https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
2061c4f replace references to RT tickets with Phab ticket numbers ..where possible. (tickets that were not in the "ops-request" or "core-ops" queues in RT have not been imported) Unlike with Bugzilla tickets there is no fixed offset for imported RT tickets. They can be found by using "advanced search" and "rt1234" in the "reference" field. Bug: T165733 Change-Id: I153eb240464cf65763a0f9359e39a85cd46a24f6 13 June 2017, 23:03:09 UTC
9a49203 tweaking dumpsdata partman recipe livehacked tested these changes on dumpsdata1001, now pushing live and reimaging dumpsdata1001 with the automated recipe. Bug:T165173 Change-Id: Id33d725198c1ace1d6e2912b32cfc2596f229138 13 June 2017, 22:27:31 UTC
ff27e98 dumpsdata100[12] new partman recipe new partman recipe, likely will require debugging on bare metal Bug:T165173 Change-Id: Ic03e0d83f25fbc366eaa4c059cb0f83fe2fa0410 13 June 2017, 21:09:43 UTC
9cb8387 VCL: raise ratelimit for RB, exclude labs from limits Bug: T163233 Change-Id: I2dcec75ac9db3abbdbb8058cdb8c00bb580598c3 13 June 2017, 20:46:06 UTC
bf158c1 wikistats: fix group, cron for xml dump, no spam Change-Id: Ic3d727c8896cb37c4857acf427ac4e26e5390386 13 June 2017, 19:14:08 UTC
349453f VCL: do not rate limit requests from IPs in wikimedia_trust The `wikimedia_trust` acl includes all our IPs and excludes labs. Do not rate limit requests from IPs in the acl. Bug: T163233 Change-Id: I131cf2d67bc0bf9ae3105979219168e0e6214456 13 June 2017, 19:06:28 UTC
0d01f35 Adding mac address for analytics1069 T162216 Change-Id: I98d320af54a6673a80677663199f52f2a35968d0 13 June 2017, 18:48:15 UTC
261c55b setting labtestnet2002 and labtestweb2002 partitioning these are dual 1TB machines, so need raid1 not raid10 Bug:T167160 Bug:T167159 Change-Id: If7e7469dadf615e19a94b9369e6fba442a2e02a9 13 June 2017, 18:30:32 UTC
2d5c903 VCL: increase rate limit to 600/60s Our original estimates were based on data from pivot, which is 1/128 sampled. Bump limit to 600/60s. Bug: T163233 Change-Id: Ibec287827f3fd8af22dd4a3b3053c8ca26907f4f 13 June 2017, 18:25:32 UTC
dc68e95 install_server: switch netmon1002 to stretch Since stretch will be released in about 4 days, let's try installing netmon1002 with stretch right away. Bug: T159756 Change-Id: I81bdddf1150302f30dd6003cdb2ce9701a221f4a 13 June 2017, 18:05:03 UTC
b3b6edf webrequest: remove X-Forwarded-For XFF is low-level data which is difficult to correctly interpret, and whose interpretation changes with edge infrastructure changes. We should instead rely on the headers we've decoded at the edge such as X-Client-IP, X-Carrier (aka zero=), X-Real-IP, X-Trusted-Proxy, etc, improving them if necessary. Bug: T118557 Change-Id: I545e58ee017636cf4c75a144e1b7322802936e21 13 June 2017, 17:48:09 UTC
0633245 numa_networking: remove install-time bnx2x stuff As things get more complicated with numa_networking, there's no point trying to maintain that complexity separately in the installer vs just assuming we need an extra reboot post-install. In any case, the driver defaults to num_queues=num_cpus since kernel 3.5 (never just defaults to 1 like the old driver did). Without NUMA this is double the queues we want on HT-enabled hosts, and with NUMA could commonly be up to 4x what we want, but the interface-rps script will still distribute them all intelligently and then things will be more optimal after puppetization->reboot. Change-Id: I39ac31e97eb4e11ea3b7a81b295a213bed0cc6d0 13 June 2017, 17:45:43 UTC
