhtakia This patchset includes creation of a new shell user for Shreyas Lakhtakia, and also includes access to 'analytics-privatedata-users' and 'researchers'. Please do NOT merge this patchset unless you have reviewed all the criteria on the phabricator task T158978. This includes a required 3 business day wait (no merge sooner than 2017-03-01) as well as other requirements that must be met before this can go live. Bug:T158978 Change-Id: I042e1e562b0f52ac70c556a2c82b5e7b39843f63 01 March 2017, 09:15:45 UTC
f16483a Giuseppe Lavagetto 01 March 2017, 08:52:45 UTC discovery: add global MW-related entry We also need a global switch for mediawiki to know where the master datacenter is. Change-Id: I54939ee56a354fc4ce4b6ca9bbab66e84d7f9311 01 March 2017, 09:01:04 UTC
7509569 Guillaume Lederrey 01 March 2017, 08:48:08 UTC maps - fix nodejs 6 version Bug: T150354 Change-Id: I7b6d60f1679ae5ab5638ae1efdb10d7eda6693ea 01 March 2017, 08:48:08 UTC
a88555a Reedy 01 March 2017, 00:34:18 UTC Add wikimedia-mirror.dh.bytemark.co.uk to dumps::rsync_clients Change-Id: I66285b812c69146ae7ebefd529ca942fcf493a22 01 March 2017, 08:21:30 UTC
8142a3c Emanuele Rocca 01 March 2017, 08:14:26 UTC varnish: increase check_varnish_expiry_mailbox_lag alerting threshold We haven't observed functional issues for lag values as high as ~1.8M. Further increase check_varnish_expiry_mailbox_lag alerting threshold to 500k, which seems conservative enough and yet would reduce icinga spam. Bug: T145661 Change-Id: Id2dc3443a23c9e4001c33709a630df20f8787674 01 March 2017, 08:14:26 UTC
7b4b4f4 Brandon Black 27 February 2017, 18:36:42 UTC authdns: re-structure prep for discovery This must be deployed in sync with the same structure change in the DNS repo. Bug: T156100 Change-Id: I062f3583e3d2e6bd96d6f5cc991d04ec55c1e8e2 01 March 2017, 02:47:25 UTC
7d25d1a cpettet 01 March 2017, 00:16:17 UTC nova: fullstack test give 480s before failing on creation We are leaking instances at current thresholds which pile up and violate max_pool. We need to track down why they are taking so long infrequently but for now increase so we can get some decent heuristics. Change-Id: I1c9291b85ca263cd0720f38f8478c39feef38b28 01 March 2017, 00:16:17 UTC
7dff957 Paladox 27 February 2017, 22:17:57 UTC Phabricator: Fix phd not starting up after reboot if it was previously stopped If you did systemctl stop phd before reboot, phd would not start after reboot. Also if phd mundanely stopped and you did a reboot thinking that fixed it well it still won't start. This fixes it. The reason why we do =- is because it tells it to ignore any errors that accur during the running command. Bug: T158434 Change-Id: Id4d863934eb6e2406e7e056431f71ccfb589b87d 28 February 2017, 22:32:54 UTC
5d530e3 elukey 24 February 2017, 09:54:29 UTC Remove last settings for mc2001->mc2016 from puppet Note: mc2001->mc2016 have been replaced by mc2019->mc2036. As far as I know mc201[78] never existed (Redis/Memcached configurations supported this fact) so I removed them from host-entries too. Bug: T157675 Change-Id: I779c849309f9f30c851b48bb8ab0f000247f6e3f 28 February 2017, 21:39:24 UTC
204c51e Daniel Zahn 11 February 2017, 01:15:30 UTC contint: drop npm settings for precise Bug: T158652 Change-Id: I82f420e9dfb8ce21ac380568e25e37d43c3f3e14 28 February 2017, 21:21:59 UTC
7dfda6a Daniel Zahn 11 February 2017, 01:17:41 UTC mariadb/prometheus: remove workaround for precise Change-Id: Id8f3d142a995316eb0abdb824c5f8a8e35138154 28 February 2017, 21:18:35 UTC
082cd36 Filippo Giunchedi 28 February 2017, 20:33:40 UTC install_server: add oresrdb2001 Bug: T159207 Change-Id: I7d2275a9f03bf084f929499ae394721512893b89 28 February 2017, 20:35:00 UTC
