Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
79aff9c Alexandros Kosiaris 06 July 2017, 13:55:15 UTC Revert "ores: Use nutcracker for redis" ORES seems to be using the MULTI command, which is unsupported by nutcracker. Reverting This reverts commit d6c8c2cff45cd90bbf40406c23f6840da7cb7e3b. Change-Id: Id515a148e88db4d515f9591bce5870f1fe90ee30 06 July 2017, 13:56:14 UTC
93d4f6a Mikhail Popov 05 July 2017, 21:55:18 UTC shiny_server: Fix restart instructions Change-Id: Ie11d6166135d477be061013dca2a304831eee6db 06 July 2017, 13:20:06 UTC
bb693c5 Jaime Crespo 05 July 2017, 15:29:36 UTC mariadb: Correct systemd unit path The right place is /lib, not /etc- although surprisingly, it still works. Bug: T169514 Change-Id: I4ea990b69a37552972e4a3cd535246e1311ea51b 06 July 2017, 12:56:21 UTC
9f221c4 Guillaume Lederrey 06 July 2017, 09:15:27 UTC maps - postgis-vt SQL lib has moved to a new location Change-Id: I26883c11076b873a7855d10adc28f581dbfad619 06 July 2017, 12:33:21 UTC
d6c8c2c Alexandros Kosiaris 05 July 2017, 12:53:00 UTC ores: Use nutcracker for redis Specify localhost instead of the oresrdb.svc.{::site}.wmnet hostname in order to use the local nutcracker. Break the replication between the oresrdb hosts to allow them to be used according to the ketama hashing algorithm used by nutcracker Bug: T122676 Change-Id: I2ff2fb6ed001c58d991a1b76503758f3803193ae 06 July 2017, 12:30:25 UTC
021bffc Alexandros Kosiaris 06 July 2017, 12:27:12 UTC backup: Use profile instead of role We 've migrated to profiles a good time ago Change-Id: Ia4c9840dbbac2ea5d0a28862ba552c943cdd9cad 06 July 2017, 12:27:12 UTC
af4c662 Alexandros Kosiaris 06 July 2017, 12:11:23 UTC backup::set: Add a jobdefaults parameter Add the $jobdefaults paramemeter, defaulting to undef, to be passed to the bacula::client::job define as is This fixes some issues introduced in I2d6dd6cddb116b Change-Id: Ibd92c625c68dc8e4a16ce93586d222f82cca06c0 06 July 2017, 12:11:23 UTC
84b94d8 Alexandros Kosiaris 05 July 2017, 13:48:26 UTC otrs: Enable apache exporter Add an apache prometheus exporter in order to be able to graph apache requests served by our OTRS installation Change-Id: Icbe61699997a0858becd34317e803010cbad3e90 06 July 2017, 11:55:29 UTC
5886a33 Chad Horohoe 06 March 2017, 19:27:18 UTC Create hourly backup schedule, modeled on weekly and use for Gerrit Change-Id: I2d6dd6cddb116b7f1c4383db31900d69735fa574 06 July 2017, 11:50:08 UTC
6319bc1 Moritz Muehlenhoff 06 July 2017, 11:41:06 UTC Enable base::firewall for diadem/sysprosium Caught by Arzhel's new scan; these are using a public IP address and should use base::firewall from the start. Change-Id: If8542beb3c5b09335fc1c739ab8170015d1a01c0 06 July 2017, 11:47:18 UTC
310d360 Ariel T. Glenn 06 July 2017, 11:03:55 UTC increase min_free_kbytes on dataset hosts permanently Bug: T169680 Change-Id: Ida77b079dda641f12dfe0f86fae38e60aeb1c4a2 06 July 2017, 11:16:28 UTC
0bd1d7b Jaime Crespo 06 July 2017, 09:29:40 UTC install_server: Change db1098 MAC address to the one that shows link db1098 seems to well configured, but I think the link is showing on the network card 2, not one, which is the one configured. I will test that it boots by changing the dhcp config, and then decide either to keep it or to ask for a physical port connection change. Bug: T162233 Change-Id: Ic38c00da3859a5523e60edfe6e4bb01770da555b 06 July 2017, 09:32:52 UTC
b6bc425 Jaime Crespo 06 July 2017, 08:05:30 UTC mariadb: Retire db1096, db1099 and db1101 from the parsercache role Those hosts were pooled as parsercaches while reconstruction of the real ones was happening. Once pc100[456] were repooled, put them back into the default role so they can later pooled as core db servers. Bug: T167784 Change-Id: I85681d344e8d53cf63061e1cab9aad522a9aa359 06 July 2017, 08:12:42 UTC
