https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
a9489a0 admin: add bd808 to cs-roots Bug: T162404 Change-Id: If5be328395ab070a94d3097384d134cbb944ba0f 10 April 2017, 15:39:04 UTC
d1723cf admin: add a group for cloud services roots * With initial role applications Change-Id: I28d028ac7e6203b7f00a11043ff0d2907c232b85 Bug: T162404 10 April 2017, 15:35:47 UTC
d7c5662 Add python3 packages to hadoop workers for ORES in hadoop Change-Id: I6940bc40b0842d5a7ca8fad7413d89452b288c4b 10 April 2017, 15:30:03 UTC
2f7e990 postgresql - cleanup dead code after migration to check-postgres package Bug: T162345 Change-Id: I0d8a3ba02071ff161e8b419180666734f80b886e 10 April 2017, 15:22:17 UTC
a7528a2 RESTBase: Migrate to Scap3 deployment Bug: T116335 Change-Id: Ifac534a05d0f5f8df6effbed8b066e5a44b65224 Depends-On: Ic311e24a74a3fc7ae65c4be2180f816358c1763f 10 April 2017, 15:04:32 UTC
b3ecd17 postgresql - use the check-postgres package for icinga checks This moves replication checks from being time based to being size based. This should work better on cluster which don't see much activity. Bug: T162345 Change-Id: I98dd0bf16a16fb96994e0c7b049a4ae37d059cb6 10 April 2017, 14:26:34 UTC
da98328 Phab: add 90.227.4.251 to ban list This IP is aggressively crawling and not respecting robots.txt Change-Id: I5b98958e9be40ab8a20983a9aefdf0c5ced92e67 10 April 2017, 14:23:08 UTC
6b5f4b1 typos: add (requires_os|os_version)\([^)]*[[:upper:]] As suggested by Hashar on I125315f2ef75fc894924acb to catch uppercase os_version/require_os that are now being standardized to lowercase. Change-Id: Ic232ddda064420fc12e13499eaedf83062a98fbc 10 April 2017, 13:32:53 UTC
399f869 apache: remove precise (and Apache 2.2) support Remove support for Ubuntu precise, not used anymore. Since this was the last distribution to support Apache 2.2, also remove any Apache 2.2 compatibility statements from the module. Change-Id: I640f18bc1eafb1d4cfbaa3577959482340d5026d 10 April 2017, 13:32:04 UTC
373c3e8 mediawiki: kill more precise references The mediawiki module never supported precise and it had a lot of require_os() statements. Get rid of those now that precise is gone. Change-Id: I27f02a04ee58441d4c648c4a129e96af84c0718b 10 April 2017, 13:20:43 UTC
1f64fed postgresql: remove precise support Remove support for Ubuntu precise, not used anymore. Change-Id: Ifc4192fa9cd8f148c8f27e7780565936522c4efc 10 April 2017, 13:14:05 UTC
0f6eb67 wmflib: basic spec for os_version() Make sure os_version() properly matches! Change-Id: I1c21b98dd73bb40ffd7c52e8340e245bf83ceca8 10 April 2017, 13:06:27 UTC
ef6e9a6 wmflib: switch to puppetlabs_spec_helper/rake_tasks Remove our custom cruft in favor of puppetlabs_spec_helper rake task. Change-Id: Ib6583fa6f0e106b5fccc5903b7c3753a2c6f7712 (cherry picked from commit 4fa445f0515fbeffefff5524ae264ece8bb5c280) 10 April 2017, 13:04:51 UTC
f286861 postgresql - replication lag needs to use --output=simple As this is not an Icinga check but a script to send data to prometheus, we need to add the --output=simple option to get only the raw data, and not the Icinga formating. Change-Id: Ia7775cebe2005fe676042f4170040bfeffb368cf 10 April 2017, 13:03:51 UTC
949adba wmflib: multiple os_version changes - Remove Ruby 1.8 compatibility code - Emit a more helpful error message when lsb-release isn't installed - Lowercase distribution names in the code ("Jessie" isn't right) - Emit a warning when a check is performed against an old/obsolete distributions. This will help tracking down dead code across the tree without using error-prone greps. Change-Id: I13e89e4ea8ff042ed2f4a81c5a7489752648d04d 10 April 2017, 13:02:44 UTC
3167e8d Rename apertium-es-ca -> apertium-spa-cat Bug: T161511 Change-Id: Idb468fbe56303448f71de68fe850240567ec7150 10 April 2017, 12:43:27 UTC