4ac9045 Paladox 28 February 2017, 15:55:24 UTC Gerrit: only show author and uploader if they are different people Bug: T76291 Change-Id: I96b3183b54843de681e1dec19ca05927681184fe 28 February 2017, 19:18:21 UTC
5dec01a Guillaume Lederrey 24 February 2017, 17:23:19 UTC maps: make version of nodejs configurable To help test the transition to node 6 let's make it configurable. maps-test2004 is the first server used to test this transition Change-Id: Ieec01058fe1230f7a83fd017bed7028802e0bdcb 28 February 2017, 19:14:37 UTC
b8e5941 Alex Monk 25 October 2016, 21:41:51 UTC phabricator: include project creations with policies other than public+all-users Change-Id: I974c8cb86dfbd1aece8462b709e49be18c955619 28 February 2017, 18:57:44 UTC
91a4bd1 Paladox 28 February 2017, 08:45:03 UTC Gerrit: Make gerritbot report the repo in the comment Bug: T159202 Change-Id: Ibeabf9bb578ca037683848bcfa35e625eb19dbaf 28 February 2017, 18:38:34 UTC
340d8d8 Antoine Musso 28 August 2016, 21:12:09 UTC Use rake tasks to run modules spec Abstract the logic to find modules having a /spec/ directory to a new function 'spec_modules' that yields module names. Add a 'spec' namespace, each of its tasks refers to a module having a ./spec directory which makes it easy to run the tests from the root of the repo. Let us drops Dir.chdir and use the same logic for the whole run and individual modules runs. For example to run the tests for the 'aptrepo' module: bundle exec rake spec:aptrepo Change the 'spec' task to no more invoke shell but instead invoke the rake tasks, exceptions are rescued to run all the specs and report failures/exit once all have been run. Follow up https://gerrit.wikimedia.org/r/#/c/282484/ Change-Id: I9a0d5cf9ae96ca1525601e256abab60b60a0372e 28 February 2017, 17:46:41 UTC
b270c4b Antoine Musso 01 July 2016, 12:12:43 UTC Rake helper to run rspec in all modules having specs Add a rake task 'spec' runs 'rake spec' in modules having a Rakefile. Since we had all modules migrated to puppetlabs_spec_helper drop all the cruft related to setting up and tearing down the fixtures directories. Ignore a few modules: mysql: outdated and no more used on Wikimedia production osm postgresql puppetdbquery: needs a ruby package to be added to Rakefile stdlib: severly broken for now wdqs Bug: T78342 Signed-off-by: Antoine Musso <hashar@free.fr> Change-Id: I7bf2fe24c063b686ad826082e735d09b0767670a 28 February 2017, 17:43:26 UTC
c7c4c6c Guillaume Lederrey 28 February 2017, 15:56:51 UTC Give Max Semenik deployment rights for Maps Bug: T158820 Change-Id: If95bbd2fc5b1647cde34c0d395f639697ec2f566 28 February 2017, 17:36:23 UTC
076bfc6 Andrew Otto 28 February 2017, 16:13:46 UTC Add flume-ng to cloudera component whitelist It is a spark dependency Bug: T155726 Change-Id: Idd4380c2d3f04297835c330ef698212fd6e3a9ba 28 February 2017, 16:14:33 UTC
cee98f3 Antoine Musso 27 February 2017, 21:34:46 UTC base/profile: fix spec for base::certificate The base::certificate class has been moved to the profile module but the spec was left behind. Add boiler plate to the profile module so we can run rspec-puppet tests. Move failing spec from base to profile. Drop an extra 'describe' in favor of documenting the 'it': profile::base::certificates should exposes Puppet CA certificate Tie profile to sslcert and wmflib modules in .fixtures.yml. Food for later: given the profile module will end up invoking pretty much every module, instead of setting up fixtures we could point puppet directly to the root /modules and spec will have access to everything. Change-Id: I3bc2fd6c93dba866dff1bc66f92cad669556a008 28 February 2017, 16:02:16 UTC
