https://github.com/wikimedia/operations-puppet

sort by:
Revision Author Date Message Commit Date
adc9cc5 Icinga: Drop qchris from analytics contactgroup Change-Id: I9af6798e084b693bec67d674869986d99a176ab1 09 February 2015, 15:54:41 UTC
e35cf05 dumps nginx, fix up limit_conn_zone directive Change-Id: Ie3d2e35830ccb509e57da58d5ea4cf6a38fd2587 09 February 2015, 10:36:42 UTC
e357382 connection limits in nginx need shared memory and key defn Change-Id: I89a2ff33899a403d8d36921b1e04d03f46322fec 09 February 2015, 10:27:39 UTC
e36ce54 reinstate bandwidth and conn caps for dumps.wm.org turns out that the pipe can handle more than the disks. values may need to be tweaked. Change-Id: I7076b65d30b7abf24375816e3dd30875854485c3 09 February 2015, 10:14:09 UTC
2a504e7 vbench: various improvements * Use deferreds to avoid races. * Re-write some argument names to be clearer. * Avoid depending on numpy by having local mean / median / std functions. * Get rid of warm-up loops. * Run 5 loops by default. Change-Id: I4249a4eb156a23890887c83735b6b15c660692ed 09 February 2015, 04:50:41 UTC
2e7d329 icinga: remove mark from SMS Change-Id: Ib302a9bb99747718f5b7720582964165fa77dae8 07 February 2015, 21:38:09 UTC
a72490a depool cp1064 upload backend Change-Id: I5101dc0745f6b856a2c7bff20106b35eaa2cd329 07 February 2015, 10:32:32 UTC
f7af4cc reprepro: switch Cassandra to 2.1, add to jessie Switch our update configuration to fetch Cassandra 2.1. Add the cassandra source to jessie-wikimedia and remove from {precise,trusty}-wikimedia. Task: T88850 Change-Id: I09793b47a6758c8a8081c1c340122c7c470ff918 07 February 2015, 09:54:32 UTC
e280b02 depool cp1070 in cache.pp: T88889 Change-Id: I41e2a4d763ac463706764dce6286a3fba9b4cb68 07 February 2015, 09:44:24 UTC
ae8101b vbench improvements * Encapsulate profile data processing in a new ChromeCPUProfiler class. * Use Twisted log observer to log debug data. * Add --latency and --hidpi options. Change-Id: I856c68256f08fd6ef944eabec6bad74e6d3c2ebd 07 February 2015, 02:58:04 UTC
c7c21a8 Bump cdh module to increase heap on name nodes Bug: T88871 Change-Id: Id1b599a599330ab946e79535c290bfdaedba8682 07 February 2015, 00:52:40 UTC
211ea1f reclaiming ms1004 to spares ms1004 was misc ganglia aggregator, so changed it to bast1001. removed all ms1004 entries, as it will not use this hostname in the future. T86933 Change-Id: I5447f18f26f815007acb3962c6bbc76150f22bc6 06 February 2015, 20:03:33 UTC
8642f89 toollabs: Fix webservice2 restart when no webservice is running Change-Id: Ia3ba48aadd6ca779902cfd08fd319d6a6942ce00 06 February 2015, 19:24:24 UTC
75d044a Update the restbase config for v0.4.0 RESTBase is now full spec-driven, so the config file has grown a bit. Change-Id: Ibff24a8a59e17515a31e942ed0a0c1af6d70d181 06 February 2015, 16:29:17 UTC
9fed3ff more-aggressive vm tuning for jessie-varnish Change-Id: I3a7a3e685bcd20009f6fb972aecb3033e85f2f41 06 February 2015, 14:54:43 UTC
38c7ac4 sysctl: brown-paper bag fix for service's Exec Change-Id: I41ca9a3a8daacf213943105415af7e20ac355d27 06 February 2015, 14:11:12 UTC
0d9bf6f sysctl: make service call init system-agnostic Remove an onlyif that checked for an upstart unit, that was a remnant from a workaround for Ubuntu hardy boxes. Switch "start" to a "service" call so that it works equally under all init systems. Change-Id: I0952cb041036ff2bce4e3007c272e009e7780c74 06 February 2015, 14:04:40 UTC
