https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
4f3a143 dataset-replace generic::systemuser with user We want to get rid of generic::systemuser and replace it with the regular puppet user type again to remove a layer of abstraction that isn't really needed. Change-Id: I32cb56983d815065c17fd9c70b197580235f4d11 10 June 2014, 00:03:00 UTC
ba05744 logging sans systemuser Change-Id: I6f9206a3668498e2653dfc2d2790ab17f0fc165b 06 June 2014, 20:45:00 UTC
c386de2 otrs sans systemuser Change-Id: I60df437ab72fb511479820ca9b94d39866466b77 06 June 2014, 20:38:55 UTC
8b02a05 Merge "no-op formatting cleanup of role::otrs manifest" into production 06 June 2014, 19:40:11 UTC
d897f1b no-op formatting cleanup of role::otrs manifest Change-Id: Ib8be618a2cd68f073bc9cfbb23a50a4e611cd1d0 06 June 2014, 19:35:30 UTC
8c767a9 Merge "Setting up solr100[1-3] as elastic101[7-9]" into production 06 June 2014, 19:34:29 UTC
d897297 Merge "contint: reduce duplication with mediawiki::packages" into production 06 June 2014, 18:54:54 UTC
79e840b Merge "own dotfiles: don't set push.default=simple in .gitconfig (unsupported)" into production 06 June 2014, 18:53:35 UTC
be44bbd contint: reduce duplication with mediawiki::packages The contint::packages class has a lot of duplication with mediawiki::packages and is installed on all hosts. Slightly unclutter the former by using the later instead. As a side effect, php-apc is installed again, so provide a simple ini file that disables it. Change-Id: I09f760213e90e5802c7a1ac63341e8af9a31e2d0 06 June 2014, 18:30:38 UTC
e10061c Revert recent generic::systemuser conversions This isn't prettier, or more abstract. It's just uglier in syntax, includes far too much magic that is also wrong. It's also conceptually wrong as it adds a membership to a virtual supplementary group of "systemusers" that won't and can't include all system users. The right way to go here is to keep using system => true to mark system users, that would in turn use adduser & adduser.conf's FIST_SYSTEM_UID & LAST_SYSTEM_UID to designate whether a user is system or not. This reverts the conversions for the following users: icinga, mirror, gitblit, ipython, librenms, limn, ocg, tcpircbot. This reverts commits: - 13932dcfe3e092dc23c63f0df643c0408d46f351 - dcf55c490c5c2990c807e3d692bba872981b8952 - b66eb8c7a54d0e55899149d04435eec448d11865 - 76fdd4a29d892089c8da9f41b0c2247abfa1fd35 - b6f8462bb68a248b20b031ffcbc227688e707804 - 98e6ab557e7b113e1724572910ce0a9cb7eaf14d - 9c5fc3843246f894a5919164ae10c429c983db4f - 3ba59bc5dc341e1a5e51c6a62c8cfbcb4146d53b - 3df220dbe688896723b3975131a7427d8c9860c7 - 80d3f1fcb9be8a4087652b5200c8dc8c66a1db1b Change-Id: I8445bf3a8fb1a47385aa36d226fe5291c2cacc1e 06 June 2014, 18:14:34 UTC
37f891e Setting up solr100[1-3] as elastic101[7-9] RT 7575 This depends on these 3 boxes being first moved to Row D. See: RT 7633 Change-Id: I7a5060ac76e8339d77d2cce3e61c1ab4438a59d9 06 June 2014, 18:07:55 UTC
f843447 Merge "ipython use generic::systemuser" into production 06 June 2014, 16:43:41 UTC
13932dc ipython use generic::systemuser Change-Id: I27c57de87d973729fd10667ee9ae66faed60faf2 06 June 2014, 16:41:12 UTC
c3bd798 Merge "ocg use generic::systemuser" into production 06 June 2014, 16:18:18 UTC
dcf55c4 ocg use generic::systemuser Change-Id: I78a1d309766f77c374cc92d0c6b62c0e8fb7d3e0 06 June 2014, 16:15:04 UTC
b66eb8c icinga - fix dependency cycle for system user err: Could not apply complete catalog: Found 1 dependency cycle: (Group[icinga] => Generic::Systemuser[icinga] => Group[icinga]) groups are already a native dependency for the user, so this is not needed and needs to be removed since we switched to generic::systemuser Change-Id: Ic81c2b99bdf72bef5f85569181279087b1444bdd 06 June 2014, 16:06:17 UTC
