https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
78457c8 k8s: Fix another typo while eating hat Change-Id: I1d15f0e6fb8b44ee6269ff0957fdf3e5f69fc6cd 21 March 2017, 00:13:12 UTC
a57c4fb k8s: Fix typo Change-Id: I788a8cecb1255b4a4dfd26782b97ebcc920cdb6f 21 March 2017, 00:09:37 UTC
e966211 Switch phabricator search to codfw Disable writes to elastic in eqiad and enable read/write to codfw with elasticsearch version 5 Change-Id: I120e7b5f2483419689ec6c4fcfdd2ff35893988f 20 March 2017, 23:57:10 UTC
16657b1 tools: Use k8s master profile in role Bug: T158452 Change-Id: I152c9135bbc37882d586cc80781bea4916df2bf0 20 March 2017, 23:55:03 UTC
e6b324b testreduce: Fix bad regexp in parsoid-vd settings file Change-Id: Ie79d5ddf8ca4c9c14066c11283779050b4b1db57 20 March 2017, 23:45:41 UTC
4cbe2be labs: Add openstack::observerenv to all hosts Bug: T160929 Change-Id: Ie4d2c502420f975e7dd539c3b2c448708555ab02 20 March 2017, 23:37:57 UTC
02b5756 Unbreak diffserver by fixing configs * Copy-pasta bug fixed with diffserver.config.js * Update parsoid-vd.settings.js to reflect new visualdiff domain and updated nginx settings for visualdiffs (/diff) Change-Id: I177c66305dbbb60148191a127d2736413bb7de92 20 March 2017, 23:24:32 UTC
7ddbd96 k8s: Make kubernetes master profile flexible enough for tools use Bug: T158452 Change-Id: I1a79db1eb794c39033d266e8dd3e836e9651322a 20 March 2017, 23:22:04 UTC
d9a7259 parsoid tests: Add missing diffserver.systemd.service file Change-Id: Ib610c5fc193e52d72fe7d82c3ef7fd15fec699a3 20 March 2017, 22:54:32 UTC
f7d0d26 tools: Use profile::kubernetes::node for worker role Bug: T158452 Change-Id: I6ad769d0225c434c3b72b30f8b91a1d9d1ec57e4 20 March 2017, 22:53:05 UTC
4c1ed50 Enable diffserver on ruthenium to view visualdiff images * Enable diffserver on ruthenium - Updated the diffserver config to specify the outpur dir - Moved the diffserver config to templates/ from files/ - Updated the visualdiff::server manifest to use the correct template (.config.js.erb instead of .settings.js.erb) - Added a parsoid::diffserver role manifest - Updated ruthenium's entry in site.pp to use the parsoid::diffserver role * Updated the parsoid-testing nginx config - removed stale root dir config lines - enabled serving of the contents of /srv/visualdiff/pngs directory - renamed /vd to /diff as the entry for the diffserver service Change-Id: I6c25404148fce1bf9f09aa86b1a017697175281b 20 March 2017, 22:29:33 UTC
f0008fb Enable mcrypt extension on CI slaves This is required for the upstream version of civicrm-buildkit, which fundraising uses to set up fresh Civi installs for each test. This patch will allow fr-tech to stop using a fork of -buildkit. Mcrypt is deprecated in PHP 7, so we'll see what the Civi folks are planning around that. Change-Id: Id21615d558a17048f008756592fda5674c1b7ec1 20 March 2017, 21:16:00 UTC
89279f4 Keystone policy: Make get/list users permissive It's reasonable for an observer to want to know who's in a project, and in general we're moving towards having open access to get and list calls. Change-Id: Ia5b4681096e0aa2f27ba4daba570439b0252f86f 18 March 2017, 05:43:06 UTC
076d239 discovery: fix hyphen typo in data Change-Id: Ia47c0f8c3495ac0f8e1ee28e9811279a3d420fa6 20 March 2017, 19:30:41 UTC
d8a1802 discovery: add other service names to hieradata Change-Id: If0c6dd9a204eb36dbabfb451c3fb89cd88bc3956 20 March 2017, 19:25:32 UTC
19c478c authdns: add 10/8 to geo map Change-Id: Ibe8ee0fa34268a82f80ed2a47b2278ab10e0a342 20 March 2017, 18:47:08 UTC
