| aecb3e5 | Moritz Muehlenhoff | 11 September 2017, 07:10:24 UTC | Update comment Change-Id: I9547710b8bd17b17dc898224e80fde6aeaf63b94 | 11 September 2017, 07:10:24 UTC |
| b4ed8e4 | Moritz Muehlenhoff | 08 September 2017, 11:06:33 UTC | Remove remaining salt grains previously used by debdeploy Change-Id: I0843ccdd5cbd73e585b9c2403240b4f5d90e56b4 | 11 September 2017, 06:56:04 UTC |
| a369c93 | andrewbogott | 11 September 2017, 03:40:09 UTC | Add wmcs-roots to role::wmcs::openstack::main::control This was included for the old role (common::labs::openstack::nova::controller) but lost in the refactor and rename. Change-Id: I73b3081566ce43e1f2fe5e8aa25344a0a04d502b | 11 September 2017, 03:41:25 UTC |
| 6612a74 | Ariel T. Glenn | 10 September 2017, 20:53:42 UTC | revoke James F's ssh key Change-Id: Ib939ef0a35a1fe4fc0f4a7a7245dd3bcf64d66eb | 10 September 2017, 20:53:42 UTC |
| b5e3c93 | Daniel Zahn | 08 September 2017, 19:23:24 UTC | site: remove unused virtual host 'zosma' This is a Ganeti VM that hasn't really been used and the related access request has been declined. It was created after last years Wikimania. Removing it now. If it's ever desired (again), happy to recreate it. But so far it's just been sitting here. Bug: T138650 Change-Id: I8ef7db97942858dcfd6eee6cfe734845ccc42882 | 08 September 2017, 19:23:24 UTC |
| 761489b | Daniel Zahn | 08 September 2017, 18:09:20 UTC | admins: add Kai Nissen (knissen) to LDAP (nda) users Kai Nissen now has an NDA on file with legal, confirmed on Google doc. He will be added to the LDAP group "nda" for access to pivot. Bug: T168046 Change-Id: Ice27ea96603f33051ec795933aaa98a605523fb1 | 08 September 2017, 18:12:35 UTC |
| db85ad5 | Daniel Zahn | 07 September 2017, 22:43:38 UTC | admins: create user account for Rita Ho (rho) Create shell account for Rita Ho. Since she already was an LDAP-only admin, remove her from there, as an upgrade. purpose: review analytics data for the Wikipedia Android app from SWAP notebooks https://phabricator.wikimedia.org/p/RHo/ https://www.mediawiki.org/wiki/User:RHo_(WMF) Addition into groups has to be done in a seperate patch, so this just creates the account without giving it access yet. UID matches existing LDAP user, cn: Rho, rho@wikimedia Key as provided on Phabricator ticket. Bug: T175204 Change-Id: Ia90b710d67251e290f9c5893b3df81d2f5047ce9 | 08 September 2017, 17:21:39 UTC |
| ac1c65d | RobH | 08 September 2017, 16:52:01 UTC | dsaez uid update making the shell and wikitech user match Bug: T175220 Change-Id: I0f5115d19a52b099d2d3e7a1c29bb7293a74f86f | 08 September 2017, 16:52:01 UTC |
| 13e68d2 | Antoine Musso | 20 June 2017, 20:17:05 UTC | contint: upgrade git on zuul mergers Upgrade git-daemon service to use jessie-backports. Bug: T161086 Change-Id: Iab9181128b224aa186d6aaa68e4e106042b0687b | 08 September 2017, 16:38:17 UTC |
| 271ba77 | Alexandros Kosiaris | 08 September 2017, 14:48:47 UTC | dnsrecursor: Enable PowerdnsRecursor diamond collector Ship the diamond collector and enable it along with the require sudo rules Bug: T169600 Change-Id: I6287a6aacdae041d96ccdd5ec3204182f38f53df | 08 September 2017, 14:50:56 UTC |
| f4b76d7 | Alexandros Kosiaris | 08 September 2017, 14:31:49 UTC | role::dnsrecursor: Partially transform into a profile Move the DNS related parts of the role into a corresponding profile class. Bug: T169600 Change-Id: I173f5dcc284d62340f31f656e652cb3507435450 | 08 September 2017, 14:50:56 UTC |