97f9663 Merge "Disable LWP SSL hostname verification" into production 06 February 2015, 12:46:51 UTC
4b08890 toollabs: Pass in full parent environment to npm start Otherwise it sometimes freaks out, and does strange things like look for sh in /usr/bin and fail when it does not find it there Bug: T1102 Change-Id: I86f8ac6efd9baf7fbab8e0ad8fd27ee566ff47b3 06 February 2015, 08:48:35 UTC
63b02eb re-disable compact_memory cron for jessie caches Doesn't seem to be causing the cp1064 issues See also: b7c51400 f8f989df Change-Id: I2b56966a42980e3c6c6ef5e78aa82a6af74c85ef 06 February 2015, 05:31:08 UTC
5a89be8 add vm tuning params to jessie cache nodes Change-Id: Ia91dd5adfb6ab4f35dc31b8b1b4dd0539cfed393 06 February 2015, 05:28:27 UTC
4a7f5ce vbench: Instead of --proxy, use --host-rules to specify mapping of hosts * We want to know what effect image requests have on the total time, so have upload.wikimedia.org requests actually resolve. Change-Id: I57105655c02468c3e38d236ab221f5d159a677c4 06 February 2015, 02:40:28 UTC
2f57593 vbench: fixes * '(program)' is not the root node for all JS code. We should instead compute CPU time by subtracting '(idle)' from the profiler's wall time. * On a related note, use 'wall time' and 'cpu time', which makes the meaning of what we're measuring clearer. Change-Id: I3eee5a06ff3b197395a35a662697072406cc423e 06 February 2015, 02:17:18 UTC
410c300 use jessie for redis hosts in codfw We are going to use jessie here per IRC talk with _joe_. Bug:T86887 Change-Id: I620a0e99b67d58f5a2f9de0f55548caf7de1b6cf 06 February 2015, 01:46:17 UTC
a928dd4 vbench: add --show-uncached-requests Logs uncached network requests to the browser console. Change-Id: Idc3df5e565c7266efabfb93e7e7238bbf0ce5041 06 February 2015, 01:24:27 UTC
76ed803 xenon: links => follow for File['/srv/xenon'] Tim pointed out that the disk mounted on /a/ is much faster. I don't want to add references to /a/ in our Puppet code, so I am going to move /srv/xenon to /a/xenon and leave a symlink pointing to the new location. I think that this is the right approach, because it means that when xenon is provisioned anew anywhere, it would write to /srv/xenon again. Change-Id: If5204069f135c50d598a99139e188d9960379c3d 06 February 2015, 00:59:59 UTC
cb12c26 vbench: various fixes * Don't clear cookies. * Clear the browser cache once, but don't disable it completely unless --disable-cache is specified on the command line. * Use an onload handler to ensure that VE is only loaded after all the page's resources have finished loading. Change-Id: Ib82c577bc92e1c9e36e390847e07ffe011c448ea 06 February 2015, 00:20:23 UTC
5878b58 Migrate role::performance to graphite1001 This should have been done as part of If6b00be3de0, but was not. Change-Id: Ic0e19f7a45a4e19a7ed03ee5be23da4221759a6c 05 February 2015, 23:08:06 UTC
21f16f5 Merge "'Require all granted' for images on 2.4." into production 05 February 2015, 23:06:35 UTC
ddf8722 'Require all granted' for images on 2.4. Change-Id: Ic0cede9a1988288dac4f7a8d65cab911958b88bc 05 February 2015, 23:00:41 UTC
e8942db vbench: compute & print measures of central tendency for total runtime Change-Id: Ic25b157a868581c38a59c40552c8d69168929a98 05 February 2015, 22:55:13 UTC
