fa2ac4d | Ottomata | 12 September 2017, 16:22:46 UTC | role::kafka::jumbo::broker - Don't include standard if already included In labs, this is included elsewhere with a different parameter. Change-Id: I3dae0f00b86c585f715ff78caca10bdae975880a | 12 September 2017, 16:24:36 UTC |
69b5452 | niharika29 | 12 December 2016, 16:20:22 UTC | Deploy scholarships with scap3 Bug: T129134 Depends-On: Ibf70cc31bb0dc6e0dce366cdc5b5eb46cbc242e7 Change-Id: I24094dd9335b930f9933d8f58d53f5be3ae25e23 | 12 September 2017, 16:13:22 UTC |
34d5725 | Amir Sarabadani | 30 August 2017, 15:53:23 UTC | Use new logo of WMF for gerrit Based on T174576#3585053 Bug: T174576 Change-Id: Id9dce8cf88f68c2054189f0c97af7d7d51387d59 | 12 September 2017, 16:05:50 UTC |
b5db731 | Jaime Crespo | 12 September 2017, 14:12:00 UTC | mariadb: Move db1059 from mediawiki to misc (m3) Bug: T175679 Change-Id: Ib0f3012f36feaa00fb428a550c8ee3f20dc8faf2 | 12 September 2017, 15:48:36 UTC |
edf1f8c | Giuseppe Lavagetto | 12 September 2017, 13:06:25 UTC | k8s: fix template scoping Since the future parser has different scoping rules, do as follows: * Add a master_host parameter to k8s::infrastructure * Explicitly declare k8s::infrastructure_config in k8s::node * Change the "include" in a "require" for the config class in k8s::proxy and k8s::kubelet as it's the proper logical relationship Bug: T171704 Change-Id: I7a59f3337d3f1d5c96eafbe3240a1544ef2366d8 | 12 September 2017, 15:35:50 UTC |
2271aa0 | Guillaume Lederrey | 04 September 2017, 14:08:25 UTC | elasticsearch - deploy plugins with debian package instead of trebuchet Bug: T158560 Depends-On: Ibf1f12c775b0b59b59fd89cd0b09dd35c97c0190 Change-Id: I69322724369e4574a1d048cc4c75eaffdbc2b260 | 12 September 2017, 15:31:23 UTC |
093068d | Jaime Crespo | 12 September 2017, 15:06:28 UTC | mariadb: Fix typo on view creation query (missing `) Followup to gerrit: 377480 Change-Id: I7cc8259505256ba9fcb4f787e66cbc88ba650ae2 | 12 September 2017, 15:11:24 UTC |
8c87178 | elukey | 12 September 2017, 14:14:46 UTC | admin::data.yaml: Set cwdent to ldap user only Bug: T170878 Change-Id: Ib5c54c791d4ca99d6944b0e52eacc4df7abf74a6 | 12 September 2017, 15:07:03 UTC |
b89d5f5 | Jaime Crespo | 12 September 2017, 14:47:12 UTC | mariadb: Microsecond view bug fixed, removing workaround See: * https://jira.mariadb.org/browse/MDEV-9175 * https://bugs.mysql.com/bug.php?id=60628 * https://bugs.mysql.com/bug.php?id=78506 Change-Id: Ie274663397813669fcf65116c202fbc7c40fdbcf | 12 September 2017, 14:52:25 UTC |
21bfef4 | Moritz Muehlenhoff | 12 September 2017, 14:07:02 UTC | Create a repository component component/ci This will be used to co-installable PHP packages used by CI, they are not needed outside of CI. Change-Id: Ib0b5fbf74d5674ac1f15a30be55ef493014d9369 | 12 September 2017, 14:40:32 UTC |
8fc1fed | Faidon Liambotis | 12 September 2017, 12:13:59 UTC | nagios_common: use the template if empty($content) We currently use a stock template if $content is undef, but $content is set to secret('nagios/contacts.cfg') in the role class, which may return '' in a test environment and seems to vary between current and future parser. Change the if to vary on $content being empty() as well. Change-Id: I5fc26b00f2314bc27fb2d1ba7110ba1040439ef1 | 12 September 2017, 14:38:24 UTC |
8bed3f7 | Faidon Liambotis | 12 September 2017, 11:59:03 UTC | grafana: quote 'type' as the class' parameter As type is a reserved word in the future parser and can't appear as a bareword. Change-Id: Ifbb9a3b91222e00dca8fabe7208b12585ce64564 | 12 September 2017, 14:28:51 UTC |
58a5755 | Faidon Liambotis | 12 September 2017, 11:47:21 UTC | openstack: move $ssl_settings near the template As passing it down from role::labs::openstack::nova::manager to openstack::openstack_manager without scoping it is not supported in the future parser. Change-Id: I1b96beef7b18bad3ff2d008e83cf307cf9ebecec | 12 September 2017, 14:23:26 UTC |