a52c8b3 Antoine Musso 28 February 2017, 15:50:40 UTC elasticsearch: fix spec for GC settings Java GC settings used to be in /etc/default/elasticsearch they have been moved to /etc/elasticsearch/jvm.options but the spec hasn't been adjusted to reflect the new reality. Change-Id: I8841e7c1943e9f3d22b87e592b1c3be94e6dbfd2 28 February 2017, 15:50:40 UTC
02bcf7e Andrew Otto 15 February 2017, 17:17:57 UTC Configure analytics cluster nodes to use thirdparty/cloudera apt component Bug: T155726 Change-Id: I140fbde9b0cada160ddb3440c2bdc92ae825a4f8 28 February 2017, 13:56:55 UTC
f7dd94a Daniel Zahn 28 February 2017, 01:10:13 UTC prometheus: fix ferm rules for rsync and add IPv6 follow-up fix to Change-Id: Ifb727adc42012a ferm service could not start due to missing whitespace, resulting in: " DNS query for 'bast3001.wikimedia.orgbast3002.wikimedia.org' failed: NXDOMAIN" Merge hosts with a a space in between. Also add ferm rule to allow IPv6 in addition to just IPv4. As v6 is preferred when available this is necessary. Change-Id: I26179f8b4572306e38d91a93826ee78aeb3d13b7 28 February 2017, 01:10:13 UTC
b54ff70 Filippo Giunchedi 04 January 2017, 01:33:31 UTC prometheus: temporary rsync server for metrics migration Serve Prometheus metrics over rsync while migrating to baremetal hardware. Bug: T148408 Change-Id: Ifb727adc42012a5f32a99053c1d71831531105eb 28 February 2017, 00:39:34 UTC
2f4cbda Daniel Zahn 27 February 2017, 19:59:15 UTC install/prometheus: add prometheus::ops to bast3002 After bast3002 has been added to hieradata/esams.yaml and is designated as a prometheus server, ferm rules should have been added and we can add the role as well. We are also keeping it on the old server for the moment. The ultimate switch is just the DNS service name. Bug: T156506 Change-Id: I4bc2fcce0f0b8d953325e74b266909a5edc847d4 28 February 2017, 00:20:22 UTC
a7710ec Daniel Zahn 27 February 2017, 19:57:19 UTC install/bast: move tftp server from bast3001 to bast3002 Since bast3001 is dying, move TFTP server for esams to bast3002. Switch other esams subnets to use it in DHCP config. Remove bast3001 itself from linux-host-entries. Bug: T156506 Change-Id: I0833cb4bee62c6008dad06d1c8363e6a011e4df3 27 February 2017, 21:58:51 UTC
65a5de7 Daniel Zahn 27 February 2017, 19:52:33 UTC ganglia: move esams aggregator from bast3001 to bast3002 ..since bast3001 is dying, move the Ganglia aggregator for esams from bast3001 to bast3002. Bug: T156506 Change-Id: I30f4ba4cfc3ca1ec73ddd11e8eef59a43c18cf3c 27 February 2017, 21:12:27 UTC
5d74085 RobH 27 February 2017, 20:50:35 UTC change hashar's contact entry for command acks updating hashar's contact info to list the same as his login for ack of alarms within his access purview. Bug:T158167 Change-Id: Ic06d1baefda90dc71794885455ac71366b9a2d83 27 February 2017, 20:54:18 UTC
c3f83af Daniel Zahn 27 February 2017, 20:39:38 UTC prometheus: add bast3002 as second esams host Since bast3001 is dying.. add bast3002 as prometheus host for esams. Do this first as it creates the needed ferm firewall rules. Bug: T156506 Change-Id: Ib38ee45260d2a3d75a6b8d69b62577f7c5a2ba49 27 February 2017, 20:39:38 UTC
8e3add4 Daniel Zahn 24 February 2017, 19:37:08 UTC add bast3002 to network constants bast3002 is replacing broken bast3001, add it to network constants for firewall rules and access to bastion hosts. It might be renamed or CNAMed to 3001 once the current 3001 is down, but first it needs to added next to it. Bug: T156506 Change-Id: I41697049fe6e25eb322e966ee37ada8c94417c6c 27 February 2017, 20:07:47 UTC
058c4c4 Federico Leva 26 July 2015, 15:54:57 UTC Redirect wiki.toolserver.org to www.mediawiki.org All the pages were imported with Toolserver: prefix. Smarter redirects can be considered later for actions other than view, etc. Bug: T62220 Change-Id: I687e7e258ead92f397efae80ce300a146b69f004 27 February 2017, 19:23:28 UTC