| 3663205 | Marko Obrovac | 08 September 2017, 14:26:04 UTC | ChangeProp-JobQueue: Fix the repo location and name Bug: T175281 Change-Id: I029f8b52e51277dcbde341f1ea1289465f1a9a55 | 08 September 2017, 14:42:45 UTC |
| 5be9b70 | Antoine Musso | 08 September 2017, 14:32:19 UTC | nodepool: reduce trusty pool by one Most of the repositories had their jobs moved from Trusty to Jessie. There is a long tail of annoying jobs left, but really that is just for a few dozen of mediawiki extensions. Reduce the initial pool of trusty nodes from 4 to 2. That would allow the pool to get one more jessie instance when it is busy. Bug: T161882 Change-Id: I4cea67ced7bf385266ab74cc722f103d2e8b4b7a | 08 September 2017, 14:39:12 UTC |
| 3a5ef79 | andrewbogott | 28 August 2017, 07:44:32 UTC | nodepool: specify 'nova' availability zone If this is unspecified, the nova scheduler will just pick a zone at random. Currently we only have the one zone, but when I experimentally added a zone a few months back nodepool started scheduling in the wrong zone and hilarity ensued. 'nova' is the default zone -- with this explicit here it's slightly safer to add additional zones to nova in the future for other purposes. Bug: T170447 Change-Id: I87b4f02ddbda0290291dd704f8e4e7a47bb9e235 | 08 September 2017, 14:26:40 UTC |
| 2e2775e | Giuseppe Lavagetto | 08 September 2017, 13:12:26 UTC | etcd: limit RAID resync speed if on linux software raid This should help avoid the loss of consensus we experienced on the codfw cluster whenever the nodes were resyncing their RAID partitions. Bug: T162013 Change-Id: Ia0e331d2a3ad2cbb78fe18dda3959175580f9890 | 08 September 2017, 13:12:26 UTC |
| e588fde | Alexandros Kosiaris | 06 September 2017, 13:03:35 UTC | Document in-datastore calico configuration Add the various objects we have in our calico configuration as yaml files. Those are not expected to change often. At some point in time they should partly enforceable by puppet, but we are not there yet Bug: T170111 Change-Id: I2c6d992210ec822a16be0a7362efb4587b5eaa5b | 08 September 2017, 12:36:26 UTC |
| f8167bb | Alexandros Kosiaris | 31 August 2017, 10:24:49 UTC | kubernetes: Add a few recommended admission controllers Add ServiceAccount, PersistentVolumeLabel and DefaultTolerationSeconds. These are for production only, toollabs are not touched. Those are the recommended admission controllers for version 1.7 of kubernetes which is what we are running Bug: T170119 Change-Id: I7ddb79fb7fa2ed70703fe8adf5d9f52433cc2ca3 | 08 September 2017, 12:36:00 UTC |
| 73db34a | Marko Obrovac | 08 September 2017, 11:51:31 UTC | Add the cp-jobqueue profile Bug: T175281 Change-Id: I78a09d0d99ae20a38d397da8f8a1faf9dd015fe3 | 08 September 2017, 12:29:09 UTC |
| ff6cba4 | Moritz Muehlenhoff | 08 September 2017, 10:20:25 UTC | Remove memcached/redis salt grains previously used by debdeploy Change-Id: Icb78c17fed6ec16ca9b6e871fea5b19790d5a1f3 | 08 September 2017, 10:20:25 UTC |
| 280cca2 | Moritz Muehlenhoff | 08 September 2017, 09:00:24 UTC | Remove labtest salt grains previously used by debdeploy Change-Id: If2833d9a0a0a520e59972b762c691f234c0777b4 | 08 September 2017, 09:00:24 UTC |
| 3f19ae4 | Moritz Muehlenhoff | 06 September 2017, 14:37:45 UTC | Remove NFS salt grains previously used by debdeploy Change-Id: I9046f01c0f3e22d1d46e13a4e34bb6d5a0b64114 | 08 September 2017, 08:56:29 UTC |
| 7acce04 | Moritz Muehlenhoff | 06 September 2017, 12:59:16 UTC | Remove WMCS-related salt grains previously used by debdeploy Change-Id: I104b6b31c605aa78392800fe77bb642b594465dc | 08 September 2017, 08:52:26 UTC |