891ec68 | Faidon Liambotis | 12 September 2017, 11:41:12 UTC | ganglia: fix class dependencies Depend on Class['::ganglia::web'] instead of Class['ganglia::web'] from role::ganglia::web, as in the current parser Class['ganglia::web'] is ambiguous and in this case, refers to role::ganglia::web. Change-Id: I47e7727bdb05c3dfbfbc6f334f255456885c7cc5 | 12 September 2017, 14:21:23 UTC |
e8f4910 | Jaime Crespo | 23 August 2017, 15:26:35 UTC | install_server: Remove db1069 & dbstore2001 from the list of reimaging db1069 and dbstore2001 have been reimagened as jessie/stretch. Do not reimage them again by accident. Change-Id: I7fe42cdf3bb24d33fc4d8b49ef24433654e94bf7 | 12 September 2017, 14:11:38 UTC |
8ade5e4 | Faidon Liambotis | 12 September 2017, 11:22:28 UTC | Use String as redis::instance's $name (noop) Replace instances of: redis::instance { 6379: with: redis::instance { '6379': across the tree. The former is odd syntax even with the current parser and actually rejected in the future parser. Also do the same with hieradata, for profile::redis::master::instances. Change-Id: Id70162e5b56f102bcba38c3618e7a50719401d82 | 12 September 2017, 14:02:35 UTC |
ed96bfd | Guillaume Lederrey | 02 August 2017, 16:58:11 UTC | redis - instance names should be strings in puppet 4 Since the redis instances (`profile::redis::master::instances`) are used as resource titles, they should be strings. I found this error while checking maps for compatibility with puppet 4. OCG is affected as well. Change-Id: I8c65d0039d84bec38c639bfd3b25f5dbc66182a9 | 12 September 2017, 13:55:44 UTC |
01e58a8 | Faidon Liambotis | 12 September 2017, 11:35:45 UTC | statsd_proxy: use validate_numeric() Use validate_numeric() to validate the $server_port parameter as a numeric and the $backend_ports parameter as an array of numerics, instead of trying to validate them with regular expressions. Validating Integers against REs breaks with the future parser and this is easier to read anyway. Change-Id: I9cf253bf84231767d064b39a306690f79f2f6c4b | 12 September 2017, 13:53:40 UTC |
9cf8802 | Faidon Liambotis | 12 September 2017, 11:32:21 UTC | uwsgi: use validate_numeric() Use validate_numeric() to validate the $port parameter, instead of trying to validate it with a regular expression. Validating Integers against REs breaks with the future parser and this is easier to read anyway. Change-Id: Id21b3dce62db579a7e8c0df59912eeb39e9fe404 | 12 September 2017, 13:51:16 UTC |
6cff8f3 | Faidon Liambotis | 12 September 2017, 11:28:51 UTC | nutcracker: use validate_numeric() Use validate_numeric() instead of validate_re() for the $verbosity parameter. Besides being simpler to read, it is currently implicitly defined as an Integer, and validating an RE against an Integer fails with the future parser. Change-Id: Ic804bb758dc9c846d5fef9e7a5ab8481e422ae89 | 12 September 2017, 13:45:27 UTC |
e643ade | Faidon Liambotis | 12 September 2017, 11:37:50 UTC | swift: use !~ instead of ! $title =~ /.../ Current form breaks with the future parser, probably due to operator precedence. Change-Id: I14e7f0db85c0f447b74301928d440795963f920c | 12 September 2017, 13:41:17 UTC |
91901e6 | Emanuele Rocca | 11 September 2017, 12:22:42 UTC | varnish::instance: fix template attributes scope Change-Id: Ib2723ce0145335fd22b667d6c41090835c814198 | 12 September 2017, 13:34:30 UTC |
6427711 | Moritz Muehlenhoff | 12 September 2017, 13:25:30 UTC | Add apache2-dev to package list Provides /usr/share/perl5/Debian/Debhelper/Sequence/apache2.pm, which is needed during source package generation in pbuilder. Change-Id: If745f8a84deb60279426d74fa5d4898500e07701 | 12 September 2017, 13:25:30 UTC |
b49723c | elukey | 12 September 2017, 12:19:27 UTC | Remove access to analytics posix groups for users not needing them. Bug: T170878 Change-Id: I6c0bb918d8c1fc2cfa4270c8c0963da5736bdfb9 | 12 September 2017, 13:17:18 UTC |