8963bc3 openstack::clientlib: require ::openstack::repo Ensure that the correct apt repos are available before installing openstack packages. Change-Id: I29fa2db36f4f66fa09800dd6fd3166aa0b4d7b8c 20 March 2017, 18:12:58 UTC
94846bc Consolidate Performance team's root access Bug: T151065 Change-Id: I1319ba5f9867e4d2fc4240be41f8a17e90d0e20e 20 March 2017, 17:49:07 UTC
b5c0890 Change osm master to be labsdb1007 on configuration Bug: T123731 Change-Id: I1500404e29fb525d7e2a7a88757bbfa10f9179d5 20 March 2017, 17:43:23 UTC
70e2c27 site: add prometheus200[34] Bug: T148408 Change-Id: I3f1a1a715f38a97c1cebcdc83fe4953779813afc 20 March 2017, 17:37:42 UTC
ee92be7 Change the redis slave client_output_buffer_limit Actually do it this time around. f545de3341 was the previous effort and was just changing the wrong file. Bug: T159850 Change-Id: I549fbdfc5963ed5b4fdf7f10c71fdc5f04b08853 20 March 2017, 16:50:00 UTC
e3ee99c statistics/cruncher: Add reportupdater job for edit-beta-features Depends-On: Ib06a6434478c7adc90b5200193e0959e4b825569 Change-Id: Icb57331bbcfe9746c9f9920eeed2284f042416bf 20 March 2017, 15:20:32 UTC
b667a9f fix typo on en wiki dump config Change-Id: I1a22483f08260ea9c2e8727955674590511b3875 20 March 2017, 14:53:42 UTC
f545de3 redis: Increase the hard limit for slave output buffer As per T159850, we want to increase the hard limit for slaves connecting to a redis master to 2G instead of the current 512MB as some of our .rdb files are larger than 512MB. The 2GB size was chosen arbitrarily as being larger by > 50% than the usual .rbd files. A change in the soft limit is not handled in this commit as we have no indication yet it causes a problem Bug: T159850 Change-Id: I3168dffcfff86c947d358d7d7ff9552a5fb593d2 20 March 2017, 14:30:14 UTC
706796d contint: remove Precise related switches Clean out contint modules from any conditional switches that were used to support Precise. All Jenkins jobs have been migrated and the instances will be deleted on March 20th 2017. Bug: T158652 Change-Id: Ibf647d711d2b6cb3021b4e160cb2ccea20de0243 20 March 2017, 11:25:22 UTC
fd2b78f monitoring::host: Add the parents attribute Add the parents attribute, allowing to specify the nagios parents attribute, giving us the ability to capture a basic view of the network topology Change-Id: I5fc196822b54756ff33a7f7b0b57556c47640aad 20 March 2017, 11:25:03 UTC
5f38337 osm: convert labsdb1006 into an osm slave of labsdb1007 Bug: T157359 Change-Id: I9ba851d8a0c2c65d46c4a7edffca0fca6eea0b83 20 March 2017, 11:11:31 UTC
376967e wdqs - wdqs package has been replaced by scap configuration Change-Id: I8346ba3a7f052b8cf4abd3c0857c9de97588b0e9 20 March 2017, 10:51:46 UTC
2d2cc4c wdqs - remove trebuchet based deployment Now that all wdqs servers have moved to scap 3, trebuchet isn't used anymore. Change-Id: Ifc7143794f34763c3c09ab5aa0541522ec90a83b 20 March 2017, 10:44:52 UTC
3f73e0c Amend "Revert "nagios: Specify a parents host relationship"" Only merge this when we have our networking devices in icinga This amends commit 0d4c9bbfd541e3e62781ecb68fabd47956f38a26 to fix a minor bug. Change-Id: I65abe9d32b7342a08002c9efdfcbb790f5f1e7c9 20 March 2017, 09:17:53 UTC
1abb60d netops: Remove domain names from iciga definitions No other device in these manifests is specified by it's FQDN so follow the rule and specify the devices by their hostname only. They are anyway guaranteed to be unique. This also helps with https://gerrit.wikimedia.org/r/#/c/343036/ Change-Id: I9151ef965f77f212967f843aadf761bc4ff5a35f 20 March 2017, 09:09:39 UTC
