https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
3e452c7 Nutcracker: move declaration to role::mediawiki; parametrize * Set owner / group / mode for config files. * Only override nutcracker's default mbuf-size if caller requests it. * Don't declare defaults. Especially if they conflict with nutcracker's! * Don't assume a single server pool. Nutcracker supports arbitrarily many. We'll probably want to exploit this to ease the migration to a UNIX domain socket (if we choose to do that). * Move declaration to role::mediawiki / role::beta. * Fix Icinga alert to expect a single process. Change-Id: Ifb4d25506ad5dddf046c3e6ba03f30541850d2be 28 July 2014, 19:37:24 UTC
0127d23 fix postmortem cleanup cron Change-Id: I78bbff1fe66a7b190e65ef28aabc336d907ea258 28 July 2014, 17:50:54 UTC
17e9686 jobrunner/hhvm: disable perf maps, turn off jit * Move Eval.PerfPidMap = false back to HDF file / syntax Upstream bug: https://github.com/facebook/hhvm/issues/2761 * Set jit = false; not beneficial for short-lived CLI scripts. Change-Id: I14371adef60572c0fe19d30a55fd15fd1cb45f99 28 July 2014, 17:21:44 UTC
3826fe3 Merge "Log rotate the correct ocg file" into production 28 July 2014, 17:18:19 UTC
03b1d28 Merge "diamond: Enable for 'cvn' project in labs" into production 28 July 2014, 17:07:17 UTC
a5f2000 Allow icinga status checks on wikitech Change-Id: I206aa78fb2a6230e562dd225f71f1fe64922656f 28 July 2014, 16:56:49 UTC
4366375 diamond: Enable for 'cvn' project in labs Bug: 68444 Change-Id: I49ed3a530365b0dce6d8992dca24faf6807a3b1d 28 July 2014, 16:48:13 UTC
365a875 mediawiki::multimedia: stop managing /a/magick-tmp; provision fontconfig-config * Production fully migrated to /tmp/magick-tmp in I342f75cb5. * No ensure => absents; let's clean up with Salt instead. * Require fontconfig-config package for /etc/fonts/conf.avail/70-no-bitmaps.conf Change-Id: I8da59aa21700df6c6207e82ae035db3d7c044325 28 July 2014, 16:10:04 UTC
a142f8f Merge "apache2: rename apache2_test_config => apache2_test_config_and_restart" into production 28 July 2014, 11:53:50 UTC
27ec071 Merge "swift: qualify var" into production 28 July 2014, 10:33:15 UTC
23f71c0 Re-enable LuaSandbox on mw1053 * Convert HDF settings to INI * Load luasandbox.so * Lint: add trailing comma to some params Change-Id: Ifdf82248704bd6d9ab5d0dce501cf03a262f0715 26 July 2014, 00:38:23 UTC
c96e782 Change bsimmer's shell to zsh Per request. Change-Id: Icced2e9065817a67fd3a10e36764b591090e6291 25 July 2014, 23:06:26 UTC
2e1632a Merge "Add additional SSH key for Brett Simmers, per his request" into production 25 July 2014, 22:33:58 UTC
96c0462 Merge "ocg - fix logfile name and remove logdir" into production 25 July 2014, 22:29:18 UTC
f289c3d ocg - fix logfile name and remove logdir now we put it directly in /var/log/ and the file is actually called ocg.log Change-Id: I6d542e3b8cdd24803c1ad374431067c3a98c77ed 25 July 2014, 22:27:49 UTC
e72568d Merge "Add a wikitech cron to send echo emails." into production 25 July 2014, 22:24:06 UTC
c576a82 Log rotate the correct ocg file Change-Id: I0f639adcd0219124807d68caa91758c030872f9e 25 July 2014, 22:23:05 UTC
d57d1c0 Add additional SSH key for Brett Simmers, per his request Brett is physically present next to me to confirm the key's authenticity. Change-Id: I78f2e3cd076973bde0d54d60c91bb5f75b42560f 25 July 2014, 22:16:25 UTC
0abc5f9 Merge "All OCG servers should have syslog readable" into production 25 July 2014, 22:15:03 UTC
822bc11 All OCG servers should have syslog readable let OCG servers have readable /var/log/syslog and /var/log/messages by using base::syslogs but needs to have the $realm check because in labs the class is used per default there in role/labs and it causes duplicate definitions otherwise thought this was still the better workaround than putting it on the node level Change-Id: I20f3977659783705b1f8174d329a2a609aaa123c 25 July 2014, 22:08:58 UTC