cb2f8a4 Ariel T. Glenn 06 July 2017, 06:06:26 UTC get rid of mirrors user, run all dataset rsyncs as datasets user Change-Id: Ic302cc59d326170357888dc49643415fad1f783b 06 July 2017, 06:06:26 UTC
a311866 Manuel Arostegui 03 July 2017, 13:57:25 UTC db2056.yaml: Remove old socket location db2056 will need to be shutdown so taking the opportunity to update the socket location Bug: T148507 Change-Id: I4ac284cf18f7e37a9f41a7c89809511a7f9b407c 06 July 2017, 05:13:11 UTC
19bbc6f Paladox 23 June 2017, 23:37:33 UTC planet: Update css and templates to be modern look We are using https://github.com/joshaw/Rawdog Change-Id: I2d878ba41f8ecf2b6142b28696e8928876ea3528 05 July 2017, 23:33:08 UTC
c858c35 Daniel Zahn 04 July 2017, 02:47:32 UTC decom subra and suhail Bug: T169506 Change-Id: I23c39d91c0a65859b602065c79e865638269cf09 05 July 2017, 19:24:41 UTC
5d61f5f Daniel Zahn 29 June 2017, 02:52:12 UTC phabricator: add support for stretch and PHP7 also see upstream ticket about PHP7 compatibility https://secure.phabricator.com/T9640 Change-Id: If2c81292dd70bae90c2c03e40edaa642d6e35aa8 05 July 2017, 19:09:49 UTC
a0b5859 Ariel T. Glenn 05 July 2017, 18:33:21 UTC clean up perms and temp files during kiwix rsync Change-Id: Ic459a4a0458204ed593b74adc729bfc85b5c66cf 05 July 2017, 18:38:01 UTC
a4bbad2 Jaime Crespo 05 July 2017, 08:18:51 UTC tendril: Make tendril active on a single datacenter for now Until we have a db backend on codfw, or TLS is used for connecting to the backend, close the port access to dbstore2001. Bug: T169540 Change-Id: I11719b07164ff91de66e1613aea8809d24b50ebf 05 July 2017, 18:28:47 UTC
a81b601 Brian Wolff 04 July 2017, 19:46:13 UTC Redact ep_courses.course_token Its a shared password used to allow people to register for a course. Its primarily meant as an anti-spam measure, but should not be published. Bug: T169661 Change-Id: Ifb66a6ec04489f72c98c46e70b68c752c3eaa922 05 July 2017, 18:26:06 UTC
7b5fbfe Paladox 03 July 2017, 13:15:00 UTC Gerrit: Remove linkDrafts from gitweb I don't see this in the docs anymore https://gerrit.wikimedia.org/r/Documentation/config-gerrit.html#gitweb I also can't find it when doing GitHub searches. Change-Id: Iab560cbc293f39c0b1da2b9e1fa924bfb017325c 05 July 2017, 18:18:52 UTC
547e06d Paladox 03 July 2017, 12:31:04 UTC Gerrit: Add tag url to gitweb I've added support for this upstream, and will be in gerrit 2.14.2+. I've fixed this phabricator's side to work https://phabricator.wikimedia.org/D702 Change-Id: I4f6a119fd787a4109773e7c14b8bae84ef95020c 05 July 2017, 18:14:51 UTC
cff65be Moritz Muehlenhoff 04 July 2017, 16:31:25 UTC request-tracker:Restrict http access to ununpentium rt.wikimedia.org is served via Varnish, so restrict to production networks. Now that it no longer needs SMTP access, it could also be moved to a non-public address, but not sure if that's really worth the hassle. Change-Id: Iebc3228fc69f133190a899bf883607c7a423812c 05 July 2017, 18:09:20 UTC
e9c70fd pt1979 05 July 2017, 17:29:05 UTC install_server: partman entries for new labtest[metal|service|control]* Bug:T168894 Bug:T168893 Bug:T168892 Bug:T168891 Change-Id: I4873454901b6da8ae122e3a1e319eb4c751e0d23 05 July 2017, 17:54:57 UTC
6771c8c Moritz Muehlenhoff 04 July 2017, 10:49:47 UTC request-tracker: Remove smtp port from ferm config We used to use this for the maint-announce queue, but it's been replaced with a Google group, so drop the ferm rule for the SMTP port. (It could also switch to the light exim variant in the future) Change-Id: I10812dcb16f612b3a199fdc0a1f94027a4c3147a 05 July 2017, 17:48:40 UTC
9f98832 RobH 05 July 2017, 16:56:53 UTC set install params for conf100[456] setting install server updates for new systems conf100[456] Bug:T166081 Change-Id: Icbccb48086071a53817e656ed289e675b0a04e50 05 July 2017, 16:56:53 UTC