| ecb9a01 | Moritz Muehlenhoff | 06 September 2017, 13:02:48 UTC | Remove parsoid salt grains previously used by debdeploy Change-Id: Ibde5e3e38e7feb02af8e8e67939711db4dc0ea43 | 08 September 2017, 08:43:43 UTC |
| 291a489 | Moritz Muehlenhoff | 06 September 2017, 12:56:39 UTC | Memove releng-related salt grains previously used by debdeploy Change-Id: I6e5daf79bc15101cc518ed158962dc76fd9b2997 | 08 September 2017, 07:23:57 UTC |
| 726bbc2 | Moritz Muehlenhoff | 06 September 2017, 13:00:47 UTC | Remove ganeti salt grains previously used by debdeploy Change-Id: Ia107afb2b160aee7c4bec2c0f38e84786ae7623b | 08 September 2017, 07:22:01 UTC |
| fd466ae | Moritz Muehlenhoff | 06 September 2017, 14:22:17 UTC | Remove k8s salt grains previously used by debdeploy Change-Id: Ie3de7f33768e9b31f814fa562865ea2aacee3603 | 08 September 2017, 07:18:44 UTC |
| 8a31c5b | Moritz Muehlenhoff | 06 September 2017, 10:13:29 UTC | Remove cache salt grains previously used by debdeploy Change-Id: Ia27a700006800d498261bb0c246906e5e96646e3 | 08 September 2017, 07:13:23 UTC |
| 0f81aa4 | Moritz Muehlenhoff | 06 September 2017, 10:16:33 UTC | Remove lvs salt grains previously used by debdeploy Change-Id: Icf07bfedf7949a5c3933267448e3564dd979c465 | 08 September 2017, 07:10:45 UTC |
| acabe8e | Moritz Muehlenhoff | 06 September 2017, 14:41:08 UTC | Remove puppetmaster/puppetdb salt grains previously used by debdeploy Change-Id: If2693224c8eabb4654152fde994a8f19d715c92a | 08 September 2017, 07:04:55 UTC |
| 6e9d703 | Moritz Muehlenhoff | 06 September 2017, 14:32:05 UTC | Remove sca/scb salt grains previously used by debdeploy Change-Id: Ice8aa80106e11f8608f257770d66dcb64e0d0ab0 | 08 September 2017, 07:02:42 UTC |
| 89f25f7 | Moritz Muehlenhoff | 06 September 2017, 13:04:52 UTC | Remove restbase salt grains previously used by debdeploy Change-Id: I3f066fc4ac475f895a1b675465dbe794acb702a1 | 08 September 2017, 06:58:26 UTC |
| f732d7c | Daniel Zahn | 07 September 2017, 21:04:06 UTC | base/icinga: increase warn/crit thresholds for screen monitoring Instead of 1 and 3 hours respectively, set warn and crit thresholds for monitoring of "long" running screen and tmux processes to 8 and 48 hours. Per feedback from bblack. < bblack> maybe something more like 6h? < bblack> (there's a lot of legit cases for keeping a screen session up for most of a working day while waiting on system reimages or taking long log samples for investigation or whatever) < bblack> but you've got some example alerts up there that are months < bblack> so there's definitely a need heh For now, use WARN unless it's longer than 2 days. Bug: T165348 Change-Id: I2abbf90f5334b2730b12ed2aaf0f2f6421fb4d2a | 07 September 2017, 21:12:53 UTC |
| 8b84c5f | cpettet | 07 September 2017, 14:22:18 UTC | openstack: cleanup keystone references in old module Bug: T171494 Change-Id: Ibebb0e4ee6186d642d9ea63e54f04ad624385333 | 07 September 2017, 20:07:18 UTC |
| f8725c2 | Dzahn | 07 September 2017, 19:38:32 UTC | Revert "icinga/base: screen monitoring by default. whitelist copper, terbium" This reverts commit dce429bfe4b12ca22937449c3d851e381e315451. Change-Id: I959702d4c12bc24d727922e33de6a330a4e28355 | 07 September 2017, 19:40:11 UTC |
| 4aa48cc | RobH | 07 September 2017, 19:19:21 UTC | set deploy1001 isntall params deploy1001 install info, setting to spare until pressed into service Bug: T175288 Change-Id: I157ba11946749f8d7260c1ca2e7bbf59c965966d | 07 September 2017, 19:23:49 UTC |