aa6b9f7 add parameter for logfile names to base::syslogs so we can also use it for other files besides /var/log/syslog and /var/log/messages, such as /var/log/ocg.log needed by OCG (also see Change-Id: I20f39776597837) Change-Id: I5e4efa223b6caf235f3e94424d42c0f00192944d 25 July 2014, 20:44:08 UTC
bd1be62 Merge "Add my ssh key for my x230 laptop" into production 25 July 2014, 20:18:27 UTC
007c02a Merge "New packages and apparmor entries" into production 25 July 2014, 20:14:56 UTC
1d45971 Increased basic job runners by 1 per server Change-Id: I46c663d885a35a6ce5c2ff36dd93dd6832c6fa44 25 July 2014, 20:05:18 UTC
a9dc9d7 Add my ssh key for my x230 laptop Verification: https://office.wikimedia.org/wiki/User:GGrossmeier_%28WMF%29 Change-Id: I3b46bb6532b336b2faec15b0c61faa3e39a1da39 25 July 2014, 20:00:41 UTC
c23c497 New packages and apparmor entries We're doing more cleanup on images now which require these packages and applications. Still need to test that I've got all the new binaries for apparmor but that'll come later. Change-Id: Icdc70b97af373291ade01d37f081453adcf415d5 25 July 2014, 19:30:49 UTC
3bed30f osmium: include admin w/group => deployment, per discussion with joe RT: 7984 Change-Id: I4e3531212dccc7a7dadd58d3d22caad290083dd6 25 July 2014, 19:08:13 UTC
08af3ab access: grant access to the mediawiki cluster for Brett Simmers See RT #7984 Change-Id: Ib7c9587b027b6e4c5d16dc42be64271331f24bc8 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 25 July 2014, 18:47:44 UTC
69b09cd increase /mnt/tmpfs to 32GB on ocg100* Change-Id: Idc43e5ef02c9cdca09437c5763ad063841331be8 25 July 2014, 18:09:04 UTC
e811cad apache2: rename apache2_test_config => apache2_test_config_and_restart The current name is misleading, because it does not communicate the fact that a successful config test will lead to an Apache 2 restart. Change-Id: Idcce8723d83b2a0fc231c005d94c6a099ab484a2 25 July 2014, 17:16:45 UTC
c1d466e Revert "Moved 250-99 to unified config" per Yuri, something doesn't look right with Opera Mini This reverts commit 1cff4a2ea3b82081569293cc5dbaa88b6a713167. Change-Id: Ica00438edadc8cd06bc646ac1552c477e12dd0fa 25 July 2014, 16:18:40 UTC
cd9eff7 Merge "icinga-admin -- update cipher suite list to support PFS" into production 25 July 2014, 15:32:25 UTC
1cff4a2 Moved 250-99 to unified config Change-Id: Ieeb940b27d75e73ce54ad0ab74ac9b72cdfbb881 25 July 2014, 14:44:24 UTC
a7ead8e Use wikimetrics' new configurable pool sizes Bug: 68534 Change-Id: Id0161eb265715be3271eed4b4cf2c3049f2b5717 25 July 2014, 14:17:24 UTC
2bc686c Update for cdh module Change-Id: Ia02a22d889304e4fa9f45d060bcb69d795ab268c 25 July 2014, 14:06:55 UTC
c4d9b0b Set authorization_service_authorization_enabled for Oozie. Change-Id: Ic693e84c9a0d26b05537a4c121c51ebb19b92341 25 July 2014, 13:58:57 UTC
f1e52fa Merge "memcached: qualify vars" into production 25 July 2014, 13:58:30 UTC
577ede1 Merge "mysql_wmf: qualify vars" into production 25 July 2014, 13:57:54 UTC
a2b81e4 Install hive on hadoop workers to get hive-hcatalog packages Change-Id: I7965f3334077c21f678ab4ec43867e1563603d8c 25 July 2014, 13:26:17 UTC
7eef9f9 mediawiki/apache: use ports.conf Include the basic ports.conf in our apache config (as usually done in debian) and use VirtualHost *:80 everywhere Change-Id: I633b611000d919c2da741a38a4359048021c550c Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 25 July 2014, 12:53:57 UTC
0aec709 contint: qunit local vhost needs mod_rewrite Maybe include ::apache::mod::rewrite should be part of contint::localvhost define. Change-Id: I4a57abcc79bba6cdc42acf67c510955187648b47 25 July 2014, 10:02:09 UTC