79e08e5 Paladox 26 February 2017, 21:24:35 UTC Gerrit: Make GerritBot report author of patch and the uploader of patch Bug: T76291 Change-Id: I033fea83c1be36c2425fc6fa3962d5a7523712ba 27 February 2017, 17:49:04 UTC
6d091aa cpettet 27 February 2017, 17:04:07 UTC nova: nova-fullstack.upstart.erb proper variable reference Change-Id: I989fab2be89b4574d456e8993768afac2fb19b38 27 February 2017, 17:06:52 UTC
2ccf643 cpettet 24 February 2017, 15:48:44 UTC nova: monitor for fullstack test daemon * Change max_pool to 3 * Watch for 1 proc of nova-fullstack * bump up creation timeout as we are leaking instances at 180s with sometimes crashes waiting on creation. * use image debian-8.7 * reduce loop for SSH/Puppet * add connect timeout for SSH See instances in flight: OS_TENANT_ID=admin-monitoring openstack server list Change-Id: I616edb424def0011368999ec9a0997d4db7d2a95 27 February 2017, 16:59:16 UTC
795a5fb Erik Bernhardson 17 February 2017, 21:55:27 UTC Remove non-existent setting from apifeatureusage logstash template This setting was removed quite some time ago, looks like perhaps in elasticsearch 0.90. Elasticsearch 5 is more strict than previous versions and now requires all settings to actually exist. As such remove this setting so things continue as expected. One uncertain thing is how this change makes it into elasticsearch. I havn't been able to track down if there is an automated process, or how exactly that happens. If after deploying this patch nothing updates we can use curl to update the template within the eqiad cluster as necessary. Change-Id: Id2c6ee574ca2bfdf671a91a97ceeaa50f0fc788e 27 February 2017, 16:42:55 UTC
9363c18 Filippo Giunchedi 27 February 2017, 16:21:21 UTC lvs: fix icinga hostname for ms-fe in eqiad Change-Id: I40bba7eea28af5d0861ce81a040d1c7f92502d70 27 February 2017, 16:21:21 UTC
0025848 Giuseppe Lavagetto 24 February 2017, 17:40:40 UTC conftool-data: add first discovery objects Bug: T149617 Change-Id: I117e94dd813b5b631da571e7d5123a5671c9ecc9 27 February 2017, 14:43:00 UTC
051eefb Tim Landscheidt 01 December 2016, 15:04:56 UTC labstore: Use explicit groups for file resources Currently, the file resources for /usr/local/sbin/block-for-export and /usr/local/sbin/nfs-mount-manager have no group attributes causing Puppet to take the (numerical) group the source file has on the puppetmaster, i. e. gitpuppet in the case of a newly launched puppetmaster. This change adds explicit group attributes for those file resources. Bug: T152095 Change-Id: I94d170931870be88802a299348e1d0fe962108bd 27 February 2017, 14:24:33 UTC
1700cf7 Manuel Arostegui 20 February 2017, 10:26:18 UTC mariadb: Add gtid_domain_id to s2 Enable gtid_domain_id on s2. After a few days letting it run on s6 It has been running for for weeks on the misc shards so it is time to slowly deploy it on production shards. Bug: T149418 Change-Id: Iacfd9cab8535e34e40e29d3afa9fda3310f9d8f0 27 February 2017, 13:53:04 UTC
b483ca8 Moritz Muehlenhoff 17 February 2017, 14:44:54 UTC Reorder check for timesyncd or ntpd More compact/readable, as suggested by Faidon in 337009 (PS5) Change-Id: Iab17bf50c364d82d9e344b079bd9e2dd77e166fd 27 February 2017, 13:26:25 UTC
e9da17d Faidon Liambotis 24 February 2017, 15:59:38 UTC Kill ubuntu.wikimedia.org legacy hostname Our Ubuntu mirror moved to the more generic mirrors.wikimedia.org in early 2015. All of our internal use cases were migrated long ago, as was Ubuntu's mirror listing. There was plenty of time for users to migrate to the new hostname and those that didn't, realistically won't until the old hostname breaks. Change-Id: I7ef45c8cc3f2096a3193c2278623df62e2fc21f9 27 February 2017, 13:21:03 UTC