3df7408 dumps: Redesign progress report page It mostly used Wikimedia's living style guide and transparency report Bug: T155697 Change-Id: I03f1786ef2298b9a2a87db37c5f03e54e91a74fc 19 March 2017, 10:08:11 UTC
335fa99 keep fewer xml/sql dumps Change-Id: Ied22991abe50f91f62c0b288341d3981abf4f05c 19 March 2017, 08:07:51 UTC
92e6fce nfs-exportd: Handle missing projects Previously a failure to access a project caused an exception that unwound everything; now we catch that case, log a warning, and continue. Bug: T160818 Change-Id: Icbc5dd54ab7300188ec40e3dd3380f56066ac901 18 March 2017, 20:09:59 UTC
14a10cc nfs-exportd: flake8 fixes Change-Id: I1a4273d0ac7a182003a583142e2464cc68edd691 18 March 2017, 20:09:05 UTC
9d60152 nfs-exportd: Properly collect IPs for volume exports. Also, exclude exports for projects with no instances associated. Bug: T160818 Change-Id: I69936b8fce85a5ecc1862fdf1a252120480b0c78 18 March 2017, 20:06:33 UTC
67e1a86 nfs-exportd: remove sugarcrm project from all exports Change-Id: I45af753c4e7464d7adc069b1aeccd3a7b54b3cc3 18 March 2017, 19:42:03 UTC
cc7163f labstore: Track PAWS user storage too with Diamond Bug: T160114 Change-Id: Ia441a8d46cc00a0f972f21d83cc9d3836a7264cf 17 March 2017, 22:22:29 UTC
4f74f3d decom ms-fe2001 through ms-fe2004 removing all puppet references per lifecycle checklist. Bug:T159413 Change-Id: I3c314b10e5022ba3916a7758d0c2644bfb59ca9f 17 March 2017, 20:22:04 UTC
686a84a Add DROP privileges to testreduce databases to ssastry Bug: T160691 Change-Id: I448b6d23de6690dc17f68b3334932b5dfda16825 17 March 2017, 16:05:28 UTC
b263236 service::uwsgi: Remove the log-route directives These log route directives are redundant anyway since by default everything is sent to all loggers, plus they seem to cause some issues with the routing of log messages Change-Id: Ib8bf7a6d6e3dc09acb832e205547051f38ad6275 17 March 2017, 15:36:11 UTC
b5870f2 service: Send uwsgi logs to logstash Bug: T149010 Change-Id: I2405b6ca2ce3a7a6837837c65780e80b96f4cd72 17 March 2017, 15:02:05 UTC
b960a79 wdqs - make nginx ports configureable Change-Id: I5711fa5944c2b9fd2fdab9ec291e199b75fa794b 17 March 2017, 14:37:50 UTC
9aeb7cd Nova fullstack test: Switch to a testing image, temporarily The debian-jessie-fullstack-test tests some changes that might speed up VM launch, or might break things. The image is private, owned by the admin-monitoring project so should be visible to the test but otherwise invisible to users. Change-Id: I5f513d3bbd93b7eb8cafd1cffce73b5aa76a4c0f 17 March 2017, 14:06:13 UTC
5b8ad80 contint: drop a hack for python PIL We had a hack for PIL to find libraries at some hardcoded paths introduced by: 0638bc9a65 - contint: PIL 1.1.7 expects libs in /usr/lib UploadWizard-API jobs are no more running. Hence remove the puppet hack. Bug: T101550 Change-Id: Ie94f3c8e5ab2e6fb6960f34000e34744f8486ee5 17 March 2017, 14:00:17 UTC
84a286f akosiaris dot files: Enable vim dark background Some how I managed to disable this at some point, re-enable Change-Id: I58dc24e9a029bd4893a95de0d24a927d0e9e22a1 17 March 2017, 13:39:00 UTC
dcbc522 etcd: etcd-backup.py needs a type set for argparse 'keep' etcd-backup.py test /root/ --keep 1 > TypeError: unsupported operand type(s) for -: 'int' and 'str' Change-Id: Icb2e931806227b619542d1e2823f0e96ec6529ff 17 March 2017, 12:30:31 UTC