27d8882 postgresql - introduce the check-postgres package for postgres monitoring Our current replication compares replication data from the slaves, which is not as robust as checking xlog position on the master and the slaves. It is also based on time since last transaction, which is less stable than size. The check-postgres package provides a number of checks, including a hot_standby_delay which seems to be a bit more robust than our current check. This first change introduce the check-postgres package and use it to publish metric to prometheus. Once we have some feedback from those metrics, we can start using it for alerting as well. Bug: T162345 Change-Id: Ibd156300a05daff4447bcbf1ce64b3a19edadce8 10 April 2017, 12:22:29 UTC
e0422c1 VCL: do not allow empty url when un-proxying This code allowed for the possibility that an incoming request could look like "GET https://foo.com HTTP/1.1", and we'd convert that to req.http.Host = "foo.com" and req.url = "". This change ensures req.url would be "/" in such a case. Change-Id: If0c02e070f0e2803d0fff977dfe3224d232f1d4f 10 April 2017, 12:07:48 UTC
9f201fc tlsproxy: double the response buffer size Bug: T161819 Change-Id: Ieb7e6e343028b41774b4eccc7ce370d2f30b6e0a 10 April 2017, 12:01:42 UTC
ef9a593 etherpad: convert to profile/role structure Change-Id: I7ec9581907bf9bfb29f35694144302e6eb65cb3a 10 April 2017, 10:17:24 UTC
568fe0c Remove role::backup::config This is now unused as it has been replaced by hiera calls in the respective classes, so remove it Change-Id: I3f9beaeb59003ecb856ad1260bab58d436d224fb 10 April 2017, 09:48:44 UTC
8daf0e0 mariadb: Disable trx, sync_binlog for tempdb2001 tempdb2001 is a temporary server that will act as a slave for x1 in codfw until we have the new servers racked. It is not powerful enough to keep up with those two variables enabled, so we need to disable them Bug: T162290 Change-Id: I1e5c8754368659ad89841030a788590bd00f1f0c 10 April 2017, 06:01:19 UTC
0e2fa98 delete netmon::migration class, not needed anymore This was a temporary setup to migrate netmon1001 to jessie. It has done the job and can be removed now. Gerrit2001 was just a random place to temp. store data since it is not in prod yet. Change-Id: I1c77a0f01a3da1cc2e2e723a226df18ae731e83b 07 April 2017, 23:06:50 UTC
e233cee zookeeper: remove precise's package version Change-Id: I390df6231cb30a078c5dab2a251d4b5f219b8c25 07 April 2017, 22:19:04 UTC
2bc1ab8 Revert "jenkins: tweak log permissions" This reverts commit 350837fd75eee349faadfdf0fa07198102be311e. Change-Id: I6f0fc28339e5d89c6cb470914b01639d53c3c682 07 April 2017, 22:04:47 UTC
350837f jenkins: tweak log permissions The Jenkins logs are not readable by others. Make them to belong to the 'wikidev' group so at least mortals can get access to it. Change-Id: I725e6a185f50044188e972d8bea628ca43893d96 07 April 2017, 22:00:35 UTC
2876587 Remove programdashboard module and related hieradata The programdashboard roles and module were never quite completed and are not currently in use by the WikiEd or the Education Program projects. The dashboard runs on a single unmanaged instance in the labs globaleducation project. Change-Id: I9dac36beadfaa13ca1e6e8da5fd0fd6da6006e00 07 April 2017, 21:54:47 UTC
6affdbe ruthenium: increase parsoid-vd clients from 4 to 5 * Should improve test throughput a little. There is enough RAM to support the additional clients. Change-Id: I2232f0965569f26f2a6aa8a2f9311e893afb830e 07 April 2017, 21:07:01 UTC
ed255b8 Link to Code of Conduct from Phabricator's footer ...now that https://phabricator.wikimedia.org/T90908 is resolved. Change-Id: Idc0cbaee1a20eb8be1292391cd5cc92d1b3e96b9 07 April 2017, 21:00:26 UTC