aed876c contint: /srv/localhost should belong to jenkins-slave We used to run tests as 'jenkins' user. That has been changed to a jenkins-slave user to accomodate with production slave not having jenkins installed and prevent test from accessing 'jenkins'. /srv/localhost was still using 'jenkins' user which is some leftover cruft. Switch it to jenkins-slave which would let the manifest pass on lanthanum.eqiad.wmnet. Fix 04d331f992 Change-Id: If5c4ac5a04aac3c00f6988f74b333e9c1df5bc23 25 July 2014, 09:50:27 UTC
04d331f contint: setup localhost.qunit vhost on lanthanum Simply move the definitions from contint::website (which is only on gallium) to a new contint::qunit_localhost class applied on all production slaves (role::ci::slave). Bug: 68529 Change-Id: I36c02cef4e13b3ee20b2be6f96df0c3ce21790e0 25 July 2014, 09:42:58 UTC
203304d Allow world read/write + sticky on ocg tmpfs Puppet is braindead and didn't see that /mnt/tmpfs was turned into a mount point and thus was changing the default permissions. Change-Id: I17fa85b456a189bfd3682081dda551ff6662ac5c 25 July 2014, 09:39:46 UTC
c1b998d add swift account for search backups Change-Id: I708819936cdbbd4332fa76c1b5321923dfaa4cd8 25 July 2014, 08:57:30 UTC
8e8cb06 icinga-admin -- update cipher suite list to support PFS This patch changes cipher suite list for icinga-admin.wikimedia.org to support Forward Secrecy. Bug: 53259 Change-Id: I3440b8878cb534f09b960471b60ad2e4b4bd0c73 25 July 2014, 08:25:27 UTC
241449c beta::natfix removal step 2 Kept the rule used on the beta cluster which allow ssh from the deploy host (bastion) to the scap target. Moved it to role::beta::scap_target Change-Id: I6be9ab57b9ac92973b5568c8db522ae97537551e 25 July 2014, 08:04:18 UTC
ebe9339 Add a wikitech cron to send echo emails. Previously they were piling up in a batch queue and never going out. Change-Id: I06cdddf5554d75b8c2478e5182d501d711548b0a 25 July 2014, 05:08:33 UTC
01f7c08 Remove mysql_multi_instance from labsdb1002 after migration. Change-Id: I3fc44cee51f940a68904e07a8ac6ddd99c7fc934 25 July 2014, 02:31:52 UTC
e4fd0b9 Make config changes applied on labsdb1002 with SET GLOBAL permanent. Change-Id: If01b700e755a078d7c91f4592c944f2b1fc5c7a5 25 July 2014, 02:10:29 UTC
1709767 Merge "bugzilla - raise max-age for STS to 1 year" into production 24 July 2014, 23:01:24 UTC
61e651e site.pp - remove fresh tabs remove some tabs introduced in I9ee9ae249e45 and some small lint fix Change-Id: I65bbd6833e9d6001916a1d3b8f9dcc3c1832f04b 24 July 2014, 22:35:17 UTC
55f6c4e add missing monitor_group pdf_eqiad Error: Could not find any hostgroup matching 'pdf_eqiad' (config file '/etc/icinga/puppet_hosts.cfg', starting on line 7880) Change-Id: I0a9a71fad6440acd7afa52e72568323a7833f628 24 July 2014, 22:14:03 UTC
80966a7 Merge "tendril -- update cipher suite list to support PFS" into production 24 July 2014, 22:06:16 UTC
e282bee Merge "planet -- update cipher suite list to support PFS" into production 24 July 2014, 22:01:17 UTC
2709869 Merge "lucene: qualify var" into production 24 July 2014, 21:51:17 UTC
1b41422 Merge "admin: add deployment helper script to my env" into production 24 July 2014, 21:42:03 UTC
f619c7b admin: add deployment helper script to my env Change-Id: Ia0301ce1a951c09c899e70179ecd13dd784b789c 24 July 2014, 21:40:25 UTC