d66eb22 numa_networking: test enable on cp4021 Change-Id: Ia09ae5ddd1138ad56ccac54653951016c272adcf 13 June 2017, 17:45:43 UTC
89b3bb6 numa_networking: support NUMA in tlsproxy nginx config Change-Id: I0079f2d419302fe718efbb58d92b8c495318abe3 13 June 2017, 17:45:43 UTC
3ae4bf0 numa_networking: support NUMA in interface::rps Change-Id: I75978cd6f1344c4c18ecb66b5bec6ecfae22367b 13 June 2017, 17:45:43 UTC
d4fba0f mediawiki: match beta wikidata with production includes Notably missing wikidata redirects Bug: T119536 Change-Id: Ic4ea3855595e104b0ff3881637071a7f8a50d909 13 June 2017, 16:23:48 UTC
fc6a4bc mwgrep: Add --etitle option This allow users to override the default '.*\.(js|css)' pattern with a custom pattern. Especially useful when looking for subpages only with '.*\.js/' for 'Foo.js/en'. Or for anything for both the main message and its translations (e.g. 'Cite ref error.*' to match btoh 'Cite ref error' and 'Cite ref error/nl'. Move registration of --title to after --user/--module to match the order in the documentation. Change-Id: Ie567a52c610b06c33a65ee62ed7b2eb35a061ca4 13 June 2017, 16:04:34 UTC
798c9b0 mwgrep: If --title is set, don't also require '*.js/.css' This allows searching for contents in interface messages by an exact name. There is no need to additionally require the same regex to match. It's wasteful and makes mwgrep also harder to use. mwgrep foo --title 'Something.js' mwgrep foo --title 'Something else' Should both work. Currently the latter doesn't work because it fights the AND condition for .js/css regex on title match. Change-Id: I977ac24cbaacea9cbfcaefe4099018783c9d9b68 13 June 2017, 16:01:53 UTC
d82b9cd VCL: rate limit text-frontend requests Analytics data indicates that 300/60s should cover the full request load for the worst single client IP we can see in the past week (an MSFT IP, likely a Bing crawler). Moreover, our ratelimiting here only applies to cache miss/pass traffic, not cache hits, further adding lots of headroom for normal cases. To err on the side of caution, exempt seemingly-authenticated requests. Bug: T163233 Change-Id: Icb8ceae901a87ff31005e45d5cd0f2d0f41c6e47 13 June 2017, 15:35:35 UTC
003dc00 ms-be2001 through ms-be2012 decom removing remainder of references to hosts Bug:T162785 Change-Id: I5774471fa24bf96bcfef0dcacc49ac3545273889 13 June 2017, 15:25:53 UTC
da0b59e hieradata: a/p for varnish swift_thumbs Bug: T162609 Change-Id: I8184a2eeb300c4ac6cdb171887b214a04451fdc1 13 June 2017, 15:13:06 UTC
dd6e835 hieradata: a/a for varnish swift_thumbs Bug: T162609 Change-Id: I198d282e81f8b7d4605c1e19282cd9c6000a451b 13 June 2017, 15:04:19 UTC
f06af93 hieradata: point varnish upload esams to codfw Test swift 2.10 upgrade in codfw with additional traffic from esams Bug: T162609 Change-Id: I762af83f228c297c472ca2102796ec399a8bb26d 13 June 2017, 14:50:43 UTC
704332a smokeping: s/FRack/frack/ Change-Id: I1c095b64e24309ff810e975753a8e9a3724c25b8 13 June 2017, 14:40:08 UTC
fae4f45 hierata: swift active in codfw only Test traffic on swift 2.10 in codfw Bug: T162609 Change-Id: I07f9469ffae54f7b1d887d2da17bf67185a4a2b3 13 June 2017, 14:14:49 UTC
73328a3 hieradata: swift temporary a/a Bug: T162609 Change-Id: Icf517e3440544b3bdaf29169cf4c15f3d209d760 13 June 2017, 14:11:00 UTC
1dfe4f8 Specify correct hostname in DHCP config Set up kubestagetcd hostnames correctly in the DHCP configuration Change-Id: I84d07c767d47b34cdd4240fbd5bd6f2cba5fc079 13 June 2017, 14:05:22 UTC