ff423bd toolschecker: remove precise checks The precise OGE exec nodes are being shut down on 2017-03-14. Once they are down there will be no need to validate that jobs can be started on them. * remove toolchecker definitions * remove icinga monitoring job Bug: T94792 Change-Id: I682ea213afafab6221fcea36f1ec7c0044d34ae2 17 March 2017, 12:25:16 UTC
b9550d4 osm: Change osm master rsync check with different parameter order Bug: T157359 Change-Id: Ie5bd6e66044b1b809c5e91bcfc9f359b60905434 17 March 2017, 12:14:15 UTC
5a8d4f6 Add delay compress to upstart's logrotate We currently see a lot of spam to root@ due to .log.1 files already present while rotating. This makes logrotate upset because it expects to find .log.1.gz with the 'compress', so it stops rotating and report back the issue. This might be due to copytruncate, but I would like to try to add 'delaycompress' to see if next logrotate runs will auto-correct the issue by themselves (finding .log.1 and zipping it). Bug: T132324 Change-Id: I4de92a23bfe6ce6cf5c367951ad6de6c76060a60 17 March 2017, 11:05:30 UTC
fe535d0 Add private LVS IPs in network::subnets data While not used anywhere directly from this structure add them for completeness Change-Id: I4d91182afb799d707eeabad6c694b02625a6c188 17 March 2017, 10:53:14 UTC
7e0621d cache_text varnishtest: 'Vary: Cookie' and Non-Session cookies Bug: T154954 Change-Id: I64d7b57d51b4eeb5c314f931d138d6f74557f863 17 March 2017, 10:27:51 UTC
47d257b Also add --turn-volunteer mode for Phabricator offboarding It's not strictly needed (since all groups are retained), but better for consistency. Change-Id: I766da3da971c90ee3cb33058353857acf8a1397f 17 March 2017, 09:11:20 UTC
c713d8e wdqs - remove unneeded puppet dependency wdqs and wdqs::gui classes don't actually have any intrisic dependency Change-Id: Iee2ba979882a03fd6644666bab031208a61c4735 17 March 2017, 09:06:57 UTC
92fd383 Fix --turn-volunteer mode in LDAP offboarding script New volunteer should be added to cn=nda, not readded to cn=wmf... Also fix separator when editing multiple DNs and add a hint towards the password. Change-Id: Iddfddc7995f2e98331bbf5fe1f092ee22da3b076 17 March 2017, 09:02:49 UTC
1a7ea7d role::configcluster: temporary fix for etcd replication Change-Id: I396790e537f4310cf4427724194b1de3bb54203c 17 March 2017, 08:49:35 UTC
a75da98 Change email address for Wes Moran Moving to nda group, signing of volunteer NDA pending. Change-Id: I8a0e8c3b8db0b96eb89db3b0f785a1d6ea61d06d 17 March 2017, 07:34:09 UTC
84ef02b Update ruthenium nginx conf to handle updated parsoid test domains * Split single server block into separate server blocks, one each for parsoid-rt-tests and parsoid-vd-tests. * Retained the legacy parsoid-tests domain to default to parsoid-rt-tests for now. Bug: T159995 Change-Id: Iddace17e3ef8a2afc6daad28ef2e546874517b4b 17 March 2017, 00:07:58 UTC
6980fe6 RT: convert to profile/role-model RT (Request Tracker): Convert puppet code to profile/role-structure. Change-Id: Id8c2d00fadaf06be84b8f5253ea2421b982767f4 16 March 2017, 23:14:15 UTC
5377682 microsites: convert to profile/role-structure These are the roles for misc. static websites used on bromine, a ganeti VM with Apache. Convert code to profile/role-structure and follow the new Puppet coding style on https://wikitech.wikimedia.org/wiki/Puppet_coding#Profiles Change-Id: Id29e32021e41fbff4ac6e3dfe7618a3d09fde720 16 March 2017, 22:07:45 UTC
980e124 Enable (optional) Cassandra client encryption in RESTBase production Bug: T111113 Change-Id: I383dcba4d688c3b0934e45af122556d0d7115af1 16 March 2017, 21:15:19 UTC