| dce429b | Daniel Zahn | 26 August 2017, 17:33:07 UTC | icinga/base: screen monitoring by default. whitelist copper, terbium Enable screen/tmux monitoring for all hosts by default, except whitelist copper and terbium per the original ticket. Any others to remove? Bug: T165348 Change-Id: Ib34a53205235eb9310a32731f1383e6a77985ee7 | 07 September 2017, 19:09:12 UTC |
| 6a1b5e4 | Brandon Black | 06 September 2017, 15:21:52 UTC | browsersec: bump to 14% 2017-09-07 Bug: T163251 Change-Id: Ibffb729646d16f9873aff2175648f45968f2e2d1 | 07 September 2017, 18:38:49 UTC |
| 3034afb | Ariel T. Glenn | 04 September 2017, 12:44:35 UTC | convert "other" dump crons to use script to grab config settings grep + mawk is shorter but grodier. Bug: T174929 Change-Id: Ifbfe38201742b0d1e95cc33f2e4d6350777ef340 | 07 September 2017, 15:56:16 UTC |
| 4b0dbeb | cpettet | 07 September 2017, 14:11:28 UTC | openstack: clean up kilo files and templates This really shouldn't be in use anywhere and seems not to be. Bug: T171494 Change-Id: I0731d9f694fcdd205414ca22b6fdf37d80896c36 | 07 September 2017, 14:13:19 UTC |
| 665b869 | Alexandros Kosiaris | 07 September 2017, 12:35:56 UTC | Remove redundant double-quotes from LVS config No need for them Change-Id: Ic0fae71b5077085e69116cfe696b88176969827a | 07 September 2017, 14:07:56 UTC |
| 3bea245 | Giuseppe Lavagetto | 07 September 2017, 13:32:06 UTC | jobrunner: add discovery data Bug: T174599 Change-Id: I0db2528ba95ab7cf509f8178e8ff3fe34c7cb09d | 07 September 2017, 13:50:58 UTC |
| 31b7797 | Riccardo Coccioli | 07 September 2017, 13:42:14 UTC | Icinga: RAID handler ignore case for blacklist Change-Id: Ice6992f3b562570daaecbe73391828a231e5c978 | 07 September 2017, 13:44:44 UTC |
| d7072cd | Elukey | 07 September 2017, 13:21:38 UTC | Revert eventlogging_sync batch size back to 1000 After some tests in Production the increased speed does not really improve so much the replication timing of a very busy Eventlogging schema (like 100 events/s). With the current architecture of eventlogging_sync such a use case needs to be handled semi-manually. This reverts commit 058acf0cf7a05ef9e31afe200628201318348008. Change-Id: Iad517448ea24d1545932f3889a4c319261a5f4b0 | 07 September 2017, 13:25:59 UTC |
| 1842aa6 | Antoine Musso | 06 September 2017, 18:29:46 UTC | package_builder: typo: s/output/result/ directory Change-Id: Ib932628a2c885a5fb382e9064b9de5bf7bd57d73 | 07 September 2017, 09:02:31 UTC |
| 935c595 | Antoine Musso | 06 September 2017, 20:25:50 UTC | package_builder: test -nt differs in bash vs dash When the BUILDRESULT/Packages file does not exist, test -nt in dash would yield false unlike bash. From the man pages: dash(1) file1 -nt file2 True if file1 and file2 exist and file1 is newer than file2. ^^^^^^^^^^^^^^^ bash(1) file1 -nt file2 True if file1 is newer (according to modification date) than file2, or if file1 exists and file2 does not (exist). ^^^^^^^^^^^^^^^^^^^^^^^^^^^ Fix up D05localsources which uses dash by catching lack of a Packages file. Change-Id: I94e12a9c2bec116d29cfb53886b06333dd7114d3 | 07 September 2017, 08:59:09 UTC |
| d99074f | addshore | 04 September 2017, 14:05:51 UTC | statistics::wmde: use the same name for group and user in wmde stats The graphite class currently only uses $user. I think, at least right now, it makes sense to remove this mild aditional compexity and just have the group be called the same as $user (which is currently true) Change-Id: I185590f138960054c7bb555264c2d321816b5c37 | 07 September 2017, 08:40:00 UTC |