9cc36c2 wmf_sink: Bugfixes for proxy cleanup Change-Id: Idf21c9b2611c8772dffc785e050d6667fb774af4 12 June 2017, 22:48:22 UTC
e408245 hieradata: use thumbor.svc for codfw too Until Thumbor is also deployed in codfw Bug: T121388 Change-Id: Id574e94edc4cc320eefe7b45f1fb8dc4d896ad37 13 June 2017, 13:51:21 UTC
3a30947 nodepool: lower min-ready for trusty We only have 13% of builds running on Trusty nowadays. Zuul metric report that we almost never have to wait for a Trusty node. Hence lower the min-ready by one which would get us one more Jessie node. Typically when there are now jobs on Trusty instances. Add link to the Zuul metric Graph which show the time to wait per OS. Change-Id: I1a13e53c04736825d0cd845b81294a6fe05b86eb 13 June 2017, 13:43:15 UTC
3df362f wmfsink: Clean up proxy records for deleted instances. Bug: T163765 Change-Id: I91fa488a20c5f4ad4e24c6ce14513457ceb13b8e 13 June 2017, 13:34:01 UTC
c5c656f numa_networking: add facter data from sysfs Change-Id: I4ae47a8010d8c2e9db3ffee2c4dbce765d98ce02 13 June 2017, 13:30:10 UTC
3055b7c Deploy Thumbor to group1 wikis + mediawiki.org Bug: T167782 Bug: T167793 Change-Id: I5f32476f69071efe8f9a4eb893416cd803ddc37e 13 June 2017, 13:27:28 UTC
30fc023 Fix mediawiki.org container name for Thumbor config Bug: T167782 Change-Id: I6c89dc205ffab90856061fae6a61326900bfe853 13 June 2017, 13:10:43 UTC
e892d1e Deploy Thumbor to group0 wikis These are the group0 wikis with media files. Bug: T167782 Change-Id: Ia83b4ed1bd41ee650cc04c146d3550b3b650c998 13 June 2017, 11:50:43 UTC
707f28b Use ffmpeg from jessie-backports on jessie-based video scalers Previously a custom backport was uploaded to apt.wikimedia.org, but since it's now in jessie-wikimedia, let's use this instead. Bug: T145742 Change-Id: If05a824ff65c9febb4e934cb45c339534f45fdfb 13 June 2017, 11:46:18 UTC
5f70557 Introduce kubestagetcd100{1,2,3} and neon.eqiad.wmnet Add the kubernetes staging cluster's master as well as the 3 nodes for etcd Ship netboot configuration Ship DHCP configuration Add 2 roles for master and etcd in kubernetes staging Ship hiera data for the 2 new roles Bug: T162045 Change-Id: Iad90a10bd711827d5d4af1e22fa0c8b0f06a2a7a 13 June 2017, 11:31:46 UTC
2d890b3 Re-enable Thumbor thumbnail Swift storage This time without a prefix, to hit the same paths MediaWiki used to. Bug: T167783 Change-Id: Ib7e1ab2b00a5038a7611098656499cad0107b51a 13 June 2017, 10:15:26 UTC
900ad24 Disable Thumbor dual-serving and serve testwiki with Thumbor Bug: T167490 Change-Id: Ia943a020b360308fe1d11d8e7ee9ddf8fffc375d 13 June 2017, 09:30:12 UTC
7b3d5c2 role::zookeeper: refactor to multiple profiles The zookeeper_cluster_name variable has been moved from the top level hieradata/eqiad,codfw yaml files to each profile that uses it, namely most of the Analytics infrastructure. To avoid namespace clashing the Hadoop hiera variable has been renamed, waiting for a better solution when all the Hadoop code will be moved to profiles as well. Some old roles have been deleted in favor of a better reuse of the new profile classes. Bug: T114815 Change-Id: If511394ac4a80287dd44f0c89d9f29fcf9477ad1 13 June 2017, 09:23:16 UTC
e8a6f76 base/puppet: add "daemonize = no" to agent config This setting prevents puppet from daemonizing. Tested with a typo like "puppet agent 0tv" as described on T166371 it works and prevents it from running. So instead of adding the monitoring for this, i suggest to add this to the config and prevent it from happening in the first place. https://docs.puppet.com/puppet/latest/man/agent.html "Do not send the process into the background. (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-' prefix for boolean settings on the command line.)" Bug: T166371 Change-Id: Ie3e3a02b193380cddd9d80465fee16d80fe7644f 13 June 2017, 05:21:30 UTC