f6af092 | Brandon Black | 12 September 2017, 11:57:46 UTC | Add NUMA meminfo stats for cache+lvs nodes Bug: T175636 Change-Id: I045da8a3a102d48d58322e57c7267ffd959fd4c6 | 12 September 2017, 11:58:59 UTC |
c2c1e10 | Moritz Muehlenhoff | 11 September 2017, 15:57:45 UTC | Remove salt grains for LVS Salt is being removed from our infrastructure and replaced by Cumin. Change-Id: I0c4140bc2103ec932909ab7824cb4da0d54cab3d | 12 September 2017, 11:02:26 UTC |
5edc761 | Moritz Muehlenhoff | 11 September 2017, 14:02:42 UTC | Remove package declarations for debdeploy-minion/debdeploy-common These were initially absented to remove existing installations, can now be removed for good. Change-Id: I33016cc3da228138c302ad5d9a3e5839c86cc4a3 | 12 September 2017, 10:20:07 UTC |
909116f | elukey | 12 September 2017, 09:53:12 UTC | network::constants: update IP addresses of the new Kafka hosts The hosts were incorrectly put inside the Analytics VLAN. Bug: T167992 Change-Id: Icba26d41bf6a5dfb1ceb058de14c660fe2b8a005 | 12 September 2017, 10:14:12 UTC |
0a7062a | Filippo Giunchedi | 12 September 2017, 09:53:28 UTC | prometheus: increase jmx_exporter timeout Default is 10s, which is sometimes too low for jmx_exporter to get all results in time. Bug: T171772 Change-Id: I34c80239c56aeb30fb849f8fbc2c9a2f2375a592 | 12 September 2017, 09:55:19 UTC |
2214c4c | Moritz Muehlenhoff | 11 September 2017, 07:12:16 UTC | Stop installing debdeploy-minion for new WMCS VPS instances debdeploy-minion is the package name used by the Salt-based debdeploy, the new cumin-based client is called debdeploy-client. I'm not sure if debdeploy is currently used in WMCS, though? unattended-upgrades is likely doing all the updates, now? OTOH it doesn't hurt to have it available in case it turns out to be needed again at some point. Change-Id: Ib9534e0d56304c773c2574c76cee808569ccc898 | 12 September 2017, 08:05:47 UTC |
cbd8a02 | Stanislav Malyshev | 11 September 2017, 23:31:50 UTC | Add categories RDF dump into the index page Bug: T173892 Change-Id: I84accad4cb25f9bafbb6ef015c638425672e884b | 11 September 2017, 23:31:50 UTC |
4cac509 | RobH | 11 September 2017, 21:00:53 UTC | adding documentation on renaming users renaming users is possible, but has some steps, detailing them in the readme so they are followed. Change-Id: I2c64faeff9bf56e4cc6ad619dabcc9e894fb8f72 | 11 September 2017, 21:02:19 UTC |
9103a2d | Merlijn van Deen | 04 September 2017, 19:08:17 UTC | [labs] Rename wmflabs-* files to wmcs-* Bug: T174082 Change-Id: I6669fe476ead5e7d1a9a02c21695b56986e9522f | 11 September 2017, 20:54:59 UTC |
dea95b3 | cpettet | 11 September 2017, 20:27:34 UTC | nodepool: make puppet match current settings Nodepool melted rabbitmq saturday and we have been tuning it back up since then. We have been sitting here for a few hours after the previous very conservative settings built up a bit of backlog. Bug: T170492 Change-Id: Icbf8e7e0671a41508f9c75f2b7b80254b92e5d47 | 11 September 2017, 20:27:34 UTC |
d9abcbb | Daniel Zahn | 11 September 2017, 18:13:12 UTC | admins: delete unused group sectools-roots This group was meant to be used on zosma, but that Ganeti VM and the related access request had been rejected so this was not used. Bug: T138650 Change-Id: Ic818072f7a498a24d6d4f2093886562560e2ad24 | 11 September 2017, 18:13:12 UTC |
d78b700 | Daniel Zahn | 11 September 2017, 18:01:38 UTC | admins: fix group membership for 'rho' The group should have been 'analytics-privatedata-users' not 'statistics-privatedata-users'. Follow-up to I3788631dbaa460a2b Bug: T175204 Change-Id: I074df43c845983d240184c8a6a7ffc6e34cb040f | 11 September 2017, 18:01:38 UTC |