aea6903 Giuseppe Lavagetto 24 February 2017, 17:26:22 UTC profile::conftool::client: add default schema This first schema is for just discovery objects tjat will be used by our DNS discovery interface and by MediaWiki to populate ProductionService.php in mediawiki-config. Bug: T149617 Change-Id: Iad7d71115142727e0f748d81e39fb3e8b1d2597a 27 February 2017, 12:47:48 UTC
2fe1fc0 Moritz Muehlenhoff 24 February 2017, 16:08:07 UTC Add consistency check for nda and wmf LDAP groups based on data.yaml Every account in the privileged "wmf" group should be registered in data.yaml with a wikimedia.org address, every member in the "nda" without one Bug: T142836 Change-Id: I6148273bf49b96b844926f6335048cddbce8dc60 27 February 2017, 12:40:54 UTC
bbb88ed Giuseppe Lavagetto 27 February 2017, 12:26:57 UTC cacert::certificates: new cert for etcd Change-Id: I1afcb8f1fcfa6fc175f9e243f588fe161334e14c 27 February 2017, 12:29:41 UTC
202a135 Giuseppe Lavagetto 27 February 2017, 11:37:29 UTC new_wmf_service: fix references to conftool-data Change-Id: I255801e2561b11a6eda66fb5ee3acf7eff178e17 27 February 2017, 11:42:24 UTC
fe2d70c Riccardo Coccioli 26 February 2017, 23:23:25 UTC SSH keys: add new key for myself Change-Id: Ife59762a8944782eb3006cdc0331948bf033aaa9 27 February 2017, 11:39:53 UTC
a2cc780 Giuseppe Lavagetto 27 February 2017, 11:11:47 UTC role::mediawiki::webserver: adapt to new conftool-data structure Change-Id: Iddf2fb5da6b4367ce05efea739a75825e4a1db70 27 February 2017, 11:11:47 UTC
a0ec2de Moritz Muehlenhoff 23 February 2017, 18:16:52 UTC Fix absent check for users which formerly only had LDAP access Change-Id: I7c2213796c9da133d24c736f70ef6499cda1d256 27 February 2017, 10:58:37 UTC
703f310 Giuseppe Lavagetto 27 February 2017, 10:41:56 UTC conftool-data: purge the old directories Change-Id: I43b87c010e017fdc589933eada8565566d0d4857 27 February 2017, 10:41:56 UTC
4ee863e elukey 15 February 2017, 10:03:47 UTC Set maximum JVM heap size for Zookeeper Bug: T157968 Change-Id: I8be06e2bd9152d69c74e56ca063443661c204400 27 February 2017, 10:09:58 UTC
b3e3137 Moritz Muehlenhoff 23 February 2017, 16:26:52 UTC Update email address for Ellery Wulczyn He'll resume work under a volunteer NDA. To be merged after the 24th. Change-Id: I6dca4b78b618872c086a5a8b35b6a2b8f5294364 27 February 2017, 09:34:31 UTC
5d1daaa Moritz Muehlenhoff 27 February 2017, 08:18:53 UTC Remove access credentials for hjiang Change-Id: I318c443b0dc4e0c0c0c32181ecb5f41418e028e6 27 February 2017, 08:18:53 UTC
f4e51c8 Giuseppe Lavagetto 27 February 2017, 07:53:15 UTC role::configcluster: replicate all of eqiad's etcd cluster to codfw Change-Id: I1dcc40c70786d799df8a5de7634f16b8071e064e Note: this is just temporary while we rephase the prefixes everywhere. 27 February 2017, 08:09:27 UTC
6615f0c Manuel Arostegui 27 February 2017, 07:54:35 UTC check_private_data_report: Ignore wmf_checksums This table needs to be ignored on the report Change-Id: Ibb053700a1daf3eb60f54e08a1c2cd68d4445641 27 February 2017, 07:54:35 UTC
acfe6fb Moritz Muehlenhoff 24 February 2017, 08:10:15 UTC Remove absense check from data_test.yaml The cross verification script added in cd2557fbc50ebe79f78b54e2980490c65cf5f749 validates more account features. Remove the absense check from this script since otherwise new features like the tracking of absent users with LDAP-only access need to be covered twice. Also, the check never really worked anyway; the cross-verification script found several absent users which were not correctly tracked. The GID check can be kept since it prevents malformed group changes when adding a new group. Change-Id: I9168c5ab07a4b288ce89c9f31d697435b476bae2 27 February 2017, 07:31:35 UTC