| 06c8e41 | Paladox | 24 August 2017, 10:35:01 UTC | Gerrit: Set autoMigrate so that changes are stored in both reviewdb and notedb This will allow us to do this whilst online so no downtime required. This is required for gerrit 3.x which will remove support for online migration. See doc at https://gerrit-review.googlesource.com/Documentation/note-db.html#migration Note: Requires us to first migrate to 2.15 before merging this. Change-Id: Id2486db96c069d33f58c98504004a431eda5faf7 | 07 September 2017, 00:23:14 UTC |
| df4e4cf | Antoine Musso | 31 August 2017, 14:27:56 UTC | contint: include mediawiki::packages::php5 mediawiki::packages::php5 is added on the CI images but that does not reflect in the contint module. Change-Id: Ifa7107e1d524fb93ad8287d32d4ffd2f35d2ce78 | 07 September 2017, 00:17:42 UTC |
| 55586f8 | Andre Klapper | 08 August 2017, 12:17:15 UTC | Phabricator: Block vandalism IP that repeatedly added comments / uploaded files Change-Id: I42707bdbf081257f1b96125d4c56da3a8f9eb694 | 07 September 2017, 00:13:41 UTC |
| 7decb5c | Timo Tijhof | 05 September 2017, 22:54:50 UTC | jsbench: Prep osmium for decom and remove 've' and 'jsbench' roles The 've' and 'jsbench' roles are no longer used. Prepare osmium for decom. Bug: T175093 Change-Id: I99356298ba12d574d84528306e9dbc33c270873c | 06 September 2017, 23:52:29 UTC |
| d893b1d | Timo Tijhof | 05 September 2017, 22:05:53 UTC | webperf: Decom webperf::ve service Bug: T175083 Change-Id: I76bf0e43d700120551f79013a2a6dd7394ab63be | 06 September 2017, 23:49:56 UTC |
| cb61b2f | Paladox | 04 September 2017, 20:58:35 UTC | Gerrit: Set base url for commitlink This is needed so that these will work in polygerrit. Change-Id: I9d572ab932fb811c2616bc8db3142f298acf3a3b | 06 September 2017, 22:35:07 UTC |
| 3e336d4 | cpettet | 06 September 2017, 22:03:26 UTC | openstack: preserve limiting SSH listen IP for nova network host Bug: T171494 Change-Id: Icfeaa72e699a59fb9bb3a9c7f5e872295d0060ab | 06 September 2017, 22:03:26 UTC |
| 9a102d8 | cpettet | 06 September 2017, 21:55:06 UTC | openstack: add nova-fullstack upstart template to openstack2 Bug: T171494 Change-Id: I99645ce781c99b9ea14c319a50b1f3bd53e34b44 | 06 September 2017, 21:56:07 UTC |
| 9e9af28 | cpettet | 06 September 2017, 21:46:49 UTC | openstack: bare_metal is a hash and set main accordingly Bug: T171494 Change-Id: Ic97757435c1f7b47eda28c7ba673421580927a8d | 06 September 2017, 21:48:58 UTC |
| e564fe1 | Ottomata | 06 September 2017, 21:23:25 UTC | Enable topic deletion for kafka-jumbo Change-Id: I8fc24fbb39f22f1ab0002df18c7fb9d4ef98613d | 06 September 2017, 21:24:10 UTC |
| 800b20d | cpettet | 06 September 2017, 21:19:25 UTC | openstack: pass in network_public_ip for nova network Bug: T171494 Change-Id: Ib83532ae2a38b817ec3bcf87ea085679f26f9af8 | 06 September 2017, 21:20:12 UTC |
| 406bde1 | cpettet | 06 September 2017, 21:09:58 UTC | openstack: correct key paths for nova/network hiera Bug: T171494 Change-Id: I61ccea72f715006f00ea88c6bc7026bba5ff0cc3 | 06 September 2017, 21:11:30 UTC |
| 52d992d | Ottomata | 06 September 2017, 21:09:09 UTC | Add kafka rack (row) awareness configs Bug: T167992 Change-Id: Ie90aa97d8b5f456b343de7ff5400aac917d63823 | 06 September 2017, 21:10:26 UTC |
| 68f921c | cpettet | 06 September 2017, 20:59:27 UTC | openstack: port hiera settings to new openstack::net role Bug: T171494 Change-Id: I0ebbd4a073799a18263dfb4496080e467ef28c32 | 06 September 2017, 21:04:21 UTC |
| e8e8c7e | Ottomata | 06 September 2017, 21:03:07 UTC | Add monitoring hostgroup for jumbo_kafka_eqiad Change-Id: Ia5a65d3fe2f2800090751886c6bc12bd07cfc057 | 06 September 2017, 21:03:07 UTC |
| ad54c2e | Ottomata | 06 September 2017, 20:53:04 UTC | Allow new kafka-jumbo hosts to talk to zookeeper on conf* Bug: T167992 Change-Id: Ia5ff73b2027de773a362e57a305dbe54f9793564 | 06 September 2017, 20:53:04 UTC |