0ff8a04 wikistats: move dump dir out of define, duplicate declaration Change-Id: Icf3e9b1e306139043f3ac49b99b1592a96dd160f 13 June 2017, 04:01:49 UTC
81f690d wikistats: add cron jobs for XML dumps Bug:T165879 Change-Id: I76c4390342ca8347229e2e781292a3f2f9f54369 13 June 2017, 03:29:46 UTC
0638122 rancid: drop "server" suffix, apply on netmon1002 Apply the rancid role on netmon1002, migrating from netmon1001. Drop the "::server" suffix from the role name. Later this will become a profile and be combined with the other monitoring tool profiles into a single "role netmon_server" or similar. Move the "::standard"-include into rancid role, remove from node level. Bug: T159756 Change-Id: Ic9d39690a79aa748ed594782a9198b722291a1f0 12 June 2017, 21:14:38 UTC
a4b02d4 planet: cleanup en_config.erb Change-Id: I25960b5eb29ca5bfe432c25bf3aae0cc010c59bf 12 June 2017, 20:21:48 UTC
73e9682 system::role: remove leading 'role::' to avoid role-role system::role already adds "role-" to the title but we have many cases where system::role is used with titles like "role::foo", and then we end up with "role-role::foo". In I43a208fdc616e4d3e all these are fixed but as suggested there by Alex, we are additionally adding this regsubst line to avoid getting them again in the future. Change-Id: I5ad03fb1322e88f7a404b022d6da83fbc70796da 12 June 2017, 19:48:30 UTC
c7c2e31 DHCP: Add MAC address for labtestpuppetmaster2001,labtestnet2002 and labtestneutron2002 Bug:T167157 Bug:T167159 Bug:T167160 Change-Id: I7ba4668418d2eb94215ea68e08d629242e3f16f2 12 June 2017, 19:36:03 UTC
f1b0d17 Add partman entries for labtestpuppetmaster2001,labtestneutron2002 and labtestnet2002 Bug:T167157 Bug:T167159 Bug:T167160 Change-Id: Ice54add598e6cb10efb6c013c5b7287f433a1df5 12 June 2017, 18:48:50 UTC
d0bbc87 dnsrecursor: remove duplicate and absented system::role This showed up since I43a208fdc616e4d as a duplicate definition using the same resource title. There already is a system::role for this in the actual role class, this one in the module was already "ensure => absent" (why?) and it should not be in the module. So to fix the conflict, just removing it here. Change-Id: Ib5400b5d6f88a8414428b7399fbca2a76dfd8bc8 12 June 2017, 18:37:33 UTC
fa7b47d fix all the "role-role" in system::roles system::role uses "motd::script { "role-${title}":", which means the word "role" already gets added and we always end up with "role-role-foo" motd scripts. This is supposed to fix that and remove all the duplicate "role-role". All it should influence is the motd's. Done semi-automatically with find | grep | sed. Change-Id: I43a208fdc616e4d3e2ad0c1905252f7f19019b40 12 June 2017, 17:02:22 UTC
1f6c6b8 compiler: Split fact collection from shipping/collation Minimize the effects of the race condition in compiler-update facts where facts collected for a puppetmaster later in the loop would override facts from puppetmasters earlier in the loop by splitting the shipping/collation from the collection. The race is clearly still there but has a way smaller chance of manifesting Change-Id: I252f22a402e5994c8e8e55888be27ed24f3e173e 12 June 2017, 16:53:25 UTC