f170806 labstore: add dumps mount for osmit project Change-Id: I3e0388ad1d31c86408d56992b799718906d92b50 Bugs: T156586 16 March 2017, 21:05:18 UTC
92544e7 tor: convert to profile/role-structure Convert one more role to new profile/role structure as described on https://wikitech.wikimedia.org/wiki/Puppet_coding. This was an easier one than others and compiler shows it's a no-op. Change-Id: Idd8b446d95c9dd9edf494fc8408e3dc7e3768def 16 March 2017, 20:33:52 UTC
96cff70 admin: Add ssh key on new machine for Yuvi Change-Id: Ib5cd33cec780c2d1be29a0bca081b249fc4c2273 16 March 2017, 19:49:38 UTC
cf56069 install_server: tweak prometheus partman recipe for baremetal Use a 'placeholder' LV to keep the root LV at its defined space and allocate the remaining VG space. Puppet will take care of removing the LV and replacing it with smaller LVs. Bug: T148408 Change-Id: Ibcfb19e594141e692a6178dc2a307feead1700c4 16 March 2017, 18:49:56 UTC
1e81536 mariadb: clear build related files The module used to be in a standalone repository and thus had specific cruft at its root which are all test/dev related. Remove them since they are superseeded by the same material at the root of the repository. Tested by running checks against the whole repository: bundle exec rake syntax bundle exec rake puppetlint Change-Id: I7be086351585e422414aba889a2df9d0d95692d3 16 March 2017, 15:30:08 UTC
0d4c9bb Revert "nagios: Specify a parents host relationship" We don't have our switches in our icinga config yet, so this actually breaks the configuration. Need first to populate them, then merge this once more. This reverts commit 178d9a3061622b8bec2e7411063d358258a6a768. Change-Id: I86f833e3b2ece54cb6c1a7122fd70b0cb347ac8e 16 March 2017, 11:39:07 UTC
178d9a3 nagios: Specify a parents host relationship Specify a parents relationship for nagios hosts. The premise is to have fewer alerts for hosts when a directly attached networking equipment misbehaves causing issues. For now just rely on lldppeer_eth0 fact as a PoC, which should also cover for > 50% of hosts easily, but leave a comment for later improvements Change-Id: Ie3cb1e0ea55a8349a45bbf7b9e9a3b33d7d71399 16 March 2017, 11:00:34 UTC
4749609 cache: different parity for start/end ip_local_port_range values The kernel emits this warning on cache machines: ip_local_port_range: prefer different parity for start/end values This commit reduces the number of available ports from 61535 to 61534 to make sure it's even as advised. Ref: http://lists.openwall.net/netdev/2015/05/27/180 Change-Id: I79b4193ede3eb31fd74c450e51e84437ea56ea0a 16 March 2017, 10:44:13 UTC
f3709e6 Install python-phabricator module Needed for offboarding script. Change-Id: Ia209415005e8ffe9418ff8d3d14a81bddc1a9f67 16 March 2017, 10:21:15 UTC
937ec6d Cumin: update config to new layout Bug: T160621 Change-Id: I173657a037f75fe97bc08f9378d1e8a6d35dc208 16 March 2017, 10:02:56 UTC
813e790 It's "partner" sync_icinga_state.sh.erb (typo fix) Change partnerip to partner Change-Id: I5f8bf33e49ea9064ddeab617ac11ffd36dd7deb5 16 March 2017, 09:59:38 UTC
0f8a730 Set up sync for icinga state between hosts To increase the availability of our active/passive icinga installations we would love to have the state of the icinga hosts synced between them. While there are ways of achieving that via nagios APIs like the Livestatus API we haven't yet migrated our infrastructure to something that supports these. So set up a poor man's sync of the state files between our hosts via rsync. It's a unidirectional sync between 2 peers for now. The direction of the syncing is controlled by a hiera flag called passive. Set this for einsteinium and tegmen respectively Change-Id: Ic8331c6b774905e3b5bd4ee37f5d19f9510aa7b9 16 March 2017, 09:54:18 UTC