04d64f6 Filippo Giunchedi 19 May 2017, 12:32:21 UTC prometheus: add alertmanager_url to prometheus server Change-Id: Ifb595bebbd86aeb1e5490288b0e7c736c8692360 05 July 2017, 15:39:26 UTC
7ae42de Filippo Giunchedi 05 July 2017, 15:24:39 UTC prometheus: drop DESCRIPTION annotation from alerts Unused and redundant Change-Id: I14a4396804dfe8a346f7915228cd46b86e645943 05 July 2017, 15:31:08 UTC
885ef97 Bryan Davis 21 June 2017, 23:16:13 UTC tools: Fix maintain-kubeusers Multiple errors were introduced in aedd882 when the chattr call was added for each tool's $HOME/.kube/config file. The most egregious is that this script runs on a host where the tool directories are mounted via NFS which does not support `chattr +i` operations. For the chattr to be applied it would need to be run on the NFS master. Bug: T165875 Change-Id: I7a146d0a724d75d982125e35e64bc0044caa4dca 05 July 2017, 15:21:35 UTC
c513257 Filippo Giunchedi 05 July 2017, 11:24:09 UTC role: adjust beta prometheus alerts Ditch instance load, put in high iowait as checked by shinken Change-Id: I5bd36e470067f815027b396e92af30cb59332678 05 July 2017, 14:35:14 UTC
b3b3560 Filippo Giunchedi 19 May 2017, 18:08:16 UTC role: set external url for prometheus beta/tools Change-Id: Ica23dfc02372b0428a645eef69d2f27e19262244 05 July 2017, 14:25:32 UTC
5346a46 Alexandros Kosiaris 05 July 2017, 12:47:05 UTC scb: Specify correct IP addresses for cp hosts This was messed up in 7a1e95eec1 Change-Id: I3eec6ce250b24ec22cda4a8fe3cce3e92694cdd8 05 July 2017, 12:47:05 UTC
9710af7 Max Semenik 04 July 2017, 20:35:59 UTC Block WP Zero users from accessing Phabricator uploads To prevent wasting our time on endless whack-a-mole with abusers, just hard-block all the uploaded images from Zero networks. The collateral damage should be quite small: only attachments and avatars, general Phabricator functionality will not be affected. Bug: T168142 Change-Id: I3ddc3db7c2c4011ba138f81933a5696d285c7542 05 July 2017, 12:43:31 UTC
7a1e95e Alexandros Kosiaris 26 April 2017, 13:42:31 UTC ores: Add twemproxy support Implement a sharding policy for ORES's redis databases. This is expected to increase throughput as well as redundancy. The former is clear why, the latter is due to the way ORES handles the redis databases where data loss due to a redis db being down, while bad, is not a SPOF, at least not directly. That is, it might lead to an ORES overload and thus to an indirect outage, but not a direct outage. That, if needed can be solved, for the current traffic at least, by adding more redis databases. Twemproxy listens over TCP sockets in this setup since ORES due to a set of bugs related to celery and python-redis discussed in T167149, can't use unix sockets. * Amend the hieradata for codfw,eqiad,common * Split per DC the other redises * Move the redis password one level up in the hierarchy so that it is clear that it is shared by more than one profile class Bug: T122676 Change-Id: I97f535a5e7c8eb34b9c0555d3c84d55c59703ea5 05 July 2017, 12:38:39 UTC
5458fab Guillaume Lederrey 05 July 2017, 09:27:10 UTC postgresql - reset user password also when NULL Initially a user has a NULL password. `passwd <> some_password` is not a sufficient check in case passwd IS NULL. Following comments from pnorman, now uses pg_authid instead of the legacy pg_shadow table. Change-Id: Icdd393391dcf00f52e2b31f22644ab6f91293198 05 July 2017, 12:00:57 UTC
d537148 Filippo Giunchedi 19 May 2017, 12:13:50 UTC base: export puppet agent stats to prometheus Change-Id: Ib760adacbd5a42bab191a06771b422f480ca7844 05 July 2017, 11:06:52 UTC
ef3cf43 Riccardo Coccioli 05 July 2017, 07:06:25 UTC Raid handler: use regex for skip strings * In order to skip another set of false positives that generated T169619, use regex instead of simple string matching. * Add the new pattern to skip. Bug: T169619 Change-Id: Ic55605c528ec65fc77961f5e3776ea5a83121646 05 July 2017, 10:33:26 UTC