6ed9c3c pivot: rename unique devices daily endpoint The last_access_uniques dataset has been renamed to unique_devices_per_domain, in order to also support unique_devices_project_wide. This patch renames the pivot endpoint accordingly. Bug: T167043 Change-Id: I3dfb72791c92536a7e4c80536c7c4961836d54be 12 June 2017, 16:31:06 UTC
1dcd41f pivot: rename unique devices daily endpoint The last_access_uniques dataset has been renamed to unique_devices_per_domain, in order to also support unique_devices_project_wide. This patch renames the pivot endpoint accordingly. Bug: T167043 Change-Id: If2b94f7989849b25d15d206e707aaa453e5acd60 12 June 2017, 16:16:37 UTC
1fd05f1 hhvm: force rsyslog config to create log files with www-data perms The current configuration assigns to the hhvm logrotate's config the duty of creating the hhvm error log file with 644 www-data:www-data permissions. In all the situations in which rsyslog needs to push a log to /var/log/hhvm/error.log and the file is not there (most common case if after reimage) then it will use its default perms, namely root:adm. This causes problems when the file needs to be removed by logrotate after 90 days, like cronspam. Bug: T146464 Change-Id: I93d4b79bd10ef4eb60eacb879ed9e4bdaa22f08e 12 June 2017, 14:22:06 UTC
50c1983 Remove references to keystone admin_token As best I can tell we don't use this anywhere and it's a mild security threat. Bug: T165211 Change-Id: Ibf030a5c7cf3d4e9ae6d319d41dd1d7fd0f0ed78 12 June 2017, 13:09:22 UTC
262ff50 contint: install HHVM from main HHVM 3.18 caused segfault for luasandbox and other tests. That has bring CI down T165074 since it got added to the 'main' component. To work around it, we had 3.12 uploaded to 'experimental' and CI instructed to pin HHVM from there. HHVM 3.18 is fine now, so lets get CI nodes to install it from 'main' and remove the temporary puppet code entirely. Bug: T167493 Bug: T165074 Change-Id: I094909dccc69d43f03b69919ee9300713c6c1ea2 12 June 2017, 10:30:24 UTC
35dbd78 MariaDB: temporarily increase limit for space alarm - temporarily increase the limit for the critical space alarm from 95% to 96% to overcome the current usage on parsercache hosts. - it can be converted into a more proper hiera value and set it to different values for the different MariaDB clusters. Bug: T167567 Change-Id: Ib303b2fee815f3398854737f6d2745c84b7d2f64 10 June 2017, 12:03:07 UTC
fbc6d4c Openstack: Added 'dnsleaks.py' script. This hunts and (optionally) kills duplicate and leaked DNS entries. The battle to actually /prevent/ the leaks continues... Change-Id: Iaaf90e5e20fb35257cdfd9b10dd6f1a953f8e152 07 June 2017, 19:27:56 UTC
1d88dd2 designate.conf: Raise query a few more query limits. Change-Id: I2d85218aa366bb21a50f3ad9cea6378dffaaec23 07 June 2017, 17:07:40 UTC
5cfe915 remove dumpsdata100[12] from netboot for testing paritioning woes, setting to go to manual partitioning for testing Change-Id: Iac7f414d1d8e677a2f0473ad66ca1f4dbc714c8f 09 June 2017, 18:08:32 UTC
2827f4b cache: add monitoring of services at the SSL termination level As detailed in the bug, it's pretty unfortunate that we didn't monitor the responses for correctness at the edge layer but just at the application layer, thus depriving us of an important monitoring tool. Bug: T167048 Change-Id: Ie76a4cc9b930bf80fd1a3cac1e50ca69fcac9aa1 09 June 2017, 15:10:12 UTC
71190fa VCL: rate limit wikiScrape with vsthrottle Bug: T163233 Change-Id: Ib7decc6d1f9ab77be009862bfb6861bfd3be173e 09 June 2017, 14:46:05 UTC