860a85c Revert "tools: remove libvips from exec_environ" The rationale in the reverted change isn't true, as libvips15 is not only installable, but in fact perfectly installed on all exec nodes. What is missing since August 2013 is (Coren's fixed) version of libvips-dev that is required by the bastion hosts (dev_environ): | Error: /Stage[main]/Toollabs::Dev_environ/Package[libvips-dev]/ensure: change from purged to latest failed: Could not update: Execution of '/usr/bin/apt-get -q -y -o DPkg::Options::=--force-confold install libvips-dev' returned 100: Reading package lists... This reverts commit 02cbb091c3b91583f85b768718ce0933d0e9d2c3. Bug: 52717 Change-Id: I3aa0c478b38248b5edf6f959aef1029d1205564a 24 July 2014, 21:36:56 UTC
541754f Merge "remove more classes from aluminium, the less prod puppet the better" into production 24 July 2014, 20:52:24 UTC
66313a4 remove more classes from aluminium, the less prod puppet the better Change-Id: Ia59dbd1b4d732ea653c6f9000f36820c9c5c4322 24 July 2014, 20:49:56 UTC
73972ae Update wikimetrics module, run with higher concurrency in prod Change-Id: I97d31e22db37488d751d3522c7fe3348761355e6 24 July 2014, 20:46:22 UTC
57b32f4 Merge "Bump Parsoid backend connection limit" into production 24 July 2014, 19:44:13 UTC
c3149ce Merge "ircecho: qualify var" into production 24 July 2014, 18:54:10 UTC
e396386 Merge "protoproxy: don't include apache::monitoring" into production 24 July 2014, 18:04:12 UTC
c267bc9 protoproxy: don't include apache::monitoring The SSL cluster doesn't run Apache. This must have simply never been cleaned up after the migration. Change-Id: Ia181016b673274d26177a6d52070cbece24ef976 24 July 2014, 18:00:24 UTC
630a52f Merge "admin: fix my bash aliases" into production 24 July 2014, 17:48:18 UTC
bda5587 Merge "Add OCG servers to the PDF ganglia cluster" into production 24 July 2014, 17:34:56 UTC
f71fa0d Add OCG servers to the PDF ganglia cluster There already is a definition for PDF in ganglia.pp Change-Id: I9ee9ae249e45bbd03344a2386cd2a4d7f99765a4 24 July 2014, 17:30:14 UTC
7917410 Merge "Give OCG admins ability to restart the service" into production 24 July 2014, 17:28:55 UTC
c89e7da Give OCG admins ability to restart the service `git deploy service restart` can be a little bit finicky. In the case where it doesn't work give OCG admins the ability to log in (or rsh) and fix it. Change-Id: I5fdc82213cd696081031980a0268d8072ac348b1 24 July 2014, 17:19:47 UTC
5e3f369 apache::monitoring: add diamond support; ensure mod_status is enabled * Provision the Diamond's HttpdCollector: <https://github.com/BrightcoveOS/Diamond/wiki/collectors-HttpdCollector> * Be explicit about including ::ganglia. * Make sure mod_status is enabled. * Include apache::monitoring in init.pp Change-Id: I76a0d237fe7b9a44beb9b4320ace6eeac54fe754 24 July 2014, 17:18:24 UTC
1dedcb6 Merge "lighttpd-starter: include default php-fcgi if no .lighttpd.conf is present" into production 24 July 2014, 15:40:39 UTC
09c57b0 Merge "Tools: Install user-requested packages" into production 24 July 2014, 15:19:14 UTC
22a332f Tools: Install user-requested packages Bug: 65974 Change-Id: I1a26de401f563fbc494ce04d21baf01b384e1f4b 24 July 2014, 14:57:36 UTC
273d879 lighttpd-starter: include default php-fcgi if no .lighttpd.conf is present fix for missing condition to include default php handler, if user has no .lighttpd.conf file Bug: 68499 Change-Id: Id279da97ff5e1f4a386213a720a166bd8e000990 24 July 2014, 14:42:11 UTC
f7d738d Bump apc.shm_size to 360M Change-Id: I48adb58edcc499ea23cb945ef068740d0e8ed201 24 July 2014, 14:35:49 UTC
fb38972 swift: qualify var Change-Id: Ib020babe08f6187e6bfce5a09719b8f51685d050 24 July 2014, 14:20:31 UTC
1b744e5 statistics: Add packages for rgdal rgdal is an R package(http://cran.r-project.org/web/packages/rgdal/index.html), installed using regular R means (that don't require puppet). This one is an interface to gdal, and I think lzia is doing some analysis/research that requires gdal. Since it just binds to gdal, it requires the packages be installed via apt. Change-Id: I0894b784bbe186148ce16007db51c83b311c8e36 24 July 2014, 13:32:43 UTC