d742464 | Daniel Zahn | 08 September 2017, 16:22:34 UTC | admins: add rho to analytics-privatedata-users follow-up to Ia90b710d67251e2 Adds user rho (Rita Ho) to analytics-privatedata-users purpose: review analytics data for the Wikipedia Android app from SWAP notebooks Per https://wikitech.wikimedia.org/wiki/SWAP#Access one of the groups analytics-privatedata-users, statistics-privatedata-users or researchers is needed for the requested access. The request was specifically for analytics-privatedata-users. What the difference is can be seen here: https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Access_Groups This specific group is needed for Hive access to query private data. Bug: T175204 Change-Id: I3788631dbaa460a2b750a3a6a869e7b2216f89f4 | 11 September 2017, 16:57:59 UTC |
f21bc09 | RobH | 11 September 2017, 16:18:12 UTC | Revert "revoke James F's ssh key" James laptop went missing, but turns out OIT had it and it was NOT a security issue. Reverting back his access. This reverts commit 6612a74be5e383c6e33146a8bd7b3101cb031026. Bug: T175505 Change-Id: I69c4c360fbe920c8d7395657a419529a68c5bba8 | 11 September 2017, 16:24:33 UTC |
4caef48 | Andrew Bogott | 11 September 2017, 16:08:24 UTC | Revert "labmon: prometheus classes to monitor the keystone api endpoint" This conflicts with existing nginx things on labmon. Needs more work. This reverts commit 054c8fe0c1c6ffe5e14f901b0b9b2ea0a03295da. Change-Id: Ibac8cd4f641034a5dcb272a1235028246a5b3772 | 11 September 2017, 16:08:24 UTC |
054c8fe | andrewbogott | 27 August 2017, 17:04:12 UTC | labmon: prometheus classes to monitor the keystone api endpoint Change-Id: Ia8831bd328bb4239e34f4740b61b9a6e135c5736 | 11 September 2017, 07:31:12 UTC |
1b88e53 | andrewbogott | 11 September 2017, 07:15:54 UTC | prometheus: Add additional blackbox module http_200_300_connect This is the same as http_connect except it regards 300 as success. This will be useful for openstack service testing. Bug: T167556 Change-Id: Ia1cba2fc6265e0284e4b224c76d8211049c2aa59 | 11 September 2017, 07:31:02 UTC |
913b498 | Bryan Davis | 10 September 2017, 07:04:38 UTC | rabbitmq: remove orphan files Remove files that were copied to the rabbitmq module in 97deadd. Change-Id: Ib92b7d2e4d9e0f56a89c2d81bdc3eaa3515b172c | 11 September 2017, 14:59:17 UTC |
f8888f1 | Brandon Black | 11 September 2017, 13:21:15 UTC | VCL: Improve cache status stats calcuations The existing calculation for X-Cache-Status tries to make a special exception for the known layer-differential pass cases while assuming that the only known cases are ones where the frontend passes but the backend(s) may miss or hit. We're soon introducing the opposite (fe miss may lead to a backend pass), and also the existing logic looks broken to me anyways. This simple and more-universal view is that if any layer reports a true miss, we count the request as a miss (there was an opportunity to cache somewhere, and we failed). Only those that report pass at every layer will be counted as a global pass. varnishxcache also has the same strange (and probably faulty) layer-differential miss/pass problems as X-Cache-Status, and is re-worked to use the same logic as above. This may cause small jumps in our current cache stats calculations due to re-interpretation. These are not behavioral changes, just changes in reporting. Change-Id: I025d2910149f9754646fcdfd902dfa6ea1b25a08 | 11 September 2017, 14:25:29 UTC |
668ee8f | Alexandros Kosiaris | 11 September 2017, 14:18:45 UTC | Revert "Revert "sshd_config: Increase MaxAuthTries"" Revert for a few days while we revert the repos to use the new setting This reverts commit e35bee9f64296182b13f0527e29d01fefbb511cc. Bug: T172333 Change-Id: I0a9c8377b9f3214ca09cc01a43d37ca32d201ce6 | 11 September 2017, 14:20:17 UTC |