048dde6 Alexandros Kosiaris 05 July 2017, 10:13:04 UTC Introduce diadem, dysprosium Bug: T169566 Change-Id: I7d227c5e382c0adaf44f75649b30a6967dcb7bef 05 July 2017, 10:13:04 UTC
8d62ca0 Manuel Arostegui 05 July 2017, 09:17:04 UTC db1085.yaml: Add ROW as binlog format db1085 is going to become sanitarium3 master for s6 shard Specifically define ROW as its binlog format As it needs a restart, take the opportunity to update its socket location Bug: T153743 Change-Id: I31241feaeca19422971b99a392984fa77b902439 05 July 2017, 09:17:04 UTC
4cd2880 Filippo Giunchedi 23 June 2017, 08:24:05 UTC nutcracker: validate new config file Partially revert ec66acff7b0f46 to not test for file existence Bug: T168705 Change-Id: I28d198380b9b32eb47cd77478abbf0c67bf5161f 05 July 2017, 08:18:32 UTC
424d542 Guillaume Lederrey 05 July 2017, 08:12:46 UTC maps - tiles are not stored in postgresql yet Change-Id: I39cc17ba267702e4b9635045193bff73cb6f1793 05 July 2017, 08:13:13 UTC
7549b80 Alexandros Kosiaris 04 July 2017, 14:43:09 UTC Bump rspec-puppet to 2.5.0 2.4.0 allows easy testing of exported resources which can be invaluable in some cases. Bump the version in the Gemfile to 2.5.0 in order to also support nested hashes in params Change-Id: Ic018b7857f062cd66a2384a7186170da3ff46a90 05 July 2017, 07:48:41 UTC
aeea836 Jaime Crespo 04 July 2017, 16:40:19 UTC ep_courses.course_token should not be public, but filtered This field has been erased on labs everywhere, add it to the automatic filtering process on sanitarium(s) from now on. Bug: T169661 Change-Id: Ifb66a6ec04489f72c98c46e70b68c752c3eaa951 04 July 2017, 16:43:17 UTC
6051928 Faidon Liambotis 04 July 2017, 14:07:49 UTC ipmi: add ipmitool support to ipmi_lan Add support for ipmitool's output to the ipmi_lan fact, as a fallback to FreeIPMI's bmc-config. While at it, downcase MAC addresses for consistency with the "macaddress" fact. Change-Id: I718d51080a944aff5f0df8cfab8e82f797d4a323 04 July 2017, 14:58:31 UTC
2438824 Filippo Giunchedi 04 July 2017, 14:04:04 UTC salt: let wmf_auto_reimage wait after the first puppet run IOW leave time for puppet to install and start salt-minion Bug: T169601 Change-Id: Ie2571947cb21514ea40deaf6bfe49bccf0abf1c3 04 July 2017, 14:09:47 UTC
f30d521 Faidon Liambotis 03 July 2017, 12:31:43 UTC Revert "base: cleanup unneeded ipmi packages/checks" Did its job, not needed anymore. This reverts commit 82fe99a24d3e705597b6f34fa7edc8bf2b7842ad. Change-Id: I95dcc2620dd3de475a2dedafae5160dac53703fc 04 July 2017, 13:40:31 UTC
a5cf794 Faidon Liambotis 04 July 2017, 11:26:46 UTC salt: drop the saltversion fact, use os_version() We currently use either SHA256 and MD5 fingerprints depending on the output of the "saltversion" fact (this was changed in 7037c9696f0). While this is a better approach than relying on distribution versions, it's buggy in the first puppet run, as in that run when facter runs there is no package installed. Revert that particular change and rely on os_version() instead. For our purposes it doesn't matter, as we the distribution versions and salt match (and Salt won't be around for much longer anyway). Change-Id: Ie1847adf5ba6cca0e6da286d30eb36206235ba7e 04 July 2017, 13:26:55 UTC
80ee80b Filippo Giunchedi 04 July 2017, 12:55:36 UTC install_server: enable structured facts at provisioning Bug: T169612 Change-Id: I1d234d595da80d6e0e85893299780b71e2e9af2d 04 July 2017, 13:04:51 UTC
27ab1a3 Filippo Giunchedi 06 June 2017, 17:14:15 UTC aptrepo: add hp-mcp to stretch-wikimedia There isn't a hp-mcp stretch counterpart yet in the upstream repositories, use jessie instead. Bug: T162609 Change-Id: Id2511128e438f747319d165f8b6423ae2d5373f9 04 July 2017, 12:22:35 UTC