452adff interface: remove precise support Remove support for Ubuntu precise, not used anymore. All supported distributions now support IPv6 tokens. Change-Id: Ib9ef9e40aa884db273a50bb9107f78cf1728fe56 07 April 2017, 20:52:49 UTC
b672ac9 backup: add leading :: in usage example follow-up to Iaa7a5c8b661c0f61cd43 I have standardized on trailing :: but missed this one occurence because it wasn't in a .pp file. It showed up when i uploaded I220aac18603ee1fa98 though, trying to make this a typo. Change-Id: I57cf0ff4fe36ad87b68096b2d21d0a8287fdc340 07 April 2017, 20:34:28 UTC
6757e19 standardize on include ::profile::backup::host standardize on leading :: ~/puppet$ grep -r "include profile::backup::host" * | wc -l 13 ~/puppet$ grep -r "include ::profile::backup::host" * | wc -l 22 changed with: find . -name "*.pp" -print | xargs sed -i 's/include profile::backup::host/include ::profile::backup::host/g' Change-Id: Iaa7a5c8b661c0f61cd43426ea83c83446fa86ba7 07 April 2017, 20:21:54 UTC
e623e0c Revert "Nova dnsmasq: Reduce lease times and ttls by a lot" This solved the problem of leaking IPs, but created a new problem. With this patch in place we are extremely vulnerable to dnsmasq outages, causing instances to lose network connectivity after just a few minutes. This reverts commit d1643abecd32f774c0b5566cbd81bc13c195a24e. Change-Id: I5b8a9185952c6527319220bdf655cb8fd2168f6a 06 April 2017, 16:49:08 UTC
dc085d1 nagios_common: rename cwdent to cdentinger The LDAP user with uid cwdent has sn/cn cdentinger. But for Icinga contact permissions to work it has to match the sn. The contact is also being renamed accordingly in the private repo. Bug: T159564 Change-Id: Iea63b972b78fbd80556051bc55a6235f0f7dc158 07 April 2017, 19:33:53 UTC
c2eacba Fix 404 errors for smokeping cropper Change-Id: I9e58226854c73e9d7e0a8c61f72ccb8e368e299c 07 April 2017, 19:17:34 UTC
73167f5 Adding dhcpd entries for analytics 1058-1068, 1068 mac address is not defined yet. Updating netboot.cfg file for installs T162216 Change-Id: Ie448334526919b21877b8299f3e4de986291976f 07 April 2017, 16:46:18 UTC
692423b Fix role::mediawiki::maintenance backup::host inclusion Turns out role::mediawiki::maintenance was relying on relative inclusion for including backup::host which worked fine because both were under the role hierarchy. With the move of role::backup::host to a profile, this broke, so specify the correct class name Change-Id: Ia9a80cdd8386c246263b23fbf425882815c25fc2 07 April 2017, 16:42:34 UTC
a250816 Include profile::backup::host in respective roles Move the profile inclusion from site.pp to the corresponding roles that need it. This is the final step in the migration from role to profile Change-Id: I44d370980e07f11f24edc2fe95c5f8c343a5ccf2 07 April 2017, 15:22:01 UTC
e535135 Fix typo with role::backup::host s/role/profile/ was missed in 63dd320b9d Change-Id: Iefd7fd6efe315bc01a5a4febe2d6a2b2ad8e9285 07 April 2017, 15:14:14 UTC
8bc5112 Make role::backup::storage a profile Create a new profile profile::backup::storage, use it in role::backup and role::backup::offsite Change-Id: I814ef74d3cce6f486a2b9da0d1bc8c7815d3f6da 07 April 2017, 14:52:01 UTC
34e82c6 Make role::backup::director a profile * Make role::backup::director a profile * Hieraize all the calls to role::backup::config * Add the corresponding hiera keys * Add role::backup as the composing role for the profile Change-Id: I80ad5e5d42cfea645c8aa19fc2c01bf425c12d4f 07 April 2017, 14:52:01 UTC
63dd320 Move role::backup::host into a profile Move the role into a profile, stop using the config class and instead rely on hiera. Hiera keys are set in the nuyaml hierarchy and not the role hierarchy as they dont change per role, so DRY. Amend all the calls to the role class as well Change-Id: I5911a9c8b196df90d8b47784469dea2def5e3dd8 07 April 2017, 14:52:00 UTC