582c5f4 Merge "icinga use generic::systemuser" into production 06 June 2014, 15:51:17 UTC
c944744 Merge "tcpircbot use generic::systemuser" into production 06 June 2014, 15:48:04 UTC
c7ed609 Merge "librenms use generic::systemuser" into production 06 June 2014, 15:45:13 UTC
3a2f0e0 own dotfiles: don't set push.default=simple in .gitconfig (unsupported) Change-Id: Ifabb0cb0056a54d13fae75c97bfd80309fbd7c1f 06 June 2014, 15:43:37 UTC
e5bb775 Merge "limn use generic::systemuser" into production 06 June 2014, 15:33:12 UTC
ed456d9 Merge "kiwix use generic::systemuser" into production 06 June 2014, 15:24:49 UTC
f095d35 puppetsigner: only fetch unsigned certs Change-Id: I343cf516d3e0e015fb6dd42e1fbc0ca9b06cc64e Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 06 June 2014, 14:48:00 UTC
4a69a51 chase settings Change-Id: Iacab7f834df494e4d986f93c02aa9df1c2cb8ffd 06 June 2014, 14:37:05 UTC
26dfea9 puppetsigner: actually use the file in the repository Change-Id: I97eeeebedc59388217f3472821419712243eca2f Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 06 June 2014, 14:06:36 UTC
c63bff7 puppetmaster-labs: make puppetsigner work with puppet 3 Change-Id: Iff44e85c93298cd4cb6afc59067057c00ebe2755 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 06 June 2014, 12:43:18 UTC
4bb7785 Bump modules/varnish to d6e27194 Change-Id: I25ce5b050d93651eedd482e11cd35427e45976d2 06 June 2014, 12:41:16 UTC
2e45605 simplify zero update url, remove outdated $zero_realm Change-Id: Ic816b0511ae014a438a4c6a08290459f7efef754 06 June 2014, 12:08:56 UTC
1b60026 netmapper URL based on realm (prod/labs) Change-Id: I19f3157e23ea9d003a2d4a07dcdd8986ad9e9dc7 06 June 2014, 12:04:46 UTC
95610e7 Merge "mediawiki::php: restore php5-igbinary; delete some unused files" into production 06 June 2014, 08:53:58 UTC
3df5add puppet3: remove 2.7 prefs, not the actual ones Change-Id: I765711ae849afef0dc29b1b5ca9959890b205d99 06 June 2014, 08:27:51 UTC
7f0935b mediawiki::php: restore php5-igbinary; delete some unused files I removed it and igbinary.ini before, not realizing that they were a dependency for php5-memcached. I then restored igbinary.ini but not the package. Change-Id: If649344368665ddb7340adc0400a13b2b9e8a6d9 06 June 2014, 08:24:33 UTC
43f03b7 puppet3: correct resource title for removal Change-Id: I738e91e62ceee99f6dfcb629833ed216a59088a7 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 06 June 2014, 08:23:40 UTC
b44cb1f puppet: ensure defining $puppet_version does upgrade As all our precise nodes are on 2.7 and will likely transition to puppet 3, so we need to be sure we remove the pinning files we had for 2.7. Change-Id: Id7abade4abee72c19afbb42e0b08e480d04f05aa Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 06 June 2014, 08:13:56 UTC
e945295 puppetmaster: acls only in apache for puppet 3 Due to a combination of unfixed bugs and lame syntax changes (only one allow_ip directive allowed per directive in auth.conf) it is practically impossible to enforce our ACLs via puppet configuration. That was anyways redundant as we had ACLs in apache already, so we're removing them right away. Change-Id: Ie7388f49493459e1259ab21cd181f3e94df24cd6 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 06 June 2014, 07:59:24 UTC
9711341 Merge "remove unused files in files/apache" into production 06 June 2014, 07:03:18 UTC
f367724 remove unused files in files/apache Change-Id: I78f9fdf7a7e2205d502d9bbf5820710748a9a4f4 06 June 2014, 07:02:43 UTC
1348e03 Merge "Add my dotfiles" into production 06 June 2014, 07:02:34 UTC
b214f19 Merge "Adding GELF support to LogStash" into production 06 June 2014, 06:20:46 UTC
dfb0a19 Adding GELF support to LogStash GELF is the graylog extended log format which is a structured, compressable, chunkable format. Experimenting for using this for logging in NodeJS things. Change-Id: I49aabe8f32622e0d16726d2ce0eb643d3382ef9c 06 June 2014, 06:12:17 UTC