d48bd34 | Filippo Giunchedi | 11 September 2017, 13:59:38 UTC | thumbor: use memorysize_mb fact for unit MemoryLimit Using a percentage for MemoryLimit is a systemd 231 feature. Calculate the percentage at puppet time in the template instead. Bug: T121388 Bug: T174997 Change-Id: I3da3c20016a2dc3fc38c8d1830832227adc4bc29 | 11 September 2017, 14:11:07 UTC |
bc77229 | Bryan Davis | 10 September 2017, 06:50:17 UTC | rabbitmq: Add drain_queue utility script Add a utility script that can be used to view and drain a rabbitmq queue filled with messages from OpenStack's oslo.message component. Bug: T170492 Change-Id: I93062a86bc0c74342467c5009e300bbd429ee15b | 11 September 2017, 14:07:33 UTC |
63355d6 | cpettet | 08 September 2017, 12:39:29 UTC | openstack: re-enable notify and subscribe for nova Bug: T171494 Change-Id: Ic98ff48c44cbdbd24cd4c170664a9e7410cadae7 | 11 September 2017, 13:51:34 UTC |
d18d795 | Moritz Muehlenhoff | 11 September 2017, 11:28:20 UTC | Remove old debdeploy/salt packages via puppet These binary packages were only needed for the salt-based variant of debdeploy, remove them across the fleet (puppet snippet can be removed later on) Bug: T164817 Change-Id: Ia8949ee332e8d7ba63c1e5571c83d0d6d4cbb490 | 11 September 2017, 13:48:16 UTC |
827f78b | Giuseppe Lavagetto | 11 September 2017, 13:01:48 UTC | role::scb: only include profiles, not roles Change-Id: I456d3cb3bcec2c7ba7340aa93e8f3a70aaae35c5 | 11 September 2017, 13:36:43 UTC |
6b88935 | Giuseppe Lavagetto | 11 September 2017, 11:15:03 UTC | citoid: move to role/profile Change-Id: I349c1275f92372c6badb5c14ae4839851f665282 | 11 September 2017, 13:34:04 UTC |
434ca9e | andrewbogott | 11 September 2017, 05:08:39 UTC | wt-static: reword alert messages Icinga was dropping the question-marks from the descriptions which made for puzzling alerts. Change-Id: Ic2ed88a0ec498221de2aa127c4b1a5bb8a2a2170 | 11 September 2017, 05:12:20 UTC |
64f9053 | Moritz Muehlenhoff | 11 September 2017, 13:16:48 UTC | Add additional alias Change-Id: I6c9c0218a048f97cf1a1c375c55bde1dc844b4e6 | 11 September 2017, 13:16:48 UTC |
f8ef5b8 | Moritz Muehlenhoff | 11 September 2017, 12:13:22 UTC | Add library alias for src:file Change-Id: I4c3396225aaaad6dd410eb38a29f63c6d6dfab1e | 11 September 2017, 12:13:22 UTC |
ac2a30c | Moritz Muehlenhoff | 11 September 2017, 10:39:48 UTC | Convert debdeploy to a profile and make it part of role::cluster::management The salt-based version of debdeploy was tied to a specific server since the sqlite-based job database was on local storage. This limitation no longer exists with the cumin-based debdeploy, so it can be run from any cumin server. As such, convert debdeploy to a profile and integrate it into the cluster management role. Change-Id: I353630cc2294b57cbeb8959146b82cb79df62d96 | 11 September 2017, 10:49:03 UTC |
0fcb449 | Moritz Muehlenhoff | 11 September 2017, 08:26:15 UTC | Switch role::debdeploy::master role to Cumin-based variant Switch debdeploy.conf to the new variant based on Cumin and install the new debdeploy-server binary package instead of the previously used debdeploy-master based on Salt. Change-Id: Iff3b570c04b24116f42f1385d687e2c05161bae7 | 11 September 2017, 10:28:31 UTC |
a8b72d1 | elukey | 16 August 2017, 10:52:28 UTC | Introduce role::analytics_cluster::coordinator This is the first step to move all the analytics1003's roles to profiles: one single coordinator role appears in site.pp. Bug: T167790 Change-Id: I94480677b16821054aaa85ac7d0d7d345c0fec40 | 11 September 2017, 10:09:59 UTC |
e35bee9 | Alexandros Kosiaris | 08 September 2017, 15:11:53 UTC | Revert "sshd_config: Increase MaxAuthTries" Since we now have the capability to add keyholder_key to scap.cfg forcing scap to use the correct key, we no longer need to workaround introduced in 099990dc7, hence revert it This reverts commit 099990dc778e5a4fb4481a1218cda3007aaefce3. Bug: T172333 Change-Id: I5efbd8e0a194ab8da169fe62c96f3bc605e18035 | 11 September 2017, 10:01:00 UTC |