bc1b571 Add explicit Xmx and Xms settings to Hadoop MRHS and Namenode Bug: T159219 Change-Id: Ic8fa2742a6ec70e665cf61feea0e33f4af5325f5 07 April 2017, 13:49:30 UTC
ef7f8a4 osm - remove dead code osm::planet_import had an empty implementation, it is now removed. We can recreate it if we really want to manage import of OSM data with puppet. Since import is a fairly long operation that is done only during the initial setup of an OSM database, it might make more sense to have a script running outside of puppet. Change-Id: Ib7188f01acfddf047c7881ee1b76760416d61649 07 April 2017, 09:24:41 UTC
5ab79b8 lxc: remove precise support Remove support for Ubuntu precise, not used anymore. Change-Id: I6ea88a2731102cff3d03877017a3fc974b6cacc2 06 April 2017, 22:25:04 UTC
d721bf1 Standardize on lowercase os_version/require_os Lowercase (e.g. "debian >= jessie") arguments to os_version/require_os are the norm, but there are a few exceptions. These are annoying in greps and such. Convert everything to lowercase to be harmonious across the tree. Change-Id: I125315f2ef75fc894924acb101d50ae89051744b 06 April 2017, 22:12:16 UTC
5e7eb00 Gerrit: Add log4j.logger.org.apache.sshd.common.keyprovider.FileKeyPairProvider=INFO to log4j The class was renamed upstream in sshd. sshd was recently updated in gerrit. So when we upgrade we need this new class. This is a preparation change. This replaces log4j.logger.org.apache.sshd.common.keyprovider.AbstractFileKeyPairProvider=INFO but that will not be removed until we upgrade to gerrit 2.14. I did this change also upstream in https://gerrit-review.googlesource.com/#/c/101241/ Change-Id: Ia102c8ca47f7876569aab107c2b68e2ea70b479f 06 April 2017, 21:56:22 UTC
af3fb3a shinken (labs): remove yuvi as it is a wikimedia address I hope we readd this shortly but at some personal address. Change-Id: Ifcfd0a2fbcf813c3799e3c3bac0bcf2eafd23ae2 06 April 2017, 21:33:59 UTC
14d7f7a shinken (labs): add andrew Shinken Administrators Change-Id: I619125be5f1721ffae348ed37cb4ebd5fd29fe00 06 April 2017, 21:30:57 UTC
7d8e653 shinken (labs): remove coren as contact tools/inf groups Change-Id: Iff465473fe3ce920e45b8b3772cbda7d0df848cc 06 April 2017, 21:26:44 UTC
d3065a1 shinken (labs): add bdavis as contact tools/inf groups Change-Id: I23df8d795963e428aaa6ba25820c75868a48c4a6 06 April 2017, 21:20:59 UTC
969879b shinken (labs): add madhuvishy as contact tools/inf groups Change-Id: I9867f69e494121d34f590b6fc13a7bf4c80208d2 06 April 2017, 21:15:19 UTC
44ea32d shinken (labs): add chasemp as contact tools/inf groups Change-Id: I1dec798d6edb1dc5ef3d1dfe387deb4a3fc9eae1 06 April 2017, 21:06:42 UTC
2bce4c5 exclude cp1008 from pass_random conditional We currently do this manually here for labs as well via realm conditional. In both cases there are no remote cache backends defined, which makes this fail to compile even though the runtime header condition would never be true in the first place. Change-Id: If28d0c418e74dcd24b87baaacb4aed5a403b619f 06 April 2017, 19:04:19 UTC
4d6764f cp1008 separate app_directors This gives cp1008 its own override for the usual role::cache::text app_directors, specifying all backends as eqiad-only variants, as cp1008 is a special test setup which exists only in eqiad. Change-Id: I72ca62681a5258f39764dd73a3f369d7abe45335 06 April 2017, 19:01:12 UTC
6922c77 [Beta] RESTBase: Set the Cassandra seeds correctly Change-Id: Iff55bc7abe92f1c375d45bcf5d51bcda16202e88 06 April 2017, 16:50:14 UTC
e632d40 Remove remaining configuration for mw20[90-96] Bug: T161488 Change-Id: Ied8acabf1b1ab34a2c687397e3f052b8554febc5 06 April 2017, 16:48:23 UTC
475c8e3 Revert "Temporarily disable the change dispatch cron for testwikidata" Bug: T94416 This reverts commit 5b2c79c70c0b4acb9fa141fd97118e408781eab5. Change-Id: If86271eb894ab8f74237f20177486621c50b36ad 06 April 2017, 16:37:57 UTC