777845e joal 29 June 2017, 08:05:48 UTC role::analytics_cluster::refinery::job::data_drop: drop old druid data We put sampled webrequest data in druid for fast analysis. This patch provides a cron job deleting data from druid deep-storage after 60 days to enforce our data rentention policy. Bug: T168614 Change-Id: I7770655b8f2b98fad751a90aee6e8b771a0851b5 04 July 2017, 11:09:10 UTC
4068478 elukey 04 July 2017, 10:29:06 UTC role::analytics_cluster::hadoop::master: add more monitors to HDFS metrics Bug: T163908 Change-Id: I22910c9e216b3af5211a7c2d7053e75bd4fc745f 04 July 2017, 10:34:18 UTC
48267cf Gabriel Wicke 30 June 2017, 21:38:13 UTC Set up grafana dashboard monitoring for services Based on https://github.com/wikimedia/puppet/commit/401973ab7f79fd4567749fe074ccce1d47446581. Bug: T162765 Change-Id: I5738b379be523341ed5f3aedca1b237ba4ca63cf 04 July 2017, 10:29:02 UTC
bb722e4 Filippo Giunchedi 04 July 2017, 08:55:44 UTC install_server: ext4 for ms-be non-data filesystems Bug: T169605 Change-Id: I8e24faa7910e3ce5dcb732264db49a0dd7582658 04 July 2017, 09:24:52 UTC
df758a4 Guillaume Lederrey 04 July 2017, 09:17:25 UTC scap3 - deployment of package requires configuration to already exist This is not an issue for most deployments, but tilerator deploy 2 services (tilerator and tileratorui) from the same repo. This creates some different ordering and the package deployment is done before the configuration is created, which fails. The package deployment creates scap3 templates, which require a config-vars.yaml file to already be present. Bug: T169011 Change-Id: If0de8d177fc025ed836d5667e6f424fbc0847b84 04 July 2017, 09:17:57 UTC
8d69975 Manuel Arostegui 04 July 2017, 08:39:06 UTC redact_sanitarium: Add db1102 to the allowed hosts db1102 is going to temporarily be sanitarium 3 and needs to be able to run the sanitization script Bug: T153743 Change-Id: I63f547c9d44c616a22f99c5fab57a3e2919ae586 04 July 2017, 08:46:43 UTC
fc5e457 Guillaume Lederrey 04 July 2017, 08:42:55 UTC Revert "scap3 - deployment of package requires configuration to already exist" this introduces a dependency cycle This reverts commit 99d4fb9f6b0df11d6b5f9ca61750a79f634908c9. Change-Id: I32dded2a48e735e3464ed967f9ea7ac21108e08e 04 July 2017, 08:43:40 UTC
99d4fb9 Guillaume Lederrey 29 June 2017, 08:41:11 UTC scap3 - deployment of package requires configuration to already exist This is not an issue for most deployments, but tilerator deploy 2 services (tilerator and tileratorui) from the same repo. This creates some different ordering and the package deployment is done before the configuration is created, which fails. The package deployment creates scap3 templates, which require a config-vars.yaml file to already be present. Bug: T169011 Change-Id: Id0e4a37e2177ed1d4dba8943a0ee17c6c29f63d5 04 July 2017, 08:38:12 UTC
a193006 Filippo Giunchedi 04 July 2017, 08:15:07 UTC install_server: use stretch for ms-be / ms-fe Also OCD fix for indentation Bug: T169601 Change-Id: I0633883c47ae304eb2242ad4c3c979eafac77ef3 04 July 2017, 08:17:19 UTC
7220c42 Moritz Muehlenhoff 04 July 2017, 07:29:43 UTC Extend account dates for two frtech consultants Change-Id: Ib44ba451fe0ab5d6a50acc2e9ddac6f834e9f4da 04 July 2017, 07:29:43 UTC
67fe9b4 Manuel Arostegui 04 July 2017, 05:37:36 UTC db1060.yaml: Change to ROW binlog format db1060 is going to be sanitarium3's master, so needs its binlog migrated to ROW Taking the opportunity to migrate the socket to its new location too Bug: T153743 Change-Id: I61bbf35fa37f9bc00554be880ff465875e23091a 04 July 2017, 05:37:36 UTC