8a97c17 prometheus: set the correct owner/group for generated snmp config Change-Id: I3d4642ca722cb15c8f61bd5fb0f60052bf7a9889 16 March 2017, 09:40:08 UTC
74a3d73 Update puppet-lint gem to 2.0.2 The puppet-lint gem release is currently at 2.1.1 and we are still using 1.1.0. Version 2.0.0 and above has at least 1 fix we currently want, namely PR #362 fixed in commit https://github.com/rodjek/puppet-lint/commit/b3025bc438f12f26cda8381d9de7645d59ab97e8 Perform a slow upgrade path to 2.0.2 first Change-Id: Idd8161c0fa308bc515354e70f46a8bb7d924852d 16 March 2017, 08:56:23 UTC
fd40698 rm manifests/microsites/peopleweb/migration.pp This class was just used temporarily for a migration. Similar to lists::migration (Change-Id: I65ff7731977e0), do not keep it around just in case it might be used again in the future. Change-Id: I886598bab913e6e83a410b4c6b4d652469de521a 15 March 2017, 22:34:03 UTC
23b8f41 Use empty 'ca' directive, not 'cert' Bug: T111113 Change-Id: I4305a26fb484fd55ed69f48720219feabcf9c410 15 March 2017, 21:03:49 UTC
486ee04 gerrit: rm role class gerrit::migration This class was just used temporarily for a migration. Similar to lists::migration (Change-Id: I65ff7731977e0), do not keep it around just in case it might be used again in the future. Change-Id: I974460e29577292babaa087d90d2daac11c2dacf 15 March 2017, 20:31:41 UTC
d168332 Move db1067 from s2 to s1 as a db1057 replacement Bug: T160435 Change-Id: I84aaf055b729ae23bde4fcf156a8121a3496513d 15 March 2017, 20:24:12 UTC
e2fd385 maps - increase postgresql track_activity_query_size to 16384 This improves our ability to investigate slow queries. See phab task for more details. Bug: T160209 Change-Id: I3f8cc96231e6c9764fcfb3142dd93977ca24cdf5 15 March 2017, 20:21:43 UTC
8fae54a Cassandra TLS configuration for RESTBase Also configures Staging to use /dev/null as a cert, which results in an empty Buffer object being passed to the driver. This enables encryption without certificate-based authentication (which is OK, we use password auth). Bug: T111113 Change-Id: I8e7348cd39cf62cac66305c6f29defdaa1341668 15 March 2017, 20:13:03 UTC
735418b Remove role::lists:migration Not used anywhere anymore, we 've migrated a long time ago, removing it. Change-Id: I65ff7731977e07b4b1d1e2563d6a4e048ffb6502 15 March 2017, 19:41:56 UTC
c67df6c varnish/misc: add parsoid-rt-tests (was: rename parsoid-tests) This was originally: "As requested on ticket, after adding a new subdomain parsoid-vd-tests, also rename the previous "parsoid-tests" to "parsoid-rt-tests", but in a separate change from the former." Now it is: "Add parsoid-rt-tests just like parsoid-vd-tests in I0c2155127f6c75." because: Subramanya Sastry: "Let us keep the parsoid-tests domain for a little bit while we identify out all references to it and update docs and wikis pages. Dzahn: "yes, that is why i changed it from "rename parsoid-tests to parsoid-rt-tests" to just "add the 2 new names and remove the old one later". " [dns] Bug: T159995 Change-Id: I0c2155127f6c75e33befd3d90582f6e4850389d9 15 March 2017, 19:01:25 UTC