fc78688 Giuseppe Lavagetto 24 February 2017, 17:10:06 UTC conftool-data: convert to new format Change-Id: Iff8acc338127a1d62f411985658473c1724e5352 27 February 2017, 07:27:54 UTC
85ab455 Daniel Zahn 25 February 2017, 00:58:39 UTC annualreport: add X-Frame-Options header to Apache config As recommended by Darian Patrick in T151798#3053857 add X-Frame-Options header with DENY, to prevent click jacking attacks. Bug: T151798 Change-Id: I867f4ed771816fa2f546b96f3ae6dd0f855fb90e 25 February 2017, 01:03:20 UTC
b577a1d andrewbogott 21 February 2017, 02:11:16 UTC Keystonehooks: Sync ldap project groups with keystone project membership Bug: T150091 Change-Id: Ibde67f8dd6c5a4d71a781730e9283b164a3544e4 23 February 2017, 05:14:38 UTC
8f59332 andrewbogott 23 February 2017, 02:23:34 UTC labtest: Update 'admin' project id Now that we enforce the id == name rule for projects, the project id is just 'admin'. Change-Id: I7d3c6ba15c94668a63f0228d90db53e4ab33d70c 23 February 2017, 02:23:34 UTC
f3413b1 Daniel Zahn 24 February 2017, 21:04:20 UTC install: don't use http install method for bast3002 Using http to get the installer did not work on this host, there was an error about "file not found" but it scrolls by really fast and i can't see it on logs so far. Try using the traditional way. Is it correct that bast4001 uses file name "lpxelinux.0" while bast3001 uses file name "pxelinux.0" with both of them using http and jessie? When do you use which file name? Bug: T156506 Change-Id: Ie695944f3d47dcb6c799f7b95c57e492daea96a9 24 February 2017, 21:12:51 UTC
7c91c3e Daniel Zahn 24 February 2017, 20:12:07 UTC dhcp/site: add bast3002 (re-) add the server formerly known as hooft as bast3002 in DHCP config. add to puppet site.pp with the general bastion server roles but not yet ganglia and prometheus. Bug: T156506 Change-Id: I75c69da2731548b8f65c7686827e087b6e4da866 24 February 2017, 20:19:48 UTC
d54790f Moritz Muehlenhoff 24 February 2017, 17:49:57 UTC Extend access for flemmerich and psinger MOUs have been extended by half a year. Change-Id: I2462a7d678b5903eedabc8e5ba67c53c3e81780c 24 February 2017, 17:54:15 UTC
d07e915 Giuseppe Lavagetto 24 February 2017, 16:27:53 UTC role::pybaltest: fix compilation Change-Id: Ic5c08c1e00daf5dea5810eac8873b686700e2530 24 February 2017, 16:27:53 UTC
abf0e49 Faidon Liambotis 22 February 2017, 18:12:20 UTC Add an interface_primary fact Add an "interface_primary" fact that returns the network interface used to reach the default gateway of a system. This is similar in nature to facter 3.6's networking['primary']. This will help with removing the hardcoded interface names all across our tree -- eth0 alone has 264 matches(!) across our puppet tree. This will help with, probably among others: - The potential switch to stretch's predictable network interface names (cf. T158429) - Setting a sensible default for interface::add_ip6_mapped, and in turn enabling that across the fleet post-precise deprecation in a couple of months. While adding this fact, also add the "ipaddress_primary" and "ipaddress6_primary" facts as shortcuts. These do not suffer from the stock "ipaddress"/"ipaddress6" unfortunate shortcomings where they report the first IP found and thus reporting docker0's IP address on hosts running docker (such as copper). Change-Id: I7b1c4b700efedf7f644af83a457b23bcdb130476 24 February 2017, 15:54:45 UTC
b6df739 Giuseppe Lavagetto 24 February 2017, 15:36:21 UTC profile::etcd::replication: also remove the hiera lookup Change-Id: I4d039d73cce05c3cc4129cb09916ce095e32b534 24 February 2017, 15:36:21 UTC
fad9b21 Giuseppe Lavagetto 24 February 2017, 15:33:03 UTC profile::etcd::replication: use passwords::etcd Change-Id: I03360ba8bd8a7aa02436006c0eaca396995fbdbe 24 February 2017, 15:33:03 UTC