9df8bbc Manuel Arostegui 03 July 2017, 14:04:57 UTC site.pp: Add db1102 sanitarium role db1102 is going to temporary become a multi-instance sanitarium3. It will hold the 3 pending shards (s2,s6 and s7). I know that the sanitarium role basically assumes there will be 7 but the other 4 can be just ignored for the sake of having this host up with 3 shards so we can import the 2 pending shards into labsdb1009, 10 and 11 and get it over with. Bug: T153743 Change-Id: I333d32cf46ff98fcfde6d20069e0bee5c0c0ddaa 04 July 2017, 05:15:07 UTC
a548d3f Emanuele Rocca 16 June 2017, 12:42:42 UTC VCL: remove disableImages handling Bug: T168013 Bug: T109870 Change-Id: I4017ff4395f6457e8e418454d0402e6fc80867ba 04 July 2017, 05:10:31 UTC
66b85a8 Daniel Zahn 29 June 2017, 06:16:59 UTC wikimania_scholarships: add support for stretch and PHP7 Change-Id: I61315692bf6e64975b4158f448c97d16f2051f8c 04 July 2017, 01:59:00 UTC
47e706d Daniel Zahn 04 July 2017, 01:34:17 UTC releases: add releasers-mobile admin group to releases1001 releasers-mediawiki is already here, but releasers-mobile is missing. We are migrating this part of bromine over here. We are syncing /srv/org/wikimedia/releases/ though, so that includes ./mobile/ and these files are owned this group and they should be able to upload here as well in the future. As of right now the DNS name releases.wm.org still points to bromine. We will let you know once that changes (soon). Bug: T164040 Change-Id: Ic16804bfc6b54d47142bbb654977fed796a88a12 04 July 2017, 01:38:27 UTC
0b7eed7 Daniel Zahn 04 July 2017, 00:49:13 UTC rsync::quickdatacopy: fix commandline for cron, don't need file_path The current command translates to, example: /usr/bin/rsync -a rsync://bromine.eqiad.wmnet/srv-org-wikimedia-releases/* /srv/org/wikimedia/releases/* This doesn't work. "Unexpected local arg: /srv/org/wikimedia/releases/debian" If arg is a remote file/dir, prefix it with a colon (:). rsync error: syntax or usage error (code 1). This works and is how i did it manually. sudo /usr/bin/rsync -av rsync://bromine.eqiad.wmnet/srv-org-wikimedia-releases /srv/org/wikimedia/releases/ For that we only need $title and $module_path. I suggest we just drop file_path and keep it even simpler. One path, one module. Bug: T164030 Change-Id: Ia75e3b7d120f50f307192cf35dd09601aa7830e2 04 July 2017, 00:53:49 UTC
142eae5 Daniel Zahn 04 July 2017, 00:25:09 UTC rsync/releases: add dest_host parameter, only include what's needed It seems we can't get away without a "dest_host" parameter because the source host needs to have a ferm rule that allows dest_host to connect to rsyncd to pull from it. Add dest_host parameter to use in ferm rule. Since now we have a clear separation between source/dest anyways, only include parts needed on each site, so rsyncd and ferm rule on the source and the sync command and cron on the destination. Bug: T164030 Change-Id: I44c23efe0d90b788aff34a94f8005383b07d8081 04 July 2017, 00:38:54 UTC
a41e815 Daniel Zahn 03 July 2017, 23:46:39 UTC releases: use rsync::quickdatacopy in profile on bromine This is a follow-up to I1c9b073f12503f7a8db which adds this in our new role class for releases* servers. Since our first source is bromine though and it doesn't use our new role class, we also need it here. Later bromine will not use this role anymore and it will automatically be applied to future releases* servers via the role. Bug: T164030 This is just needed now to migrate from bromine initially. Change-Id: I083305fb9b7afea76684da4f1f0bb23feca061c8 03 July 2017, 23:55:47 UTC
b8c7ba6 Chad Horohoe 28 June 2017, 03:31:28 UTC releases: Use rsync::quickdatacopy to copy data between servers Copy release data from bromine to new dedicated VM releases1001. Bug:T164030 Change-Id: I1c9b073f12503f7a8db33473615549585964f70e 03 July 2017, 23:19:58 UTC
47b24e0 Chad Horohoe 28 June 2017, 03:19:20 UTC Create rsync::quickdatacopy Designed for setting up quick rsync migration bridges. Use case will be pretty evident in follow-up commit Change-Id: I9f5d328cd17eb03ea8cacdce1bfb0ef65ba041a7 03 July 2017, 20:22:27 UTC