5b75144 cache_misc: noc.wm.o active/active Change-Id: I9980cd2b83576c1b536ea7f1c4396497940c5466 06 April 2017, 16:00:23 UTC
5b2c79c Temporarily disable the change dispatch cron for testwikidata This is just for the deployment and initial testing of the new locking mechanism. This change will be reverted before the deployment window concludes. Bug: T159828 Change-Id: I9368a2a1148acf4ea9d76f152b3aefe268e8ef72 06 April 2017, 15:55:16 UTC
b3028ea Delink new parsoid-vd test runs from updates to parsoid git repo We may not want to start new visual diff test runs with every new parsoid code update since not all parsoid updates affect rendering and fix visual diffs. Rely on an existing feature of testreduce where it requests a test id from a function instead. For this instance on ruthenium, we let the ruthenium branch of the visualdiff git repo to provide this function. In this case, I've added a function to that branch to read this test id from a file. This lets anyone on the Parsing team (without sudo access) to update the relevant code by updating that test id text file. Change-Id: Ib6b27c556ff58082ae3c4c00d2999e86265cec5f 06 April 2017, 15:41:30 UTC
7bd1523 cache_misc: config-master.wm.o active/active Change-Id: Id9e61da161cd04b53d9e7d6dcd74d517b7d038ea 06 April 2017, 15:39:46 UTC
5d2fbe7 Move system::role {'tor::relay': } There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. Name it correctly and add it to the corresponding role Change-Id: I0c594d1dd242dd5e1c5ffabc3cd979067bef066f 06 April 2017, 15:05:11 UTC
e84e405 Remove system::role {'requesttracker::server': } There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. Change-Id: I8a78791279a5e06eb0b0018240791507c1a6a0f8 06 April 2017, 15:04:46 UTC
cc01b30 run-puppet-agent: some tweaks * Add proper option handling including long options * Add option to enable puppet if it was disabled * Raised default number of attempts to 12, added an option to customize the number Change-Id: I12d00dbb83fc662149cab161ae8050a1d37a1b82 06 April 2017, 14:32:58 UTC
43ad8b0 Set Debian Jessie image for analytics100[123] Change-Id: I562179e92852eba2668b5aa44c96ad6cba6baa74 06 April 2017, 14:15:39 UTC
9e6d1b2 Create a separate sysctl configuration for setting conntrack settings Currently connection tracking sysctl settings are configured via /etc/sysctl.d, which is racy; if /etc/sysctl.d is processed before ferm is started (which loads the connection tracking kernel modules which configures the respective sysctl options), the values cannot be set. This will be fixed in a followup commit, which adds a systemd unit which gets started after ferm. This doesn't use the /etc/sysctl.d path used by the sysctl class to avoid confusion (it also wipes all config files not managed via sysctl::parameters). Change-Id: I1313c35aff23d0295b1541baff53f8f447c8d524 06 April 2017, 13:52:46 UTC
a6f6a1b Remove system::role {"profile::redis::slave":} There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. Move the define into the corresponding role and name it correctly Change-Id: I4ff4e5f86ea59c6f9a28f897fbc88fe9d808f901 06 April 2017, 13:43:30 UTC
1e13606 Remove system::role {"profile::redis::${category}":} There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. This system::role is templated and included in 2 roles. Add a correctly named system::role to each of these two Change-Id: I24a4ac453b45e4033a58749fdae9bd3b88840113 06 April 2017, 13:43:13 UTC
1e58974 Remove system::role { 'profile::redis::master':} There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. No role seems to include this class, for now just remove the system::role define and reevaluate the presence of this profile in our tree Change-Id: I3cba5786b006e154541dacdb973a76812afc5db3 06 April 2017, 13:42:59 UTC