8e8e72f varnish/misc: add parsoid-vd-tests -> ruthenium As requested on ticket, add a new subdomain "parsoid-vd-tests" and point it to the same backend ruthenium as the existing "parsoid-tests". Bug: T159995 Change-Id: I7eb7e9310ecad5fb19312294dae6d63b60879312 15 March 2017, 18:49:31 UTC
4928bb5 Remove integration/* repos from trebuchet Most of these are deployed directly via git::clone, some aren't deployed at all anymore. In any case, they aren't being deployed by Trebuchet After this lands, can remove the entire /srv/deployment/integration directory tree from tin & mira Change-Id: I5bc2832ba5bbaa7990a617f73bc9d5d0db933740 15 March 2017, 17:57:22 UTC
d7f9933 prometheus: python3 octal syntax Change-Id: Ifac207f048834450939ed46df78da4b5341cd8df 15 March 2017, 17:34:55 UTC
5e8e865 prometheus: fix file permissions and servertech template Bug: T148541 Change-Id: Ic2e6171c3a75ef457ac43d41e5bf4340569cc4f1 15 March 2017, 17:27:56 UTC
ddd6cd3 tools: Set k8s service IP range to new range Bug: T152399 Change-Id: I0c3df6d2e46c71a08cb498b40ccb22b164bfb8c2 15 March 2017, 17:23:56 UTC
570e719 tools: Allow readonly access to all namespace objects This isn't private information, and seems to be required for helm to work properly Change-Id: I5f634da42b53c076ee3f95c646a5945b8c2d8d09 15 March 2017, 17:23:56 UTC
28b823f elasticsearch - no need to use swap Bug: T158884 Change-Id: I7160c74746da6d8835a897fa1d067b9c26f99926 15 March 2017, 15:53:55 UTC
e27135a Add AQS Beta configuration to deployment-prep This change specifies the aqs hosts directly in puppet (previously only in Wikitech). It also sets the cassandra default consistency to localOne as in prod. Change-Id: Iaf9bb12a76e20cb3b72f811189e3b10c625479fd 15 March 2017, 15:44:00 UTC
4da60de elasticsearch - statsd plugin isn't used anymore metrics are now collected via diamond Change-Id: I70b9715d7ea638d3645395468a0b8338858d0951 15 March 2017, 15:19:32 UTC
96544c1 Fix cassandra seeds for deployment-prep Change-Id: Ibb3ec3969ad4b44a159897ff8dab785a2d96c56e 15 March 2017, 14:24:45 UTC
9d528b0 Add support for Phabricator offboarding to offboarding script Same logic as for LDAP groups, by default only privileged projects are removed, but there's also an option to prune a user from all projects. This needs a separate puppet patch to install python-phabricator, will be added when T160408 is resolved. Bug: T142825 Change-Id: I2554e73b48732380f56bf4bcb3425cadb7bbf08d 15 March 2017, 13:45:44 UTC
d93b9ca Update Cassandra jmx_exporter config path in deployment-prep Bug: T155120 Change-Id: I70045a3b26f484c0d175083e8609b894776eeec0 15 March 2017, 13:27:51 UTC
319d87c Add a delay in LDAP memberof rewrite script to cope with replication Replication occurs every minute, so if we rewrite the group directly after another, this isn't noticed by the replication host. Bug: T142817 Change-Id: If9bdd2e246dcc4b04aee1c4bcd1e223a7f0f850c 15 March 2017, 13:22:10 UTC
d02de91 Update prometheus jmx_exporter path in deployment-prep Cassandra fails to start in deployment-prep due to the absence of the jmx_prometheus_javaagent-0.8-*.jar. Bug: T155120 Change-Id: Ibe5fe1dcf6744cccf1746966f91023137ccb3bea 15 March 2017, 13:13:19 UTC
725cea7 wdqs - set heap size for blazegraph from puppet Bug: T160218 Change-Id: I156865b48ad736d5ef7f7e19ee428039de00b073 15 March 2017, 12:58:11 UTC
658c812 prometheus: fix erb yaml indentation Change-Id: Icc82cc4edd2851c7bcdde98649c652cef6395a55 15 March 2017, 12:47:13 UTC
66dbfce Add network::monitor role Bug: T148541 Change-Id: I5149d27c4a57a5ab0ab17e85f7479803e18dffc4 15 March 2017, 12:18:14 UTC
back to top