| 2963d58 | Ottomata | 06 September 2017, 20:43:17 UTC | /etc/kafka/mirror should require confluent-kafka package Also remove debug notify Bug: T376379 Change-Id: I787e9e353d523f3686d66339c5969d6785aa277d | 06 September 2017, 20:43:17 UTC |
| 9acca73 | Ottomata | 06 September 2017, 20:39:02 UTC | Use fq +profile::kafka::broker::kafka_cluster_name when configuring a broker kafka_cluster_name will use a global 'kafka_cluster_name' if it is in scope without suffixing it with $::site. Bug: 376379 Change-Id: I48290c7cefcbbe7456434d9f3b05efd1206c00e8 | 06 September 2017, 20:39:02 UTC |
| 2f4ce76 | Ottomata | 06 September 2017, 20:33:36 UTC | Debugging Bug: T167992 Change-Id: If01ab13d4eb40fb5aade1819837ab268cf2492c1 | 06 September 2017, 20:34:07 UTC |
| 9c3202c | Ottomata | 06 September 2017, 20:29:00 UTC | Add debug notifies to figure out error message in prod undefined method `[]' for nil:NilClass at /etc/puppet/modules/profile/manifests/kafka/broker.pp:92 Bug: T167992 Change-Id: I650b257b6cbf2aea621485b650b4ddd5863c9e8f | 06 September 2017, 20:29:00 UTC |
| a7a4847 | Ottomata | 06 September 2017, 20:21:36 UTC | Don't use ganglia on new kafka-jumbo hosts Change-Id: I407d3ea82b31e6b8540d86c2e5d865dd6ca30ec0 | 06 September 2017, 20:21:36 UTC |
| 20c7f89 | Ottomata | 06 September 2017, 20:16:56 UTC | Revert "Revert "Revert "Un-apply kafka role -- these should be stretch, not jessie! :/""" This reverts commit 3334ed6888c6e045c473e79f3485b59ea3e167aa. Change-Id: Ib7440100c7ccd63b7aad9c76de2fd4164fa6a52b | 06 September 2017, 20:16:56 UTC |
| 3334ed6 | Ottomata | 06 September 2017, 20:13:46 UTC | Revert "Revert "Un-apply kafka role -- these should be stretch, not jessie! :/"" This reverts commit be09a629da2513e1c27af82d8beb20a89923bf06. Change-Id: I52af779a338d23fba381da001569242a63d17d4b | 06 September 2017, 20:13:46 UTC |
| be09a62 | Ottomata | 06 September 2017, 20:11:29 UTC | Revert "Un-apply kafka role -- these should be stretch, not jessie! :/" This reverts commit 9e4fe494c12f9fcc2b55a44debd3391359519b42. Change-Id: I75aee28caf0f1cdf579e864bd70b281fc447be7d | 06 September 2017, 20:11:40 UTC |
| 584f3b4 | cpettet | 06 September 2017, 19:57:22 UTC | openstack: move virt settings under role/eqiad correction to 376331 Bug: T171494 Change-Id: I6d5a3e3ea521ed5dc44f751c82c7c0cc882b6e18 | 06 September 2017, 19:58:54 UTC |
| b381ab8 | Ottomata | 06 September 2017, 19:47:06 UTC | Install kafka-jumbo as Stretch Bug: T167992 Change-Id: If8092f218a8395c7b86baf6d348f6002e91d85c0 | 06 September 2017, 19:48:34 UTC |
| 9e4fe49 | Ottomata | 06 September 2017, 19:45:29 UTC | Un-apply kafka role -- these should be stretch, not jessie! :/ Bug: T167992 Change-Id: Ie4369ac12ef1ad054ce3f70ed04c29a186ef7399 | 06 September 2017, 19:45:29 UTC |
| 8b8c9e4 | Ottomata | 06 September 2017, 19:40:08 UTC | Apply kafka::jumbo::broker on new kafka-jumbo100* hosts Bug: T167992 Change-Id: I24fde3d997cd1d30460f77514bdaa4ce637e2f7b | 06 September 2017, 19:40:08 UTC |
| 356fc88 | cpettet | 06 September 2017, 19:12:01 UTC | openstack: preserve hiera settings for new virt role Bug: T171494 Change-Id: Ied6db81e230ab406b2f742b463f9d7f491346e2c | 06 September 2017, 19:12:01 UTC |
| 6434c7f | cpettet | 06 September 2017, 18:56:42 UTC | openstack: clean up common and nova common packages Bug: T171494 Change-Id: Ibda4885b9fd8959493b3f2bf4e0354cfded8379a | 06 September 2017, 18:57:37 UTC |