860c924 Move system::role { 'role::planet::venus': } There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. This system::role is moved and renamed to role::planet_server Change-Id: I28e3f973cd8aab456edbcdcc3f6b323781e2cd14 06 April 2017, 13:42:42 UTC
a4e8aec Remove webserver_misc_static system::roles These defines are included in profiles classes and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. Remove the following system::role defines * role::microsites::annualreport * role::microsites:endowment * releases * role::bugzilla_static Add: * role::microsites::webserver_misc_static Change-Id: Id5761d7470ae3f02bedc11804a5507d734ac6180 06 April 2017, 13:42:26 UTC
1a00255 Move and rename system::role{ 'role::gerrit::server':} This define is included in profile::gerrit::server profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. This system::role is moved under the corresponding role Change-Id: I18c35f30123b8ca3c8177bfdf27aeb365b965691 06 April 2017, 13:42:10 UTC
bee912d Move and rename system::role{ 'role::elasticsearch::server':} There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. This system::role is moved and renamed under: * role::elasticsearch::beta * role::elasticsearch::cirrus * role::elasticsearch::relforge Change-Id: I04df6b64b3564aec43e97a4f6abbcb791daa7c3e 06 April 2017, 13:41:52 UTC
fa1998f Move and rename system::role{ 'role::docker::builder':} There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. This system::role is moved under role::builder Change-Id: Ida511644ac7f9ce93b3e6f274edf96a0c18d200d 06 April 2017, 13:41:34 UTC
36e9793 Remove system::role { 'conftool-master': } There is no such role. This define is included in a profile class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. This system::role is included in 2 roles, which already have their own system::role entries Change-Id: I596de1a64c634c3d7c21e4c5f0f6c4aa16a72e47 06 April 2017, 13:40:58 UTC
3c7d1c9 Remove system::role {'config-master': } There is no such role. This defines is included in the profile::configmaster class, and using system::role in a profile is clearly wrong naming wise. Moreover, it does not really add any tangible benefit to have all profile classes add motd entries, whereas having a role class add one is useful. This system::role is included only in the puppetmaster::frontend role which already has it's own system::role Change-Id: I8a34743a273f48f1be63fb331e521dcd2bc3a3c8 06 April 2017, 13:40:42 UTC
1b63f70 postgresql - fix publication of postgresql replication lag Change-Id: If94957bef77fae6d57c669c3698dc03c170faed8 06 April 2017, 13:01:26 UTC
437d892 maps - publish postgresql replication lag to prometheus Bug: T162345 Change-Id: Id45c6f7d0ea82318a3f817368422acd8c582c236 06 April 2017, 12:51:32 UTC
e31a143 Add adavenport to absented LDAP users Forgot that in the commit to remove her. Change-Id: Ib57f62a5e96baf152a68a94d0804946f002f2b6f 06 April 2017, 09:57:19 UTC
22f0596 Prepare mw2090->mw2096 for decommission Bug: T161488 Change-Id: I48173523699177f0c79de02e95ae43b287055a47 06 April 2017, 07:15:12 UTC
6b89bd8 site.pp: Add tempdb2001 new host tempdb2001 is a temporary host that will be used in x1 to have redundancy in codfw until we have the new servers deployed and ready to be used Also add it to prometheus as a slave. Bug: T162290 Change-Id: I448e4173e180503e3270c4e12a4b64e88954eaf1 06 April 2017, 07:03:17 UTC
f06e324 vagrant: remove precise support Remove support for Ubuntu precise, not used anymore. Change-Id: Ie377abc168ee1d475a17767ca882d2f4a6847c7e 06 April 2017, 04:07:57 UTC
ceb5713 labs_vagrant: remove precise support Remove support for Ubuntu precise, not used anymore. Change-Id: I46cf50573f48294c546fb8adba46c68f3db12dcb 06 April 2017, 03:57:01 UTC