4b18563 Update camus config for eventbus topics Change-Id: I12601afe5ec1d753715d28011533c0c48c30c684 09 June 2017, 14:10:14 UTC
ed5077f raid: remove unused aac, twe, zfs We don't use Adaptec AAC RAID, 3ware RAID or Solaris/ZFS anywhere in our fleet, so remove dead code from the check_raid check, the RAID module and the apt packages from our repository. Change-Id: Ibf68879ff5063a791cab461533f1c19a613f0143 09 June 2017, 08:52:07 UTC
3d9ab2d LibreNMS add rancid integration Bug: T164911 Change-Id: I9033e9d2f8d60eea442c8dc6a26204c7b0426f81 09 June 2017, 05:55:32 UTC
ff81f4d Rancid: set configs world readable Bug: T167288 Change-Id: I1a9fcbfcdeef265ee1906fb7b302d116f51e97be 09 June 2017, 05:42:34 UTC
b636dc8 labstore: Fix data interface require clause Change-Id: Ie67e44b9f5d4f352c609cff96fd5815a3f118d4e 08 June 2017, 23:47:34 UTC
e5bb2ac labstore: avoid the hardcoding of eth0/eth1 Instead of hardcoding eth0 and eth1 in a bunch of places, use $monitor_iface (for eth0) and $data_iface (eth1) as parameters to role::labs::nfs::secondary and pass them to included classes as needed. We could use $facts['interface_primary'] for $monitor_iface (instead of eth0), but since we have to hardcode the value for $data_iface, that would be of limited value. Change-Id: I761da8f8d2e07e596c2d81a69d48543dc88ece2a 08 June 2017, 23:23:04 UTC
96c5de1 labstore: use /sbin/tc, not $PATH/tc As this script may (but probably shouldn't!) run interactively and users may have a $PATH that has a directory in which a different tc is present. It also makes this consistent with the rest of the script that uses /sbin/ip etc. Change-Id: I4e680469b3c6cd4cdf990cbf26e1664fcd0e5cb8 08 June 2017, 23:23:04 UTC
02f679e labstore: use the interface_primary fact, not eth0 Don't hardcode eth0 in the traffic shaping script , but use the interface_primary fact instead. Change-Id: Ie34376044316acdf85fc26e3633c80a37f1c315c 08 June 2017, 23:20:54 UTC
7ceadc6 updating recipe for 80% of lvm also adding in auto confirmation like other recipes have to match Change-Id: I52b6810c68a23b1b52797d2f8a19af8228eb91fd 08 June 2017, 23:11:39 UTC
88d9ffb labstore: remove TC=$(which tc) There is some point in doing TC=/sbin/tc and then using $TC (that is, to avoid using the invoking user's $PATH), but little point in doing TC=$(which tc). Remove that and refer to "tc" directly, as it's cleaner. Change-Id: Iec93b4c3f7def911da8e5160f5a9a167907f8e04 08 June 2017, 22:55:48 UTC
bab94ee adding in dumpsdata00[12] install params setting dhcp and partitioning scheme system has hw raid, not sw raid Bug:T165173 Change-Id: I2312edd55fdef3fb869c4d9207e2e31d07a5fbb4 08 June 2017, 22:42:50 UTC
7edc4f3 phabricator: move hiera lookups to parameters Change-Id: If2b2e5b2c3895d55fd56859915b5be53b2338054 08 June 2017, 22:17:24 UTC
a1a97c5 Use Cassandra version that corresponds to what is being tested We are now testing 3.11.0 (not 3.7.3-instaclustr); This will allow us to reenable Puppet and clear the warnings. Bug: T160570 Change-Id: I2cc594d7a1a814c99c5212ee74f89ccaba2aa410 08 June 2017, 21:22:16 UTC
fdc66fa setting kubestage100[12] install params dhcp lease file and partitioning update Bug:T166264 Change-Id: I63a5828a5bee7754fd9f51acb671016ef5a066f7 08 June 2017, 20:01:57 UTC
8904a80 reverting this patchset, as its introduced some errors into our dhcp system and caused it to fail. This reverts commit 63e830682944f7c86209a7e40436faee562907d4. Change-Id: I17a4ce52f2c9607af0a6319a1d101e2d399d8d5f 08 June 2017, 19:50:32 UTC