97ac7be Add my dotfiles Change-Id: I6bd58e207994302305f114260a431843adce303e 06 June 2014, 04:34:59 UTC
a842b9c Fix Amazon Silk detection Per http://docs.aws.amazon.com/silk/latest/developerguide/user-agent.html Silk (formerly known as Kindle), doesn't send the usual "Mobile" word in user-agent when in "desktop" mode, however we want to redirect it even then. Change-Id: Ib423261fd5a8ba1b3ff74257f0fcd78a9e7dc35a 06 June 2014, 00:05:45 UTC
fb16f9c Merge "Revert "ocg use generic::systemuser"" into production 05 June 2014, 23:36:46 UTC
7b1f2c9 Revert "ocg use generic::systemuser" This reverts commit 65f7255f600472a79b50e4cf66cf19a7c03e57b6. Change-Id: I8d1eadc554579b3de506927f8021ef2014e05928 05 June 2014, 23:34:18 UTC
aaddd46 Merge "ocg use generic::systemuser" into production 05 June 2014, 23:22:07 UTC
76fdd4a icinga use generic::systemuser Change-Id: Id3f60a0f4f8c162e8acc8ae7480a01416cc0878a 05 June 2014, 23:21:19 UTC
b6f8462 librenms use generic::systemuser Change-Id: Id3204bb15879d9a2b8bdc572179e86b6bbb389a1 05 June 2014, 23:19:06 UTC
98e6ab5 limn use generic::systemuser Change-Id: If1e3b299e350fa934cb7c6b8f1794501fcd1af07 05 June 2014, 23:15:48 UTC
9c5fc38 kiwix use generic::systemuser Change-Id: If70502796a8d54912a3647e841be779844256ca6 05 June 2014, 23:14:03 UTC
65f7255 ocg use generic::systemuser Change-Id: I961826d6fb4c49fb5e689047e1987151af01a4b5 05 June 2014, 23:13:07 UTC
3ba59bc tcpircbot use generic::systemuser Change-Id: I32486eb2a3d28dd604732f09bfa3c7dbfde62717 05 June 2014, 23:10:48 UTC
41f2fac Merge "gid not a valid parameter for generic::systemuser" into production 05 June 2014, 22:45:56 UTC
3df220d gid not a valid parameter for generic::systemuser it's $default_group instead which was already specified Change-Id: I6bfe2912de92f63c322ac19f3bc6e31c70a2a864 05 June 2014, 22:42:56 UTC
a71d3fd Merge "gitblit use generic::systemuser" into production 05 June 2014, 22:35:44 UTC
80d3f1f gitblit use generic::systemuser Change-Id: Ic6d10d0065cc8df2ade1a6054118c31bbdf08699 05 June 2014, 22:17:43 UTC
6c9b107 Merge "webserver: fixing duplicate declaration of apache-mpm" into production 05 June 2014, 21:28:11 UTC
2b44bfd text-frontend VCL: grep Orig-Cookie for GeoIP, not (just) Cookie We want to perform geolocation if and only if the GeoIP cookie is not already set on the incoming client request, but at the point where we perform the check, the Cookie header has been squirreled away in Orig-Cookie to trick Varnish into serving certain types of cookied requests from the cache. So why check req.http.Cookie at all? Simply because at some point in the future someone will surely move things around and break the universe, so we might as well be resilient. Change-Id: I7cd1ec63a457c29d94646a0fd33aa7b5a590dc6b 05 June 2014, 21:22:16 UTC
358d6a6 adding elastic101[7-9] netboot.cfg and dhcpd Change-Id: I5e9ae8cec5480fd8f83f551d041959cebc1154d5 05 June 2014, 20:35:11 UTC
eb36486 Redirect language variant URLs to mobile Bug: 51753 Change-Id: I7d1ec175b3523467d9f6506cb6813a86d097cc7f 05 June 2014, 20:18:29 UTC
9425305 Fix type in OCG role Change-Id: I7b22e999caf14bbd92cba96421a1ce40a961241a 05 June 2014, 20:01:26 UTC
b0f34e4 rcstream: move app mount to top-level Change-Id: If31ac6e2cdb18ac40377a659a2850c6fcc90076a 05 June 2014, 18:15:51 UTC
a5ef5f6 Move cp301[5-8] to internal esams network, add site.pp node entry for cp3018 Change-Id: Id548e94ea5bd378ecb5af225e41a5c8c3f5054f1 05 June 2014, 17:24:42 UTC
e65400e Add otto dotfiles Change-Id: I4004e9e8f6ecce93b9f9b5318c8f176d34913174 05 June 2014, 16:46:50 UTC
3ab7344 typo fix for I28bcbab76 Change-Id: I785b03a476ee232152a8170bad612d2ae3095db6 05 June 2014, 16:35:45 UTC