a718938 Keith Herron 03 July 2017, 19:16:13 UTC Add myself to sms contactgroup Change-Id: Ic8dad72417b12eeee79ca8433bdd176082165d7b 03 July 2017, 19:31:33 UTC
a092737 pt1979 03 July 2017, 17:34:45 UTC DHCP: Add DHCP entries for labtestservices2003,labtestcontrol2003,labtestservices2002 and labtestmetal2001 Bug:T168894 Bug:T168893 Bug:T168892 Bug:T168891 Change-Id: I93dad5e232686cad131da37690547dc3a51d5b08 03 July 2017, 18:33:19 UTC
bed00e2 Amir Sarabadani 26 June 2017, 22:52:58 UTC admins: Add awight to ores-admins Bug: T168442 Change-Id: I51e92d67229edce9d9bfe8cce0e1cafa8bd2b526 03 July 2017, 17:33:53 UTC
6f8c88e Daniel Zahn 03 July 2017, 16:00:23 UTC admins: contract renewal for shrlak until Jan 2018 Change-Id: Idf741cad79f79f877cf2e7c53da0b7bf7323bcb0 03 July 2017, 16:10:43 UTC
403fa47 Andre Klapper 03 July 2017, 14:31:53 UTC phabricator: Block IP ranges for recent uploaded offtopic files See https://phabricator.wikimedia.org/T168142 Change-Id: I21ef5dd394f339854afb9212bab1c88d735b27fd 03 July 2017, 15:14:21 UTC
87bbe08 Faidon Liambotis 30 June 2017, 17:56:18 UTC openstack/diamond: remove the libvirtkvm collector Previously absented, so now it should be removed from every system. Remove the stanza and the plugin altogether as they are now unused within our tree. Change-Id: Ib72c6462565b5486eeff2f335b19b8d5eec56a00 03 July 2017, 14:59:16 UTC
445fa22 Alexandros Kosiaris 03 July 2017, 14:36:21 UTC Revert "monitoring::host: Monitor IPMI as well if applicable" This reverts commit 9746fcb76113148296e0487392e4f8046a2c2f64. This reverts commit 5857f6842d52ee414e79b6c992df95286dfb4015. This reverts commit 6e1b459e33b6ebfd985bc827a37f2e082bd23d9d. Change-Id: I218ea2e9e5f96719c91a56a785c6b2a36473c1a4 03 July 2017, 14:37:33 UTC
322d8f2 cpettet 03 July 2017, 13:59:57 UTC labcontrol: add base::firewall to new servers Change-Id: I6d6bb47453bf9a82ee16643cc803978c3b996290 03 July 2017, 14:25:54 UTC
9746fcb Alexandros Kosiaris 03 July 2017, 14:17:15 UTC Remove extraneous m char from checkcommands.cfg s/commmand_line/command_line Change-Id: I0a9f16eccc7e0223732987844a7560df727ea53a 03 July 2017, 14:17:15 UTC
5857f68 Alexandros Kosiaris 03 July 2017, 13:57:38 UTC Fix typo with forgotten $ in monitoring::host Facts is a variable, needs to be prefixed with a $ Change-Id: Iff8457ed4115c4a8d79bd673e9dc1225f4bef20c 03 July 2017, 13:57:38 UTC
6e1b459 Alexandros Kosiaris 30 June 2017, 14:09:43 UTC monitoring::host: Monitor IPMI as well if applicable Use the new has_ipmi fact to expose a nagios_host entry that should allow us to set up basic checks on the BMC of every host. Add a check to make sure the forward DNS resolves to the IP know the the BMC Add an mgmt host/service group Change-Id: I9df6811b9540e6dd81597a13372794c09fe4d8e4 03 July 2017, 13:12:18 UTC
d9db2a6 elukey 03 July 2017, 12:01:03 UTC Set stat1005's pxe boot option to stretch Bug: T165368 Change-Id: I1274e209fabd5943a20af7b4cc99830aa72ca5ef 03 July 2017, 12:01:03 UTC
79bb262 Filippo Giunchedi 03 July 2017, 10:59:50 UTC Decom swift cluster in esams Bug: T169518 Change-Id: Ic208e7f3730f9db8cda7ec9bc28ad8cba0cbf475 03 July 2017, 10:59:50 UTC
b74a695 Filippo Giunchedi 03 July 2017, 10:01:08 UTC swift: delete swift-object-reconstructor unit Bug: T151648 Change-Id: Idbda5cea02adfa2f59cb91e1ec47eb9cf2c24186 03 July 2017, 10:26:01 UTC
47aa081 Filippo Giunchedi 03 July 2017, 10:01:36 UTC hieradata: enable swift storage policies in eqiad Bug: T151648 Change-Id: I0b2872bcd8ab97895317225430ea9dcff66510b1 03 July 2017, 10:12:24 UTC
4819557 Giuseppe Lavagetto 03 July 2017, 09:53:53 UTC profile::docker::builder: add dependency on virtualenv Change-Id: Ic76338ec3b39dc7187c38f7cb4f5bb056fc2f731 03 July 2017, 09:54:06 UTC