f90874c | Filippo Giunchedi | 11 September 2017, 09:20:07 UTC | thumbor: add logstash config for codfw Also only use logstash handler if it is configured Bug: T150734 Change-Id: I027ccd6219cc763b6f634ade03a971551260b5e5 | 11 September 2017, 09:31:46 UTC |
442b04e | Emanuele Rocca | 08 September 2017, 06:44:47 UTC | prometheus: add aggregation rules for IPVS Change-Id: Ide723e69fa4b98b85000f8cdccb85262e23ca811 | 11 September 2017, 09:19:45 UTC |
ef1a473 | Marko Obrovac | 11 September 2017, 07:54:16 UTC | CP-JobQueue: Add the service to SCB Bug: T175281 Change-Id: I1ebdb7eb4964e0ecb57c050ce46876bb8e72a1c7 | 11 September 2017, 09:11:45 UTC |
b41843d | Emanuele Rocca | 07 September 2017, 14:05:19 UTC | varnish: convert role::cache::instances into a class role::cache::instances is currently a define for no valid reason. Turn it into a class so that we can reference attributes defined there from elsewhere. Change-Id: If06e33b95587e76efc93af7d2ccb756c95a10ca9 | 11 September 2017, 09:10:28 UTC |
b709f7e | Marko Obrovac | 11 September 2017, 09:07:23 UTC | ChangeProp: Separate packages into profile::changeprop::packages Change-Id: I768a6000c7ae44017a71f2790b8c5894b88e4f33 | 11 September 2017, 09:08:29 UTC |
d4f1881 | Gilles Dubuc | 08 September 2017, 09:20:07 UTC | Thumbor: enable new MAX_ANIMATED_GIF_AREA option Bug: T173580 Change-Id: Ief91a92e05d2c3fdbbe72ec4e422590042cff95e | 11 September 2017, 09:00:23 UTC |
103d2d4 | Giuseppe Lavagetto | 11 September 2017, 07:25:40 UTC | graphoid: convert to role/profile Change-Id: Ib15aaa3d86c825edb3d672331bcaf113852fb10c | 11 September 2017, 08:41:45 UTC |
c5a8779 | Giuseppe Lavagetto | 11 September 2017, 07:18:00 UTC | changeprop: convert to role/profile Change-Id: I191a4f46aaffa13bca21bfbb3a00292ef10f46b1 | 11 September 2017, 08:38:51 UTC |
c52ca51 | Giuseppe Lavagetto | 11 September 2017, 06:58:05 UTC | pdfrender: switch to role/profile In this case, since it's not incapsulating service::node and collects quite a few resources, we prefer not to remove the named class. Change-Id: I735701d4ea4069c307b328d8fcb5fab782aad165 | 11 September 2017, 08:36:48 UTC |
cb5c8b8 | Giuseppe Lavagetto | 11 September 2017, 06:46:38 UTC | eventstreams: convert to role/profile Change-Id: I94dad66103ce344a04b85a581203ecc5540052d0 | 11 September 2017, 08:35:33 UTC |
91c2011 | Giuseppe Lavagetto | 11 September 2017, 06:08:09 UTC | trendingedits: move to role/profile Change-Id: Ia0a2248c7282583a8c2fcc87e94d86fd749c9c33 | 11 September 2017, 08:34:27 UTC |
3f01be5 | Giuseppe Lavagetto | 08 September 2017, 16:19:42 UTC | apertium: move to role/profile Change-Id: I65f9890bad802dedee36296bf1b4bbfe309d59e1 | 11 September 2017, 08:29:12 UTC |
13c8691 | Moritz Muehlenhoff | 11 September 2017, 07:19:32 UTC | Stop creating salt grains for debdeploy All previously existing Hiera defitions have been removed. Change-Id: I70d887ef2136686f05f0d023a3ec285819c8b5e9 | 11 September 2017, 08:18:52 UTC |
98174d3 | Giuseppe Lavagetto | 08 September 2017, 15:59:50 UTC | cxserver: convert to role/profile Change-Id: I04872168708db65d316c7fb32bfc4dd6f536f97b | 11 September 2017, 07:26:12 UTC |
8a7172b | Giuseppe Lavagetto | 08 September 2017, 15:48:00 UTC | mathoid: move to role/profile Change-Id: I5756122ac1f1363ee7239c43ecb403e8ba1e54c2 | 11 September 2017, 07:26:12 UTC |
d7a1634 | Giuseppe Lavagetto | 08 September 2017, 15:38:10 UTC | mobileapps: move to role/profile Change-Id: I579fd89846f54aab6762e709edcc076f4efec948 | 11 September 2017, 07:26:12 UTC |
aecb3e5 | Moritz Muehlenhoff | 11 September 2017, 07:10:24 UTC | Update comment Change-Id: I9547710b8bd17b17dc898224e80fde6aeaf63b94 | 11 September 2017, 07:10:24 UTC |
b4ed8e4 | Moritz Muehlenhoff | 08 September 2017, 11:06:33 UTC | Remove remaining salt grains previously used by debdeploy Change-Id: I0843ccdd5cbd73e585b9c2403240b4f5d90e56b4 | 11 September 2017, 06:56:04 UTC |