9684c0d Merge "ci/jenkins: add public key for VE sync to puppet" into production 05 February 2015, 22:21:04 UTC
6b3bc17 Merge "Clarify difference between nova::manager and nova::controller roles" into production 05 February 2015, 22:13:22 UTC
0c3101e Clarify difference between nova::manager and nova::controller roles Change-Id: Id3e710ab648863dbdca638b75dc5f53222bfafa4 05 February 2015, 22:06:48 UTC
11993dc ci/jenkins: add public key for VE sync to puppet This is a key used for jenkins VE sync tasks. The private part of the pair is already puppetized. The public part was not. follow-up to Change-Id: I568367464d8096c9 Just reflects the existing setup, not intended to change anything. Bug:T84731 Change-Id: Idafe038e816235e37e44e72dbdeea97de23bf899 05 February 2015, 21:56:12 UTC
cf611ec Merge "Add some more php5 packages to Trusty wikitech." into production 05 February 2015, 21:55:03 UTC
13e6140 Add some more php5 packages to Trusty wikitech. This won't be the last of these Change-Id: Ic7f2fd1992758637f7df5b40bae833f6b20e7714 05 February 2015, 21:53:44 UTC
33ff706 Merge "Include php5-memcached on Trusty openstack-manager hosts" into production 05 February 2015, 21:47:06 UTC
b10a2d0 Include php5-memcached on Trusty openstack-manager hosts Change-Id: I77c726e26758548f26a4cd93aa11a14682bbfb4a 05 February 2015, 21:45:50 UTC
1791830 re-enable cp1064 backend for testing Change-Id: Ia59f9f05b60caf08d40f1ff0e0460e10b33b268e 05 February 2015, 20:56:48 UTC
121bcd6 Tool Labs: nodejs-legacy is for Trusty only The -legacy keeps a symlink that is part of the nodejs package in Precise. Change-Id: I7a74b0ed7e816def1a334dabb2d9d1a273ba0f77 05 February 2015, 20:26:33 UTC
c0bbc68 tools: Install npm and nodesjs-legacy everywhere Because npm start is used to run these servers. Bug: T1102 Change-Id: Ib0e25658f1b1c06941d518b59c28e650517911e7 05 February 2015, 20:12:53 UTC
5789850 Merge "base: move syslogs/remote-syslogs to manifests" into production 05 February 2015, 20:11:24 UTC
6da9dc8 Tool Labs: more tweaks to the queue templates More required parameters. Sigh. Bug: T88713 Change-Id: Id0ea8ceda09941d68b9d49cad3e19927a5e46ee2 05 February 2015, 19:57:05 UTC
f173ed2 Merge "Tool Labs: fixes to the queue templates" into production 05 February 2015, 19:52:32 UTC
9c3f7eb Tool Labs: fixes to the queue templates Remove stray double paste. Change-Id: Id266906f3118dfad0e8211d07cd2ff104934edd4 05 February 2015, 19:50:05 UTC
38eaeaf Merge "remove deprecated legalpad.wm service" into production 05 February 2015, 19:47:52 UTC
3819b8c Tool Labs: queue templates for gridengine More required default values (gridengine does not supply them when unspecified). Bug: T88713 Change-Id: Ia180fbdb9e414601b0057fc22967689f05bf3d24 05 February 2015, 19:40:50 UTC
1843037 remove deprecated legalpad.wm service This service, legalpad.wikimedia.org, has been deprecated. It has been replaced by the legalpad app within the regular production phabricator instance. T87688 Change-Id: If22b46720828e7e545cacf5a03c9393d5a081de2 05 February 2015, 19:39:10 UTC
6f08d76 Merge "Tool Labs: hosts templates for gridengine" into production 05 February 2015, 19:30:53 UTC