64b515e migrate ::imagescaler -> ::mediawiki::multimedia * manifests/imagescaler.pp -> modules/mediawiki/manifests/multimedia.pp * rename 'removetmpfiles' cron job to 'clear_imagemagick_temp_files' * move clear_imagemagick_temp_files command to a template file * alphabetize packages and ensure => present rather than ensure => latest * File['/etc/wikimedia-image-scaler']: just touch an empty file rather than write contents to make intent clearer and to avoid the impression that the content is significant. * drop unused Monitor_group['imagescaler'] (there's a monitor_group for scalers that is qualified with a cluster name in manifests/role/mediawiki.pp). Change-Id: I28bcbab762e26e2dd5513b605aad28a29cf4ac16 05 June 2014, 16:33:30 UTC
caccff7 puppet: upgrade labs puppetmasters to version 3 this change will install puppet 3 on the labs puppet masters. Some config changes are needed in puppet 3 due to a long standing bug, see http://docs.puppetlabs.com/guides/file_serving.html#ip-addresses Change-Id: I7df5d8c4bf86cd24772cca02218d311bc6f72c0d Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 05 June 2014, 15:59:56 UTC
f2cf1dd puppet3: make puppet::self::master work in puppet 3 see https://tickets.puppetlabs.com/browse/PUP-1237 for a rationale of this change. Change-Id: Ic45fb66bda1313702ff087f25aeefd926adcda7b Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 05 June 2014, 15:52:26 UTC
8771b91 puppet: pin packages for puppet::self::master as well Change-Id: Ie4cc7ae7465734b2d3c43a1d7b4883038cc3daa2 05 June 2014, 15:39:31 UTC
46e1e17 properly flatten the bits backend list puppet is expecting a list and gets an hash: err: Could not retrieve catalog from remote server: Error 400 on SERVER: comparison of String with Hash failed at /etc/puppet/modules/varnish/manifests/instance.pp:37 on node cp1056.eqiad.wmnet RT #6794 Change-Id: Ib6cb020bed50b3209be8a9001396bfa5ecd5ef5e 05 June 2014, 09:37:59 UTC
8d3c9fc merge bits appservers into appservers minimal change to test merging bits into the general appservers, proper cleanup of bits appservers to follow if testing is successful. RT #6794 Change-Id: I51c6a6c339eda94e7b085a6f18ee05958fbeb8ef 05 June 2014, 09:23:05 UTC
65c7b0f Prepare to replicate additional tables to labsdb (with Legal OK): user_daily_contribs bug 61300 user_properties bug 64115 (filtered) filearchive bug 57697 58993 (anonymized) Change-Id: I1ffc55e05c6e8ed59a48111ce5f7f5c43f5c71b2 05 June 2014, 02:44:50 UTC
d825668 Switch LVS servers to include standard LVS servers seem to not have an NTP client, which resulted in having their clocks drifted away. Instead of including that, switch the include from "base" to "standard". This means that they will also include: - exim::simple-mail-sender - generic::tcptweaks which adjusts the initcwnd Change-Id: I56715822d2b90b9bf4ba4c634e4c829992bf2730 05 June 2014, 00:38:05 UTC
9a5a167 Remove temporary file-removal for /etc/init/enable-rps... Change-Id: I80040d2021bc6f7ac370ceec82ef71ef9a9df06f 05 June 2014, 00:31:34 UTC
201399b switch RPS to using up_command Change-Id: I0249f8be91817d6a5bd95fefdf3848926b95e28e 04 June 2014, 22:32:24 UTC
4df3cb9 mediawiki::monitor -> mediawiki::monitoring Per <https://wikitech.wikimedia.org/wiki/Puppet_coding> Also change eventlogging::monitor to eventlogging::monitoring; eventlogging::monitor::graphite was copied from MediaWiki AFAIK. Change-Id: I866c564dbbd6e207c5725f83454de39585297d65 04 June 2014, 22:27:18 UTC
dc5fdd1 Merge "mediawiki module - lint fixes" into production 04 June 2014, 21:57:52 UTC
f107bf3 disable ondemand service w/ cpufrequtils Change-Id: I600da3744a64db0d169619382b7cc48a17e9e251 04 June 2014, 21:56:50 UTC
a39bb27 mediawiki module - lint fixes fix some lint warnings such as: WARNING: selector inside resource block WARNING: unquoted file mode WARNING: ensure found on line but it's not the first attribute Change-Id: I06cb0afd6fc037f837d12ef53f9226fd4db6e11b 04 June 2014, 21:55:51 UTC