| 84c651b | Paladox | 01 June 2017, 18:20:12 UTC | Gerrit: Reveal the author in the title of the email Bug: T43608 Change-Id: Iab4e01b9cbf3fa27265828190e33bd62264b94b9 | 06 September 2017, 18:25:58 UTC |
| fe2c5aa | cpettet | 06 September 2017, 18:19:55 UTC | openstack: @resolve for saltcleaningcert rule Bug: T171494 Change-Id: I12bf03abc8a31dc10f2ee248fc90cbc2307bed28 | 06 September 2017, 18:21:16 UTC |
| 3692096 | cpettet | 06 September 2017, 18:07:35 UTC | openstack: cease managing nova files via openstack/common.pp This leaves a few nova.conf files orphaned for a short while while in transition. * Horizon (does this even need it?) * wikitech (does this even need it?) Bug: T171494 Change-Id: Ibb99909610cb536db5420290e55735824401e37e | 06 September 2017, 18:11:13 UTC |
| 620bf83 | Brandon Black | 06 September 2017, 15:17:28 UTC | browsersec: affect API calls and non-GET as well While we do want to restrict browser page replacements to /wiki (avoiding common cs/jss/etc fetches, as well as Special: pages), we should try to affect API accesses (and/or non-GET traffic in general) as well. There shouldn't be much of this percentage -wise, but it's important in the rare cases it happens that they see the 418 error as well and realize their software needs updating.... Bug: T163251 Change-Id: I10cfb4192ad7194564c8cd06420b092fe615ffd3 | 06 September 2017, 18:10:24 UTC |
| ce14f15 | Brandon Black | 11 July 2017, 18:35:02 UTC | VCL: fixed keep values: 7d def, 1d for text The original idea of scaling to the TTL doesn't make much sense on text in light of the fact that the TTLs emitted by MW are counting down over time anyways, resulting in artificially-low keep values. On the upload cluster the problem was worse because our default TTL is 1d anyways, resulting in 1d keep times when we really need seven. This could be exacerbating our mailbox lag issues as well. We'd prefer to fix them all at 7d, but we're also pretty sure that MediaWiki violates HTTP semantics on conditional fetches (sends 304s when content has in fact changed), so we'll limit that case to 1d in the cache::text config explicitly for now. Change-Id: Ibb4be5b2311e3e4b0b6aa33f3dc59c1be0128923 | 06 September 2017, 18:01:25 UTC |
| 9b37aaa | cpettet | 06 September 2017, 17:52:58 UTC | openstack: set labspice to fqdns Bug: T171494 Change-Id: I48fa90a6aee9a31a4305c17c00efb447adea110d | 06 September 2017, 17:54:21 UTC |
| 032c749 | Bryan Davis | 22 August 2017, 19:06:45 UTC | planet: add Wikimedia Readers blog Change-Id: I6d47c3f5c8d4e8a8624673d3b64dcdbbcd3881ec | 06 September 2017, 17:49:50 UTC |
| e0d200f | cpettet | 06 September 2017, 17:44:05 UTC | openstack: set spice_hostname Bug: T171494 Change-Id: I0697fedeffc153486bf300d6cdbc9a44840675ba | 06 September 2017, 17:46:38 UTC |
| 94c5794 | cpettet | 06 September 2017, 17:32:30 UTC | openstack: key path correction for labtest nova network Bug: T171494 Change-Id: I4ca6424e6aaf19027779d274c3fe9b05bee46c1f | 06 September 2017, 17:33:10 UTC |
| 872e81d | cpettet | 06 September 2017, 17:28:02 UTC | openstack: rabbit_user keypath nova specific Bug: T171494 Change-Id: I7178ef70f651405e36abbef1debefddecbcf2019 | 06 September 2017, 17:28:43 UTC |
| 893f2c7 | cpettet | 06 September 2017, 17:21:51 UTC | openstack: refactor corrections for labtestcontrol * pass down in rabbit_user * keep controller as IP in api-paste.conf * set standby controller even if dupe Bug: T171494 Change-Id: I26a66e03d31b868ceca9e1c4d2a5fdc8d9ea378c | 06 September 2017, 17:23:56 UTC |