a369c93 | andrewbogott | 11 September 2017, 03:40:09 UTC | Add wmcs-roots to role::wmcs::openstack::main::control This was included for the old role (common::labs::openstack::nova::controller) but lost in the refactor and rename. Change-Id: I73b3081566ce43e1f2fe5e8aa25344a0a04d502b | 11 September 2017, 03:41:25 UTC |
6612a74 | Ariel T. Glenn | 10 September 2017, 20:53:42 UTC | revoke James F's ssh key Change-Id: Ib939ef0a35a1fe4fc0f4a7a7245dd3bcf64d66eb | 10 September 2017, 20:53:42 UTC |
b5e3c93 | Daniel Zahn | 08 September 2017, 19:23:24 UTC | site: remove unused virtual host 'zosma' This is a Ganeti VM that hasn't really been used and the related access request has been declined. It was created after last years Wikimania. Removing it now. If it's ever desired (again), happy to recreate it. But so far it's just been sitting here. Bug: T138650 Change-Id: I8ef7db97942858dcfd6eee6cfe734845ccc42882 | 08 September 2017, 19:23:24 UTC |
761489b | Daniel Zahn | 08 September 2017, 18:09:20 UTC | admins: add Kai Nissen (knissen) to LDAP (nda) users Kai Nissen now has an NDA on file with legal, confirmed on Google doc. He will be added to the LDAP group "nda" for access to pivot. Bug: T168046 Change-Id: Ice27ea96603f33051ec795933aaa98a605523fb1 | 08 September 2017, 18:12:35 UTC |
db85ad5 | Daniel Zahn | 07 September 2017, 22:43:38 UTC | admins: create user account for Rita Ho (rho) Create shell account for Rita Ho. Since she already was an LDAP-only admin, remove her from there, as an upgrade. purpose: review analytics data for the Wikipedia Android app from SWAP notebooks https://phabricator.wikimedia.org/p/RHo/ https://www.mediawiki.org/wiki/User:RHo_(WMF) Addition into groups has to be done in a seperate patch, so this just creates the account without giving it access yet. UID matches existing LDAP user, cn: Rho, rho@wikimedia Key as provided on Phabricator ticket. Bug: T175204 Change-Id: Ia90b710d67251e290f9c5893b3df81d2f5047ce9 | 08 September 2017, 17:21:39 UTC |
ac1c65d | RobH | 08 September 2017, 16:52:01 UTC | dsaez uid update making the shell and wikitech user match Bug: T175220 Change-Id: I0f5115d19a52b099d2d3e7a1c29bb7293a74f86f | 08 September 2017, 16:52:01 UTC |
13e68d2 | Antoine Musso | 20 June 2017, 20:17:05 UTC | contint: upgrade git on zuul mergers Upgrade git-daemon service to use jessie-backports. Bug: T161086 Change-Id: Iab9181128b224aa186d6aaa68e4e106042b0687b | 08 September 2017, 16:38:17 UTC |
271ba77 | Alexandros Kosiaris | 08 September 2017, 14:48:47 UTC | dnsrecursor: Enable PowerdnsRecursor diamond collector Ship the diamond collector and enable it along with the require sudo rules Bug: T169600 Change-Id: I6287a6aacdae041d96ccdd5ec3204182f38f53df | 08 September 2017, 14:50:56 UTC |
f4b76d7 | Alexandros Kosiaris | 08 September 2017, 14:31:49 UTC | role::dnsrecursor: Partially transform into a profile Move the DNS related parts of the role into a corresponding profile class. Bug: T169600 Change-Id: I173f5dcc284d62340f31f656e652cb3507435450 | 08 September 2017, 14:50:56 UTC |
3663205 | Marko Obrovac | 08 September 2017, 14:26:04 UTC | ChangeProp-JobQueue: Fix the repo location and name Bug: T175281 Change-Id: I029f8b52e51277dcbde341f1ea1289465f1a9a55 | 08 September 2017, 14:42:45 UTC |
5be9b70 | Antoine Musso | 08 September 2017, 14:32:19 UTC | nodepool: reduce trusty pool by one Most of the repositories had their jobs moved from Trusty to Jessie. There is a long tail of annoying jobs left, but really that is just for a few dozen of mediawiki extensions. Reduce the initial pool of trusty nodes from 4 to 2. That would allow the pool to get one more jessie instance when it is busy. Bug: T161882 Change-Id: I4cea67ced7bf385266ab74cc722f103d2e8b4b7a | 08 September 2017, 14:39:12 UTC |