8422a2c mediawiki::jobrunner -> mediawiki::jobqueue * Consistent with the principle that things in the module class should describe a software stack rather than a role (i.e., 'multimedia' rather than 'imagescaler') * Resolves conflicting def'ns for videoscalers resulting from a Puppet parser bug that makes class { '::mediawiki::jobrunner' } in role::mediawiki::videoscaler resolve to the role class rather than the module class. Change-Id: I70c23114d1737e8d6c22ccc31c84ad3a3e7ac08a 04 June 2014, 21:51:54 UTC
9d01137 bump esams lvs txqlen to 20k Change-Id: I5833fec009c3648465d6dc46612364c5a96630c4 04 June 2014, 20:56:43 UTC
d8306ae Dynamic scripting for Elasticsearch 1.2.X Elasticsearch 1.3.X will have this on by default again with a new scripting language. Change-Id: I72a28eb8667a1bcdf2c7bf01d8e6fcd19c1e1e42 04 June 2014, 20:18:20 UTC
1e7bf18 Merge "Allowing a configurable StatsD server" into production 04 June 2014, 19:35:19 UTC
72faa54 manifests/misc/statistics.pp specify group as array Change-Id: If8f0683534f37a31cb12b387f83121cc503f4c2a 04 June 2014, 19:29:32 UTC
4e7a2d3 fix trebuchet groups to be an array Change-Id: Icdfa8b36409078bc2f9e1dd431ea50fac0cd395d 04 June 2014, 18:53:46 UTC
ad9e465 Disable job restarter if run_jobs_enabled is false Change-Id: I58195dab9a1b3656484d7470f7a687a22747cd05 04 June 2014, 17:20:40 UTC
39adcae bring systemuser group into class systemuser::groups Change-Id: I787385b39a0a19e863c10e1ce8390d9443c99572 04 June 2014, 16:32:45 UTC
6bffbfd Merge "Adding Ferm rule for OCG HTTP" into production 04 June 2014, 16:00:42 UTC
10ee973 service accounts get 'systemuser' group by default Current account janitorial logic assumes accounts will be in a supplementary group that, ideally, indicates purpose. This logic adds systemsusers to a namesake group by default. Change-Id: I43f77f6533770a57406363c80adbe5350b8362b5 04 June 2014, 15:54:17 UTC
daed1a4 Revert "removing mw1151 from dsh groups to replace hard drive and reinstall" This reverts commit c031926455141ee3dc0e09dba8493151fd7c04bf. Change-Id: I1f8c6d27facc67f7658366c6cea602fdbf9fe1a9 04 June 2014, 15:38:42 UTC
2f445dc Merge "add simple .vimrc to my home dir" into production 04 June 2014, 15:34:02 UTC
a1128de Merge "akosiaris dotfiles added" into production 04 June 2014, 15:31:20 UTC
191c7f8 add simple .vimrc to my home dir Change-Id: Idf5acf887dd762c2e47828534367f4c3b3fce3b3 04 June 2014, 15:27:09 UTC
807745a Merge "rename role::mediawiki::job_runner -> role::mediawiki::jobrunner" into production 04 June 2014, 15:05:49 UTC
b55f64d Merge "beta: NFS no longer used for mediawiki deployment" into production 04 June 2014, 15:03:37 UTC
23bf614 eventlogging: moving monitor graphite class in autoload layout Change-Id: I40f72b947af159e5bf7fc9cbec270de2ed8fa465 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 04 June 2014, 13:38:13 UTC
e2ea1b4 Merge "Monitoring: monitor eventlogging thresholds" into production 04 June 2014, 13:30:29 UTC
362e435 Monitoring: monitor eventlogging thresholds Setting up icinga alarm for eventlogging thresholds via graphite. Bug: 65482 Change-Id: Ibd7ba5b5224fff6444c005dddf3e3a97eb1f861a 04 June 2014, 13:28:33 UTC
527a49f Merge "contint: split Zuul server and merger" into production 04 June 2014, 12:41:08 UTC
1ccba2a contint: split Zuul server and merger Puppet work to upgrade Zuul to a version that factors out the preparation of git merges to gearman workers (known as zuul-merger). Adds git-daemon on the labs instance and configure the Zuul url to localhost. Tested on labs. Change-Id: Id88f1e3ee47ea2dac673257c8cc901c314170076 04 June 2014, 12:29:15 UTC
e315a70 akosiaris dotfiles added Finally!!!! Change-Id: I1cbce4f04160fa1d314366d013c8e20757bc6a34 04 June 2014, 12:26:33 UTC
back to top