6a88ed4 lucene: qualify var Change-Id: Ib61ac9d816443ccd59a78b8f108ad3e8a5de7076 24 July 2014, 13:12:33 UTC
bd895f8 Merge "redis: qualify vars" into production 24 July 2014, 10:38:09 UTC
5e4f185 contint: install Zuul on all CI slaves Zuul will have a command line utility to fetch out multiple repositories. Thus install Zuul on all CI slaves to provide the zuul-cloner utility. The package python-pip is needed by both Zuul source code installation and the contint::packages::labs class. So I wrapped the package definition with ensure_packages() from stdlib to avoid a duplicate definition. Change-Id: Ib1c1fc777bdcba90b89ad4f3d46430ae8e7daadf 24 July 2014, 09:55:49 UTC
28f4e42 Merge "Specify owner/group/mode for apache::conf" into production 24 July 2014, 09:30:13 UTC
8a347bd Merge "beta: Fix signal sent by beta-apaches script" into production 24 July 2014, 09:15:32 UTC
eb4e34b Merge "zuul: allow gearman access from mergers" into production 24 July 2014, 09:03:08 UTC
26cc974 zuul: allow gearman access from mergers We will get Zuul merger installed on lanthanum in addition to gallium. Manually maintain a list of such hosts in network::constant and adjust the ferm rule to allow them to reach gearman. Note: the ferm::rule is being renamed. Change-Id: Ie27fd16d3f1a0b0a6d8b625cd8d5dfea971c8212 24 July 2014, 09:01:08 UTC
e6d3f56 Bump Parsoid backend connection limit Varnish was bumping up against this, which led to 503s being returned. Bug: 68276 Bug: 68405 Change-Id: I169822344bc120aa9778a75875ddf2a57cdcad81 24 July 2014, 01:28:20 UTC
30f654b Give jzerebecki access to analytics data RT: 7827 Change-Id: I4420cc856ed1edff424633abda224ff2077dee98 24 July 2014, 00:27:56 UTC
f1a9f9c admin: fix my bash aliases Change-Id: Icdcde84fcdb75d72d2def428230e80129a2b62a1 23 July 2014, 22:48:38 UTC
e744fc2 hhvm: correct extensions path Change-Id: I3c0529a8238eed060660547bab879a72f831e6fe Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 23 July 2014, 22:46:32 UTC
68917c7 fixup for jobrunners - Set the correct module name for alternatives - install lua 5.1 for luastandalone Change-Id: I3c5352f6c5e57ccff9607e7e0b01d81e3138429e Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 23 July 2014, 22:15:41 UTC
91e24a6 phabricator => include apache::mod::php5 Change-Id: Idee69894bebd141dfed4b088fdd89373cddc3a48 23 July 2014, 22:07:04 UTC
a9a9476 jobrunners: fix template Change-Id: Ic0bd8aafd381f66009e2d145118a75937093f41c Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 23 July 2014, 21:53:11 UTC
627e49a Merge "Fix-up for Ic952146b5: check $mpm, not $selected_mod" into production 23 July 2014, 21:50:13 UTC
9b54bd1 Merge "setting actinium install params" into production 23 July 2014, 21:48:24 UTC
8630cc4 Fix-up for Ic952146b5: check $mpm, not $selected_mod Change-Id: I3f1bb771318831e2989a67c4385f9327677575c9 23 July 2014, 21:46:06 UTC
c7009c3 jobrunners: install the first hhvm jobrunner When this is merged, mw1053 will become the first hhvm jobrunner. Change-Id: Id18982e9166f641471dc77fb84089a0f261bc307 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 23 July 2014, 21:41:49 UTC
6e96d7d Merge "lighttpd-starter: Update default settings to overcome some issues - set server.event-handler = "linux-sysepoll" - increase server.max-connections = 300 - remove lighttpd worker processes - make php-fcgi handler optional" into production 23 July 2014, 21:36:15 UTC
8048b84 fix template path for phabricator login message follow-up fix for Iae4ab6065635799 Change-Id: Ied9cf506dc1a59569822a1e79be32978877bb0e9 23 July 2014, 21:27:10 UTC
fdd688d Merge "phab - configurable login message by auth type" into production 23 July 2014, 21:19:04 UTC
back to top