92cebd0 Fixing a typo in dhcpd file Change-Id: I4ca2f0d4a918134a763bd0b5611843a3995db75b 08 June 2017, 19:38:49 UTC
db48ede Revert "setting install params for kubestage100[12]" dhcp is broken, either from my chage, or the change immediately before it, this will test that out. This reverts commit 029646ab73ceff7b9836c64bef4b4e529fb8abc6. Change-Id: Ic169c99499806b41bc78fddec387c6c26a113107 08 June 2017, 19:28:46 UTC
2fe2163 Designate api: Increase max query limit Change-Id: I7f471c5e6b518af8bfaa05c6f998a2e778429f75 08 June 2017, 19:19:13 UTC
029646a setting install params for kubestage100[12] updating for dhcpd and partitioning Bug:T166264 Change-Id: I1e5f7007a9ebdae6fd1e2e13131d49f7be85eed9 08 June 2017, 19:15:33 UTC
63e8306 Adding mac addresses to dhcpd file for several systems, wtp1025-1046, stat1005-1006, ganeti1005-1008, labvirt1015-1018, dumpsdata1001-1002, kubestage1001-1002, analytics1069 task #'s T165173 T165366 T166264 T165531 T165368 T165520 T162216 T166076 Change-Id: I79ca09f2b8f4557cbd3be00333481b3b7d9bd15d 08 June 2017, 17:50:59 UTC
6db58e2 designate.conf: Replace identity_uri setting We turn out to need this. Also, make sure the hostname for keystone is the actual keystone host and not the designate host. Change-Id: Ia96cccdc5716b024505fe8aa8dc6af6e2dc2a34d 07 June 2017, 08:16:34 UTC
1d673ee Set cron script to dump MediaWiki DB lag times into statsd This reverts commit c41a3b18d93194f5ca20e3e524128122e723e952. Bug: T149210 Change-Id: I09653ad3a1cb45509dfec59b2a30ee43ad9342d4 08 June 2017, 16:09:51 UTC
eb78780 Rancid improvements - Move to GIT - Move to SSH KEY auth - Ignore noisy lines - Hide SNMP community string - Replace : with ; in router.db (v3 change) To be merged after: - Rancid upgraded to 3.x - Rancid stopped - Rancid versioning folder converted to GIT Todo after merge: - Arm ssh key - Test Bug: T167288 Change-Id: I326f6874c08252617de18a1e5235fd86a186d1c8 08 June 2017, 15:39:36 UTC
8ab75f0 rubocop: add smokeping.fcgi to exclusion list Not a Ruby script, misdetected by newer versions of RuboCop. Not a problem in our current version but it's not harmful either. Change-Id: Ife7efc07ee24446c360c501f7832799ec2e9272c 08 June 2017, 14:30:13 UTC
12f3ff4 Revert swapsize_mb/memorysize_mb unstringification Commit I93b536a23edfbc12a13bf81c285be088fef8ae56 incorrectly removed swapsize_mb/memorysize_mb "to_i"s. Turns out this was misguided, as they are strings indeed, and this caused puppet compilation errors on Tools. Bug: T167412 Change-Id: I5ba7c3c1da66ead8585df0f7c5db6b7203e5e2ab 08 June 2017, 14:17:47 UTC
c8e6893 mediawiki: puppet compiler for Tim's redirects DSL This is a mostly-boring adaptation of Tim's refreshDomainRedirects to Ruby. There are some flourishes of Ruby syntax where I really couldn't help myself. When fed redirects.dat as input, the output matches Tim's script in all but comment header. compile_redirects.rb can be used as a Puppet parser function and as a standalone CLI script. For now, use it as a drop-in replacement for refreshDomainRedirects. Change-Id: Id33afbca2a1ba921654cc955d7cc4e5462a61f37 08 June 2017, 13:53:21 UTC
d3dc610 puppetmaster: Set stringify_facts = false Per puppet's documentation stringify_facts = false needs to be set in puppetmasters as well as agents. Specify that in both frontends/backends Change-Id: Ie5d91db410f7aa321d7ec3f67d1924bf3ded1ba4 08 June 2017, 13:46:56 UTC