| cec8b43 | Daniel Zahn | 06 September 2017, 17:06:33 UTC | admins: add schoenbaechler to LDAP-only WMF users For access to pivot.wikimedia.org, WMF employee per: cn: Schoenbaechler mail: rschoenbaechler@wikimedia uid: schoenbaechler https://phabricator.wikimedia.org/p/schoenbaechler/ Bug: T175156 Change-Id: I5c69cbe59aee3c1ae29bb2d0d3655983b324feb2 | 06 September 2017, 17:11:35 UTC |
| 63c0946 | cpettet | 06 September 2017, 17:04:50 UTC | openstack: amend keypaths for labtest nova settings Bug: T171494 Change-Id: I97b4705b91d32bd0b1b911628eb621ca99c2ff48 | 06 September 2017, 17:04:50 UTC |
| ae717b5 | cpettet | 06 September 2017, 16:58:36 UTC | openstack: correct key paths for profiles Bug: T171494 Change-Id: I2b2083a6fc5cd023279363a7830cda85ff3cb50f | 06 September 2017, 17:01:29 UTC |
| 63ade1e | cpettet | 25 August 2017, 22:27:24 UTC | openstack: nova components for module/profile/role Nova notify and subscribes temporary commented out Bug: T171494 Change-Id: I90e2268d21d163ca3608f5a81243ad2ad0c9aaab | 06 September 2017, 16:45:06 UTC |
| 1c09834 | Riccardo Coccioli | 28 August 2017, 08:24:49 UTC | Cluster management: add some roles from neodymium * In order to be able to run the reimage script from both cumin masters, moving some required roles that were only applied to neodymium to the generic cluster::magament role: - ipmi::mgmt - access_new_install Bug: T166300 Change-Id: Id1d73f9e4490f8b4a7aa5282b2bfc1e7f8c53d05 | 06 September 2017, 15:44:06 UTC |
| bcf19c4 | andrewbogott | 28 August 2017, 18:46:05 UTC | openstack: allow primary glance server to rsync to secondary Change-Id: I635644a5d55aa276ee94fbe815b6fd471157ca6e | 28 August 2017, 18:46:05 UTC |
| cd60a2e | Moritz Muehlenhoff | 06 September 2017, 14:20:27 UTC | Remove analytics salt grains previously used by debdeploy Change-Id: I5225d36deaa036967b4a85e4cfea544625c0c0e1 | 06 September 2017, 14:55:13 UTC |
| 622fff5 | Moritz Muehlenhoff | 06 September 2017, 14:35:06 UTC | Remove dumps/snapshot salt grains previously used by debdeploy Change-Id: Iedc3f43fb5bc56059d319df54ce53d1282cf4ec4 | 06 September 2017, 14:53:39 UTC |
| c85c28b | Alexandros Kosiaris | 06 September 2017, 14:25:13 UTC | kubernetes: Allow switching storage backend versions kube-apiserver supports the storage-backend argument that allows setting the etcd protocol version that it will use to connect to the datastore. This defaults to etcd2 and we are going to use this version for now but in the future this is expected to be bumped to etcd3. This will be possible via hiera flags per cluster so it is expected to happen without major cross cluster problems Change-Id: Id6d160cad1380e3074336d85443e6320dab8a0cd | 06 September 2017, 14:38:22 UTC |
| ad2f02e | Emanuele Rocca | 06 September 2017, 14:26:41 UTC | varnish::logging::statsd: instance_name future parser check With the future parser, the empty string evaluates to true in boolean context. Change-Id: I2c537e8b458cc1753d6dcb9ec1b06bc207d2d2ba | 06 September 2017, 14:27:28 UTC |
| 32454ab | Filippo Giunchedi | 06 September 2017, 14:22:42 UTC | cassandra: enable jmx_exporter for cassandra 3 cluster Bug: T169939 Change-Id: Ie03df3e40923e957906b238fd40421735c5a0eab | 06 September 2017, 14:23:53 UTC |
| 30b600c | Moritz Muehlenhoff | 06 September 2017, 12:49:53 UTC | Remove kafka salt grains previously used by debdeploy Change-Id: I48ad1482344ca114c9a06a659aa4ed139043c0d1 | 06 September 2017, 14:09:48 UTC |
| 10dafa4 | Moritz Muehlenhoff | 06 September 2017, 12:47:41 UTC | Remove swift salt grains previously used by debdeploy Change-Id: I9160953b3cf39b2440556a162e8228dbeb36a7e5 | 06 September 2017, 14:08:12 UTC |