32f5573 Giuseppe Lavagetto 24 February 2017, 15:28:54 UTC role::pybaltest: allow using experimental packages Change-Id: I19949c2c523c265c28c6ab83b051d63c81bec45c 24 February 2017, 15:28:54 UTC
682dd3f Giuseppe Lavagetto 23 February 2017, 13:17:08 UTC role::pybaltest: include profile::conftool::master Change-Id: Ia0bc03f41bfbceddb6c82a8df02b0d881d657d7b 24 February 2017, 15:23:41 UTC
d470291 elukey 24 February 2017, 15:18:14 UTC Tune JVM Heap size alarms for Hadoop daemons These alarms are new and need to be tuned properly. For the moment, limiting the scope of the alerts to analytics to avoid spamming ops. Change-Id: I16d7f422698d771accbda3d7390d437f4d18e1e3 24 February 2017, 15:19:20 UTC
699d62f Giuseppe Lavagetto 24 February 2017, 12:35:43 UTC profile::etcd::tlsproxy: use passwords::etcd Change-Id: Ic5df15a983e049f45a06061151dec0c5c8aef516 24 February 2017, 15:15:58 UTC
34f3eb2 Riccardo Coccioli 24 February 2017, 14:44:07 UTC NRPE: fix description for check_dpkg Change-Id: Iab3e9934ae1891911f1504db520d4a314a130400 24 February 2017, 14:44:07 UTC
812a5e7 Riccardo Coccioli 21 February 2017, 18:21:37 UTC Keyholder: add support for ed25519 keys Bug: T158659 Change-Id: Idda95d81df8fd597563b2063dc14b8ff79ee1b89 24 February 2017, 14:08:10 UTC
770674a Riccardo Coccioli 21 February 2017, 15:36:50 UTC Keyholder: fix filter of passwordless keys Bug: T158660 Change-Id: I5371981ae0c1b64345e5fa073c6db97e15c1160d 24 February 2017, 13:57:42 UTC
e1edf8b Giuseppe Lavagetto 23 February 2017, 18:09:34 UTC conftool: remove base class, useless in the refactor Change-Id: I21c92844e32810dd5e88b6dfa8ba9eaf580ab0ff 24 February 2017, 10:41:02 UTC
1742eb7 Emanuele Rocca 21 February 2017, 11:35:55 UTC cache: allow specifying applayer backend probes and probe piwik Introduce preliminary support for specifying applayer backend probes. Add a probe for Piwik. Bug: T154558 Ref: https://varnish-cache.org/docs/4.1/reference/vcl.html#reference-vcl-probes Change-Id: Id9e52ab7e1d7fc712e45bee90990e1a06648e81c 24 February 2017, 10:34:31 UTC
11924c9 Giuseppe Lavagetto 23 February 2017, 17:48:31 UTC role::conftool::master: remove as it is unused Change-Id: If546da315f27441a656be31e28ad97993542aff6 24 February 2017, 10:24:15 UTC
b764ef9 Jcrespo 24 February 2017, 09:45:20 UTC prometheus: Make server-board a featured dashboard This bothers me, I use it a lot. Change-Id: I5753968d4eec4e6847467f412a94f36ea49b97ed 24 February 2017, 09:48:37 UTC
59f5fbb Riccardo Coccioli 22 February 2017, 14:27:09 UTC Cumin: disable urllib3 SubjectAltNameWarning - Temporary fix until T158757 is fixed Bug: T158758 Change-Id: I59bc0f7fc60b8dbbdac58c2ce52c38d22d7ac4f5 24 February 2017, 09:15:24 UTC
99bcdab Riccardo Coccioli 22 February 2017, 14:46:32 UTC Cumin: authorize also cumin masters IPv6 addresses - convert neodymium and sarin IPv6 config to use the mapped IPv6 - update the network constants - use the updated network constants to authorize Cumin masters in the targets - removed obsolete hiera config Bug: T158753 Change-Id: Ia66f1ea8117c0acabdebd62042d01f8e3b3acee0 24 February 2017, 08:10:59 UTC
dcd77a3 Madhumitha Viswanathan 25 January 2017, 23:09:12 UTC labstore: Install package nethogs from jessie-backports Change-Id: I88318b3a399c15b0588052c00fefea22fec389f2 23 February 2017, 23:38:51 UTC
10bc9bc Tim Landscheidt 21 December 2016, 01:47:30 UTC Tools: Fully qualify hostnames This change fully qualifies some hostnames in the "flat" namespace beneath .eqiad.wmflabs. Hostnames should only refer to the project-specific instance, i. e. beneath .tools.eqiad.wmflabs. This is most obvious in the case of role::toollabs::services: Here the parameter $active_host was tested for equality with $::fqdn. However, due to $active_host being "tools-services-01.eqiad.wmflabs" and $::fqdn being "tools-services-01.tools.eqiad.wmflabs", this would have failed if $active_host had not been overwritten at https://wikitech.wikimedia.org/wiki/Hiera:Tools. An exception to this rule are modules/toollabs/files/host_aliases and modules/toollabs/templates/mail-relay.exim4.conf.erb that need to list legacy hostnames. Bug: T153608 Change-Id: I6888bb449bd59bf4c522e3b14d6a38dc2540decd 23 February 2017, 23:10:18 UTC