37b83e8 Remove to_i/Integer from now unstringified facts Now that we have non-stringified facts, processorcount/physicalcorecount etc. are now guaranteed to be integers and don't need to be wrapped with Integer() or converted with to_i. Bug: T166372 Change-Id: I93b536a23edfbc12a13bf81c285be088fef8ae56 08 June 2017, 13:45:49 UTC
3b1faf8 Update nginx submodule to include lint/rubocop fixes Change-Id: I929f1770b2b27552d721198c9f5112d198c4cb78 08 June 2017, 12:25:50 UTC
210f846 Fix another couple instances of RuboCop warnings modules/nagios_common/spec/classes/contacts_spec.rb:4:1: C: Extra empty line detected at block body beginning. modules/nagios_common/spec/classes/contacts_spec.rb:103:1: C: Extra empty line detected at block body end. Change-Id: I3a192a4ce53e575c03a7b3b1e2ef8c3fdeafaea8 08 June 2017, 12:18:35 UTC
4a6bda0 check_puppetrun: fix rubocop warnings Change-Id: Ief274d54ed1277946605debd00e09a79cd7a4ce6 08 June 2017, 09:44:07 UTC
a056de0 Fix whitespace-related Rubocop warnings across the tree Fix: - Extra empty line detected at block body beginning. - Extra blank line detected. - Inconsistent indentation detected. - Operator => should be surrounded by a single space. ...across all Ruby files in the tree. Noop. Change-Id: I8bff4a836f98ce82a4f855333ce77d44287279ea 08 June 2017, 09:43:49 UTC
aee079f nagios_common: basic spec for contacts.cfg Partially cover the fix in 0e144abf44 Change-Id: I6e7402133fb43f06be6ae2742615a046249aa318 08 June 2017, 09:37:08 UTC
81a3503 beta: profile::cassandra::allow_analytics: false deployment-aqs{01,02,03} fail puppet with: Could not find data item profile::cassandra::allow_analytics in any Hiera data file The setting has been introduced in 6da30838ab. It is solely in the hiera 'role' hierarchy, however it is not looked up on deployment-prep. Change-Id: Ia134b06da6200e4a25da4e8fe5676bdf9f3550b0 08 June 2017, 09:15:34 UTC
14eda87 Bump Debian Jessie zookeeper version to 3.4.5+dfsg-2+deb8u2 This workaround is needed to upgrade zookeper but it is likely to be changed in the near future for a more maintainable solution that doesn't require to state a specific version in puppet. Change-Id: I1cf8ea083d4df0baaf5895bf90840a442679c2da 08 June 2017, 09:02:09 UTC
47f6382 check_ipmi_temp: do not require /etc/modules-load.d/ File['/etc/modules-load.d/'] is only defined on Trusty given that on Jessie the directory is provided by systemd and doesn't need to be created via Puppet. Get rid of the dependency on File['/etc/modules-load.d/'] to avoid puppetfails. Change-Id: Ife6b3dab20a772c421281b7f9ea1450a1de84826 08 June 2017, 08:43:34 UTC
0c3fb24 check_ipmi_temp: load ipmi_devintf If /dev/ipmi0 is not available, multiple IPMI software can communicate inband to the BMC simultaneously, subsequently racing with each other. Ultimately, this can lead to communication problems. In FreeIPMI, this is most commonly seen through "internal IPMI error" or "driver busy" messages. Ensure that the ipmi_devintf kernel module is loaded and /dev/ipmi0 created. Bug: T125205 Bug: T167121 Ref: http://www.gnu.org/software/freeipmi/freeipmi-faq.html#Why-am-I-seeing-so-many-_0027internal-IPMI-error_0027-or-_0027driver-busy_0027-messages_003f Change-Id: I41b2c0a71b27cadf37c79bf2fda893d33d75f1cd 08 June 2017, 08:31:31 UTC
e8f3c09 Remove webrequest_maps topic from Camus configuration The cache maps cluster has been deprecated and Camus configuration needs to be updated accordingly. Camus is the tool that Analytics uses to pull data from Kafka and store it to HDFS for later refinement/processing. Change-Id: I9384578e96625385467d112ab255331b8a538257 08 June 2017, 07:38:26 UTC
back to top