3a5ef79 | andrewbogott | 28 August 2017, 07:44:32 UTC | nodepool: specify 'nova' availability zone If this is unspecified, the nova scheduler will just pick a zone at random. Currently we only have the one zone, but when I experimentally added a zone a few months back nodepool started scheduling in the wrong zone and hilarity ensued. 'nova' is the default zone -- with this explicit here it's slightly safer to add additional zones to nova in the future for other purposes. Bug: T170447 Change-Id: I87b4f02ddbda0290291dd704f8e4e7a47bb9e235 | 08 September 2017, 14:26:40 UTC |
2e2775e | Giuseppe Lavagetto | 08 September 2017, 13:12:26 UTC | etcd: limit RAID resync speed if on linux software raid This should help avoid the loss of consensus we experienced on the codfw cluster whenever the nodes were resyncing their RAID partitions. Bug: T162013 Change-Id: Ia0e331d2a3ad2cbb78fe18dda3959175580f9890 | 08 September 2017, 13:12:26 UTC |
e588fde | Alexandros Kosiaris | 06 September 2017, 13:03:35 UTC | Document in-datastore calico configuration Add the various objects we have in our calico configuration as yaml files. Those are not expected to change often. At some point in time they should partly enforceable by puppet, but we are not there yet Bug: T170111 Change-Id: I2c6d992210ec822a16be0a7362efb4587b5eaa5b | 08 September 2017, 12:36:26 UTC |
f8167bb | Alexandros Kosiaris | 31 August 2017, 10:24:49 UTC | kubernetes: Add a few recommended admission controllers Add ServiceAccount, PersistentVolumeLabel and DefaultTolerationSeconds. These are for production only, toollabs are not touched. Those are the recommended admission controllers for version 1.7 of kubernetes which is what we are running Bug: T170119 Change-Id: I7ddb79fb7fa2ed70703fe8adf5d9f52433cc2ca3 | 08 September 2017, 12:36:00 UTC |
73db34a | Marko Obrovac | 08 September 2017, 11:51:31 UTC | Add the cp-jobqueue profile Bug: T175281 Change-Id: I78a09d0d99ae20a38d397da8f8a1faf9dd015fe3 | 08 September 2017, 12:29:09 UTC |
ff6cba4 | Moritz Muehlenhoff | 08 September 2017, 10:20:25 UTC | Remove memcached/redis salt grains previously used by debdeploy Change-Id: Icb78c17fed6ec16ca9b6e871fea5b19790d5a1f3 | 08 September 2017, 10:20:25 UTC |
280cca2 | Moritz Muehlenhoff | 08 September 2017, 09:00:24 UTC | Remove labtest salt grains previously used by debdeploy Change-Id: If2833d9a0a0a520e59972b762c691f234c0777b4 | 08 September 2017, 09:00:24 UTC |
3f19ae4 | Moritz Muehlenhoff | 06 September 2017, 14:37:45 UTC | Remove NFS salt grains previously used by debdeploy Change-Id: I9046f01c0f3e22d1d46e13a4e34bb6d5a0b64114 | 08 September 2017, 08:56:29 UTC |
7acce04 | Moritz Muehlenhoff | 06 September 2017, 12:59:16 UTC | Remove WMCS-related salt grains previously used by debdeploy Change-Id: I104b6b31c605aa78392800fe77bb642b594465dc | 08 September 2017, 08:52:26 UTC |
ecb9a01 | Moritz Muehlenhoff | 06 September 2017, 13:02:48 UTC | Remove parsoid salt grains previously used by debdeploy Change-Id: Ibde5e3e38e7feb02af8e8e67939711db4dc0ea43 | 08 September 2017, 08:43:43 UTC |
291a489 | Moritz Muehlenhoff | 06 September 2017, 12:56:39 UTC | Memove releng-related salt grains previously used by debdeploy Change-Id: I6e5daf79bc15101cc518ed158962dc76fd9b2997 | 08 September 2017, 07:23:57 UTC |
726bbc2 | Moritz Muehlenhoff | 06 September 2017, 13:00:47 UTC | Remove ganeti salt grains previously used by debdeploy Change-Id: Ia107afb2b160aee7c4bec2c0f38e84786ae7623b | 08 September 2017, 07:22:01 UTC |
fd466ae | Moritz Muehlenhoff | 06 September 2017, 14:22:17 UTC | Remove k8s salt grains previously used by debdeploy Change-Id: Ie3de7f33768e9b31f814fa562865ea2aacee3603 | 08 September 2017, 07:18:44 UTC |
8a31c5b | Moritz Muehlenhoff | 06 September 2017, 10:13:29 UTC | Remove cache salt grains previously used by debdeploy Change-Id: Ia27a700006800d498261bb0c246906e5e96646e3 | 08 September 2017, 07:13:23 UTC |