06c4692 cmjohnson 23 February 2017, 22:34:26 UTC Removing mentions of decom servers strontium Change-Id: Id49679433a3ff778e2a646647d15c96ac465e35a 23 February 2017, 22:36:30 UTC
12fd6e4 andrewbogott 22 February 2017, 12:08:31 UTC Keystone: Don't remove the upstart script for liberty. Change-Id: I7e0c33ca5015d53bac6e29c7b40c067297f04a93 22 February 2017, 12:08:54 UTC
bd53de5 Brandon Black 23 February 2017, 18:20:15 UTC varnish: move applayer be_opts defaulting into template Bug: T134404 Change-Id: Ifc61ffde1e8ebc82c2709f5dc18f350a8bbd9202 23 February 2017, 20:15:37 UTC
1f49c4c Ed Sanders 23 February 2017, 18:51:27 UTC Change pubkey for Ed Sanders Change-Id: I86c6a4d9cce2db32457f081e2314e70354a8cc99 23 February 2017, 20:01:24 UTC
78d7b20 andrewbogott 22 February 2017, 11:20:51 UTC Keystone: define uwsgi services even if not running This is a fixup for 987bff146914e234f8fcadd91e7992ddb3bd3f6b Change-Id: I945df13aa3218cc78ab99e47e4de7fbc05a92c2d 22 February 2017, 11:21:47 UTC
987bff1 andrewbogott 22 February 2017, 10:15:06 UTC Keystone: Go back to using eventlet for Liberty Keystone/uwsgi is just too buggy in Liberty. We'll give it another chance in Mitaka. Bug: T156337 Change-Id: I9ec94feb2c1f3198c1e24efad418342ab12970fa 23 February 2017, 19:36:28 UTC
89c95ae Brandon Black 23 February 2017, 19:03:12 UTC lists: use LE cert for exim (let's try again!) Bug: T154917 Change-Id: I2a1e410a78c145ac6eb3d8af685eb1df2bbd301b 23 February 2017, 19:03:12 UTC
9450b8f Brandon Black 23 February 2017, 19:02:00 UTC LE: chmod +x on key dir, for group read to work Change-Id: I2636dc88d8c3dd7678915800b630e6cb4c810cc5 23 February 2017, 19:02:00 UTC
f87e699 BBlack 23 February 2017, 18:54:16 UTC Revert "lists: use LE cert for exim" This reverts commit 677316aea2352cc5e8183c4604214ca738496ef8. Change-Id: I9dca84e9e522e7d4ea4346d25836073fd6986355 23 February 2017, 18:54:29 UTC
a58dca4 BBlack 23 February 2017, 18:53:55 UTC Revert "Bugfix: group name does not have 4 at the end" This reverts commit 4daa11a62359d6a14bae042098cdae01d5806720. Change-Id: Ibff75196a0e9f27481115a259d6528bbb59bc7b0 23 February 2017, 18:53:55 UTC
4daa11a Brandon Black 23 February 2017, 18:43:20 UTC Bugfix: group name does not have 4 at the end Bug: T154917 Change-Id: Ie138d3370b3ac5aa8045e46b8b5cd56f6d6a6a16 23 February 2017, 18:43:20 UTC
677316a Brandon Black 21 February 2017, 20:07:50 UTC lists: use LE cert for exim Bug: T154917 Change-Id: Iaab0753de365ba3cc8c24fdcaeaa5156759e8149 23 February 2017, 18:27:51 UTC
36e3dce Brandon Black 21 February 2017, 20:05:19 UTC LE: allow non-root key ownership/perms Bug: T154917 Change-Id: I1cc0e9970c1a5e718f11138dd875ea5eae6549b1 23 February 2017, 18:27:51 UTC
c634729 cpettet 23 February 2017, 18:16:43 UTC nodepool: bumps to max-servers and ready nodes Change-Id: Ie13e3638f091e6a7dd0613a8cb98947c979c8117 Bugs: T158320 23 February 2017, 18:24:18 UTC
a8a6452 Guillaume Lederrey 23 February 2017, 17:58:19 UTC elasticsearch: remove memory lock, we do not use swap anyway Bug: T155578 Change-Id: I65f363c6b04e47d6ba0a7244d9bbc7ed092a5940 23 February 2017, 17:59:15 UTC
307ae51 cpettet 23 February 2017, 17:38:57 UTC nova: fullstack test set respawn limits Change-Id: Ie49fda6148d976fd9da8231e963017ada2760105 23 February 2017, 17:40:48 UTC
back to top