59ce025 Tool Labs: hosts templates for gridengine Add a few non-optional configuration values beyond the customized ones with default values. Bug: T88712 Change-Id: I1615a8e5a855db507c56e995532fc6124922e639 05 February 2015, 19:14:19 UTC
bd913ad tools: Fix exec params in nodejs starter tool Bug: T1102 Change-Id: Iae2286923c1edfdec70b14c0fb3fa8600d94ee2e 05 February 2015, 19:05:36 UTC
4e3dfc6 Give deployers login on silver. Also removed some cruft rendered obsolete by Sean's addition of a proper maria role. Change-Id: I48da778e35a378339df5399f128793c437cad375 05 February 2015, 17:19:36 UTC
3e34f72 re-pool cp1063 backend T84809 Change-Id: If69b18fa2639e89f090db32168bb6b4bf146cf25 05 February 2015, 18:35:43 UTC
54ca397 graphite/txstatsd: fix require_packages vs package when testing a related dependency (python-twisted-core) puppet gave a dependency cycle: (Package[graphite-carbon] => Class[Packages::Graphite_carbon] => Class[Graphite] => Package[python-twisted-core] => Class[Packages::Graphite_carbon] => Package[graphite-carbon]) since this has been giving us problems already, I fixed txstatsd debian package dependencies to include graphite-carbon and python-twisted-web as it should have been in the first place. Thus avoiding the need to duplicate graphite-carbon dependency and require_packages Change-Id: I28424dd4c00a97fa5af8e4ce110282badf158227 05 February 2015, 15:58:49 UTC
b7154e1 Merge "Labs: User guard manage-nfs-volumes-deamon" into production 05 February 2015, 15:45:40 UTC
0a07184 redisdb: add codfw monitoring group Add icinga monitoring group for codfw to prevent icinga fail when we apply the role in codfw. And to have the web ui link to them. Bug:T86898 Change-Id: Ie12c03c26175dbe3de6d4cb7f626d57d41de93d4 05 February 2015, 15:42:58 UTC
4c97d21 Labs: User guard manage-nfs-volumes-deamon Make certain it can be run only as the unprivileged nfsmanager user to avoid its output files being unwritable (and thus breaking future runs). Bug: T88579 Change-Id: I00d71722eca8e1d37fbed7b9ec4bf46f5c6856a6 05 February 2015, 15:41:50 UTC
9b8978a Labs: Make sure manage-nfs-volumes is running Make the service ensure => running and add an Icinga check that it actually is. Bug: T88669 Bug: T88664 Change-Id: I49eabc7e240d852e25c3564c403152a331d7f186 05 February 2015, 14:57:04 UTC
d404a22 monitoring: fix logo image location Change-Id: I2eae1c48d3e60f160c272bbc45ad0b2576d561c6 05 February 2015, 13:32:02 UTC
39233d6 beta: Remove mediawiki03 from dsh groups Was killed a little while ago Change-Id: Iee7234a9535326f8cf8aae714c84f4eb6d543d77 05 February 2015, 13:00:50 UTC
bbf577a mw1018 uses www-data as its main user Change-Id: Idd8bc29ef9b8e2e0416e83a2be958035215367c4 05 February 2015, 12:36:50 UTC
cc634e9 beta: Make web user be www-data instead of apache Bug: T78076 Change-Id: Ia6f136a105abaa913c6bfa34ed4e143baa1630a9 05 February 2015, 12:11:08 UTC
da58d28 toollabs: Fix errors with nodejs starter tool Bug: T1102 Change-Id: If57256561c61fb4ae8db94589b543f5ab6d23f52 05 February 2015, 12:10:38 UTC
3d74453 Make gdash's uWSGI config.ru Ruby 1.9-compatible Use uWSGI's 'ruby-lib' configuration directive to add the gdash library to the load path, instead of messing around with $LOAD_PATH, $:, et al. Bug: T85909 Change-Id: Ia7615d9481a3bc718d3436051ec7fc38f7f4d17d 05 February 2015, 12:09:47 UTC