c57656f Filippo Giunchedi 03 July 2017, 08:29:13 UTC hieradata: enable swift storage policies in codfw Bug: T151648 Change-Id: I6ffda64ccc887646f219dcc1d421619e03503d75 03 July 2017, 08:35:15 UTC
9bdfaa3 Filippo Giunchedi 03 July 2017, 08:35:00 UTC swift: fix duplicate dispersion cron name Bug: T151648 Change-Id: I7a402e7e2e8ab5eb31f2592307f207c395df03f0 03 July 2017, 08:35:15 UTC
cb19c79 Daniel Zahn 01 July 2017, 00:55:52 UTC librenms: add php-net-ipv4 package also on stretch This was missing. Now it has been imported to APT repo for stretch as well. (from jessie) Change-Id: I6318719e7317e5964ec301a7ac48d410822521fc 01 July 2017, 00:58:27 UTC
5eaa177 Daniel Zahn 30 June 2017, 22:59:43 UTC servermon: add missing package python-mysqldb python-mysqldb is installed on netmon1001 and needed by servermon but wasn't puppetized here yet it seems Bug: T159756 Change-Id: I45ac9f8eb305a21a5113241da04db50d2570e31a 30 June 2017, 23:09:20 UTC
07c077e Daniel Zahn 29 June 2017, 03:47:22 UTC netmon1002: disable Letsencrypt cert creation for migration Change-Id: I6f659dffff5777db777b52cd48ee2247628575a1 30 June 2017, 23:05:43 UTC
aeca957 Daniel Zahn 30 June 2017, 22:52:22 UTC netmon1002: add librenms role After the previous fixes, now the librenms role works on stretch on a test instance without puppet errors. Adding it to netmon1002 now. Bug: 159756 Change-Id: I729ba1427ea06da2310430c94b998ca780f56475 30 June 2017, 22:58:09 UTC
9689112 Ariel T. Glenn 30 June 2017, 22:53:43 UTC keep 22 cirrusdump logs with weekly runs, rotate 3 won't do what we want Change-Id: Idcd2098a3709770d788ddda9f5fbed475a913e9f 30 June 2017, 22:53:43 UTC
65f5441 Ariel T. Glenn 30 June 2017, 11:30:21 UTC ditch dateext and just use normal rotation for cirrusdump logs Bug: T162688 Change-Id: I94d5a53784b7d29e4db631d7c22ed7fd7b0ccedc 30 June 2017, 22:39:42 UTC
46a6db5 Daniel Zahn 30 June 2017, 22:02:22 UTC librenms: add missing Apache headers module This wasn't puppetized in the role (but worked on netmon1001 because another role uses it too) but is needed by the Apache site config. Leading to " Invalid command 'RequestHeader'" and Apache not starting when using the role by itself. Bug:T159756 Change-Id: Id15073b2fce7157ff9233afce676344e5d7ccffc 30 June 2017, 22:32:54 UTC
0f74838 Daniel Zahn 30 June 2017, 21:46:04 UTC librenms: ensure install_dir exists When applying role on a new instance, currently seeing: Error: Cannot create /srv/librenms/rrd; parent directory /srv/librenms does not exist Ensure the install_dir exists. The owner/group/mode emulates the existing situation on netmon1001 so that it is not changed. Bug:T159756 Change-Id: Iacb49925ee9e797d73a8f5f5ffada0f5ecebc72d 30 June 2017, 22:26:45 UTC
fb91e01 Ariel T. Glenn 22 May 2017, 19:15:21 UTC cleanup the dump list commands template syntax use some elsifs for a change, makes everything more readable Change-Id: I40d1bc9fefee7c0ed94a05ed9e85e665afae7572 30 June 2017, 22:08:53 UTC
7b59611 Ariel T. Glenn 22 May 2017, 19:03:11 UTC improve names of dump command lists since "nocreate" is redundant now, lose that in the name since we run either partial or full runs, change "normal" to "full" everywhere Change-Id: I75bfc42c0d86f60ae0585a88fec9aa863d848e71 30 June 2017, 21:59:56 UTC
a11c8ee Ariel T. Glenn 22 May 2017, 18:50:39 UTC remove some unused dump command lists we always do the dump directory creations separate from running the actual dumps, remove all command lists that lump those together additionally remove the command list that lumps all directory creations together, we always split them up by wiki type Change-Id: I11be74f6d159303a05c6a6a6cb3a3d4b00309a67 30 June 2017, 21:45:07 UTC
b3df59e Daniel Zahn 30 June 2017, 21:20:22 UTC librenms: move php5-ldap package to others, fix for stretch Bug:T159756 Change-Id: I654a8ed4eb2503dbdb8edaa7fb09dc5c75f2d5d9 30 June 2017, 21:24:28 UTC
back to top