2353851 Phabricator: Use base:service_unit for aphlict This should be nearly ready to run in production. Bug: T112765 Change-Id: Idf788704f4bf083fab5834563ef329b973dc74fe 06 April 2017, 02:04:07 UTC
b076d45 Gerrit: Disable md5 in ssh This mac is way insecure and most if not everyone should be using at least sha1. Change-Id: Id2614c8a37d7183bbf2f8f9e911592b9de582e5d 06 April 2017, 01:41:21 UTC
83bce29 typos: add 'pupet' and 'puppte' Change-Id: I7f57519eff23fa3baa59504ee92d883b65eb2a77 06 April 2017, 00:08:51 UTC
ce2cc5c DHCP: remove backup4001 as Jeff Green said: "We should remove the DHCP entry altogether. The box that was backup4001 failed and is, afaik, powered down and will be decomissioned. The replacement will be in frack/codfw." Bug: T161904 Change-Id: I5f16c8e291f27cb4ce2d08edf563f37952de0a26 05 April 2017, 23:57:04 UTC
4cf5c91 installserver: remove precise support Strip precise backwards-compatibility statements and the precise-installer. Change-Id: If84cc7bf3786d8d777a46ba923ac05826b0da53b 05 April 2017, 23:33:49 UTC
2000991 Add wikitechstatusconfig for labtest Change-Id: I1b5617869a35c340ae422f96d1febbf3934d6283 05 April 2017, 18:53:05 UTC
8a97e25 update tempdb2001 partitioning set it for the wrong recipe, fixing Bug:T162290 Change-Id: Ib86f171186ed19d2e05c3653e8054a6bd7737409 05 April 2017, 18:28:37 UTC
1b966ce tempdb2001 install parameters updates to install_server for tempdb2001 allocation/setup Bug:T162290 Change-Id: I3561ab02c75e2bcd95efab2d37318d85f1008c6f 05 April 2017, 17:44:36 UTC
e659f0e Keystonehooks: Create and delete sudoer rules in ldap On creation, we add some default, permissive rules. On deletion, we delete all sudo rules and the 'project' record which isn't used for anything but this. Bug: T150091 Change-Id: I89f5be2eeec348063de0a3f9662e30897f6590d7 05 April 2017, 17:27:13 UTC
bede3c4 labs_bootstrapvz: Don't include mlocate or ecryptfs-utils Apparently the first thing puppet does is remove those. Change-Id: Ibb879c089285390d7074449b9903c453427418c7 05 April 2017, 17:18:45 UTC
421cef5 Remove Apache <IfVersion < 2.4> across the tree We don't have and won't have any hosts running Apache < 2.4 anymore. The last hosts to run Apache 2.2 were the precise hosts and now these are gone. All the <IfVersion < 2.4> (and, conversely, the <IfVersion >= 2.4>) statements across the tree are now dead code and are hereby removed. Change-Id: I43de16700f7c6bf2f1d2d26767f4c4dbfcc02ee0 05 April 2017, 17:07:34 UTC
2b988bf Properly default to master database name when slave database not given Bug: T124307 Change-Id: Ic33d2ae0ec5ab2d0181e19b2a9385d7cedbfd870 05 April 2017, 13:21:12 UTC
12ab5be Improvements to eventlogging_sync.sh script - Default to replicating by id if the table has an auto increment id field, otherwise timestamp will be used. - Sane CLI options - -D <cutoff-days> option to not even compare tables where there is no recent data in master - -n options for dry run - allows for testing of script without actually modifying anything - -d for master database name - -s for slave database name TODO: bring back purging? Not sure. Bug: T124307 Change-Id: Ie96e872ebb763ce8398adcedc52a93ff9f16702a 05 April 2017, 13:14:31 UTC
2e79294 elasticsearch - maintenance_hosts is actually already resolved to IPs Change-Id: Icc5cdd491c2af5f6aa1caa2a41fc37152691fe08 05 April 2017, 12:57:06 UTC
45ae515 elasticsearch - ferm hosts need to be space separated, not coma separated Change-Id: I9ce218909c1df6479074cfb794f04ccc5b359c93 05 April 2017, 12:49:33 UTC
b4918a9 elasticsearch - move role::elasticsearch::common to a profile Applying the principles defined in T147718 to the elasticsearch role. Bug: T147718 Change-Id: If8a5f9827e2780f0cff53b1ad6cf6de5e3ccf43b 05 April 2017, 12:44:25 UTC
back to top