f965141 graphite: move gdash+performance to graphite1001 Bug: T85909 Change-Id: If6b00be3de08fbaaab30f7d4dcfd7262a742fe62 05 February 2015, 11:55:28 UTC
15f37ce beta: allow defining the web user. Bug: T78076 Change-Id: I67f6db4ccc9e190ef49c1159991ab7f275a280df Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 05 February 2015, 11:37:14 UTC
108da70 maintenance: allow choosing the web user Bug: T78076 Change-Id: I25e187e8ddeac673ed8782d518cfca08f10298d1 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 05 February 2015, 11:32:37 UTC
f8d63c8 labstore: do not explicitly declare the apache user existence We don't really need this to be defined at all, as we are not doing name mapping on the labs NFS. Bug: T78076 Change-Id: Ibb7b3cc3019535f8343e68909466ac98915a6f7f Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 05 February 2015, 11:27:22 UTC
7d4ffdd gdash: deprecate 75percentile and median Newer txstatsd versions won't publish 75percentile and median statistics, switch to 99percentile and mean. Given the number of samples I think it'd make sense to track 99percentile since that translates to a significant number anyway. Bug: T88662 Change-Id: I31acf5bd0db4df62a623fb3f98d5592e16e00350 05 February 2015, 11:20:34 UTC
a206e71 mediawiki: allow using a different web user than apache At the moment the user:group for all web-related software in mediawiki is the non-standard apache user. So, as a transitional helper, we are making the user configurable so that the transition can happen over time. Bug: T78076 Change-Id: Idf7d1f9185aec9aec889ef5f1141bd0263909281 Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 05 February 2015, 11:05:26 UTC
ade0fc1 toollabs: Add nodejs support to webservice2 Bug: T1102 Change-Id: Ie022190defbe72e4a211a4d4a0a089b2148f0cbc 05 February 2015, 10:16:30 UTC
8bd7bf8 toollabs: Add generic webgrid node type Will support push-button deploys of less commonly used languages (nodejs, go, etc) Bug: T1102 Change-Id: I2fb17b468f066cab9862b4587c3359126ff6c4af 05 February 2015, 10:07:27 UTC
07c19ba mediawiki: use lru pcre cache for all mediawiki hhvm installations This will be done after the jobrunners have been upgraded as well Change-Id: Ia8455cea452cb8ea6a9aecb172cc94292845ff2e Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org> 05 February 2015, 07:51:04 UTC
36bd155 point dbproxy1001 at m1 db1001 db1016 Change-Id: Id013844e4bdfc28a819a9ebeccfa20f3076be81c 05 February 2015, 07:41:45 UTC
bb4df6f mariadb config for wikitech Change-Id: Ie3200cb0a9c2e51fd8ef7a497dc0807a416e11d0 05 February 2015, 06:32:51 UTC
f35265e Puppetize some symlinks that are on virt1000 and seem important. Change-Id: I5ce2268901fe2a3d6bf3c4e2297260038bb40382 05 February 2015, 05:37:41 UTC
a73cf4b Merge "Second attempt at adding 'Require all granted'" into production 05 February 2015, 05:20:44 UTC
fc5d6d5 Second attempt at adding 'Require all granted' Change-Id: I1e528d473c47b1f391c313b6518d0dffd1cc02f4 05 February 2015, 05:19:05 UTC
ba6e627 Include the private wikitech password config on silver Change-Id: I3988fb1edb68ba9c46a8e1a7b83ba8e691a19045 05 February 2015, 05:10:39 UTC
2cfb67b Merge "Support the new 'Require all granted' rule on Trusty." into production 05 February 2015, 05:07:34 UTC
145d132 Support the new 'Require all granted' rule on Trusty. Change-Id: Ic4530116489327b7bf7930423c4b93c3a82fff78 05 February 2015, 04:58:23 UTC
e8b987e disable cp1064 upload backend, tuning issues... Change-Id: I1be3a22a8558880368a43caf9c948a6ef71e729e 05 February 2015, 04:42:32 UTC
6f4f681 mw-log-cleanup: find and compress uncompressed rotated files Make the mw-log-cleanup cron job look for any uncompressed files that have not been accessed in the last day and compress them. This can happen if logrotate was terminated abnormally. Task: T88393 Change-Id: Ib9ba6383b9077be0c3659a4b54d33e77c507d21e 05 February 2015, 02:41:32 UTC
ed865eb Update my (=ori's) deployment shell helpers Change-Id: Ia6240f0aaa07486914c803ba2cc63d9d6b7a2db2 05 February 2015, 01:27:45 UTC
a0227b9 logstash: move apifeatureusage output after default Change the priority of the apifeatureusage elasticsearch output to come after the normal logstash elasticsearch output. Change-Id: I48752802b5b3ebb43439cc2d638c2b91f18a7f04 05 February 2015, 00:59:26 UTC
fd19e6a include standard on rbf codfw nodes We want to test a few things here before applying the role in codfw, but without standard we don't even have vim or any of the useful default packages. The same will be included from the redis role anyways. Bug:T86898 Change-Id: I4dd25148920ae25180ae2682a5223dcfdc93ed64 05 February 2015, 00:46:34 UTC
7382dad use m1-master CNAME Change-Id: I9bfe74f8bd283059dafcac4fd867281fe580f951 05 February 2015, 00:22:53 UTC
030e21a Revert "temporarily depool cp1064 upload cache backend" This reverts commit 2347bf6701dbd54f6ac5367f3292bff868c549d8. Change-Id: I16d0b3d40cf746a1847373b4fd95a7d540462001 04 February 2015, 23:42:24 UTC
2347bf6 temporarily depool cp1064 upload cache backend Change-Id: I7a6b14b413f22720eb23c5e1586c90fa24976181 04 February 2015, 23:22:18 UTC
0d826f5 cp1063 backend disable for hw T84809 Change-Id: Ib1982a5d7ae51c551b932d9a86575b981be5344b 04 February 2015, 22:36:00 UTC
9e832b8 Revert "Give Cassandra access to smalyshev." I was premature with this -- sudo access requires a full Ops-team approval. I'll resubmit a new patch which will be held until Monday. This reverts commit ba28a65db16bd6e103a7dc35207548ce626cd129. Change-Id: Ifb8c13d4a6fcfbcff3b934c2dfb158a871a3753c 04 February 2015, 22:22:29 UTC
4034694 Give James Douglas deployment rights. Bug T88464 Change-Id: I1089cc1c5489492c86dbf25e8bdd8484ed0f10f5 04 February 2015, 22:12:48 UTC
18b1ed1 Merge "setting rbf2002 mac in install-server module" into production 04 February 2015, 21:42:04 UTC
708b343 setting rbf2002 mac in install-server module setting mac address in linux hosts file T88380 Change-Id: I780a6302e4625cf03322e1e4d15db943e393563e 04 February 2015, 21:39:10 UTC
04648cb Merge "ganglia: add more ferm rules for services" into production 04 February 2015, 21:38:12 UTC
67f4be6 ganglia: add more ferm rules for services Change-Id: If28ff8abbed0fced91c8ac929c507565ab164193 04 February 2015, 21:34:02 UTC
675ecde base: move syslogs/remote-syslogs to manifests Change-Id: I6f2293d8d2c276eaa85c8f430be760ca5364aa3e 04 February 2015, 19:27:30 UTC
50274a9 base: move base::firewall to manifest Change-Id: Ia96a60aea1d51fd264ae2042e5a9109037d900b2 04 February 2015, 19:18:40 UTC
25e0075 Add deployment rights for Marco Obrovac Bug T85492 Change-Id: I525805c3e97a7c52e53d9b784ce289a5a2a0d8fc 04 February 2015, 18:51:41 UTC
back to top