Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
08d848d Marko Obrovac 25 May 2015, 09:38:19 UTC RESTBase: Set Graphoid address for deployment-prep This patch sets the RESTBase configuration in deployment-prep to point to deployment-sca01 for Graphoid. It effectivelly reverts I125d94cfd5bc76a7fcc445503d7033ed0306989a and moves the config from labs/restbase/common.yaml to labs/deployment-prep/common.yaml Bug: T99885 Change-Id: I01afb0f5f552ce3d5cdc7ed068a27423022d0252 25 May 2015, 09:38:19 UTC
162a7b9 Coren 25 May 2015, 09:06:23 UTC Tool Labs: add xvfb to exec environment Bug: T100268 Change-Id: I8d3b090d83b1f1497457313c3aa04154586d6e43 25 May 2015, 09:06:23 UTC
2f89060 YuviPanda 24 May 2015, 00:18:14 UTC mesos: Setup a marathon event receiver on mesos proxy - Register for marathon event bus, handled by lua directly - Task running and killed events trigger registration and deregistration - Import libcjson ffi bindings that work with openresty Bug: T99923 Change-Id: I2c93bb37dc65bb64af63a91374c8fdfdcc49ea94 24 May 2015, 20:13:21 UTC
ca99769 YuviPanda 23 May 2015, 23:50:27 UTC mesos: Add marathon master class - Make sure the service is running - Makes sure marathon service is running - Add a config directive that can be used to configure marathon Bug: T99923 Change-Id: I84d6c93051a601b487f067d87b660f9589020b05 24 May 2015, 20:13:03 UTC
d00e9d7 YuviPanda 23 May 2015, 19:59:52 UTC dynamicproxy: Add redundanturl dynamicproxy Similar to url proxy except it random distributes to multiple backends based on smembers. Bug: T99923 Change-Id: I57b3c1e7b2e2ea34acdd685fab80c32d96435926 24 May 2015, 20:12:43 UTC
8be2e75 Coren 24 May 2015, 13:37:40 UTC Merge "Tool Labs: install calibre for wsexport" into production 24 May 2015, 13:37:40 UTC
60107f8 Coren 24 May 2015, 13:25:49 UTC Tool Labs: install calibre for wsexport Bug: T100165 Change-Id: I0d180e1a52c3944669a44a894da942e3af00089f 24 May 2015, 13:26:29 UTC
f7fa367 Ori Livneh 23 May 2015, 15:13:30 UTC Add moushira to bastion-only and researchers Bug: T100091 Change-Id: Icba063c6758d32c17baebbc6ec4f9fcbe2ebb611 24 May 2015, 11:39:32 UTC
655b837 Ori Livneh 24 May 2015, 10:22:28 UTC mediawiki: Touch /etc/wikimedia-image-scaler on image scalers Needed so that CommonSettings.php sets role-appropriate memory and file-size limits. See <http://git.io/vTdtF>. Bug: T84842 Change-Id: Ie095121b1b5ef55ef6b58d30e393b1313314eb63 24 May 2015, 10:26:19 UTC
feac761 YuviPanda 23 May 2015, 19:54:51 UTC dynamicproxy: Hygiene fixes - Make luahandler mandatory - Allow not enabling ssh properly - Don't allow resolvers to be customizable Change-Id: I963d2c5152c5e28c3ea8f83149cf785b2eb2fb96 23 May 2015, 20:01:58 UTC
47f5c98 YuviPanda 23 May 2015, 13:10:55 UTC ssh: Allow temporary opt out from more secure ssh Complaints on IRC and in person about people unable to ssh to labs, even on not-so-out-of-date OSes (Debian Squeeze). This allows labs projects to opt out of the more secure ssh defaults temporarily while announcements and user education is made. Change-Id: Ib9f3c3ab8e69a6d5aeeb73bfc4c5d7578e6f0703 23 May 2015, 13:32:04 UTC
0c0b27a YuviPanda 23 May 2015, 09:50:29 UTC mesos: Puppetize docker config file Change-Id: I9274543cb875f9c68719934dc074abaf9fda6a03 23 May 2015, 13:14:30 UTC
eae3b53 Ori Livneh 23 May 2015, 12:19:31 UTC graphite: set a coarser aggregation policy to relieve storage pressure Retain aggregated data at a one-minute resolution for one week; at five-minute resolution for two weeks; at 15-minute resolution for one month; and at one-hour resolution for one year. Bug: T96662 Change-Id: Ie989b0ce94afd24aaa3c94d51714f2576da44ac8 23 May 2015, 12:50:54 UTC
5644ae1 Ori Livneh 22 May 2015, 15:54:36 UTC (ori) dotfiles update Change-Id: If471497e049824f6a60081ebacc046a9a4da9b8d 23 May 2015, 12:21:29 UTC
43775ce YuviPanda 23 May 2015, 09:44:42 UTC mesos: Increase registry execution timeout to support docker Reccomended at https://mesosphere.github.io/marathon/docs/native-docker.html Change-Id: Ibd433714b6c41529f971e1f69fdfd5fa336cc3a4 23 May 2015, 09:44:42 UTC
fc6913f YuviPanda 23 May 2015, 09:38:03 UTC mesos: Enable docker as containerization mechanism for mesos Bug: T99923 Change-Id: Ifa86ac635c9666739ce8286fea4cefca967807ab 23 May 2015, 09:38:18 UTC
8417f6e YuviPanda 23 May 2015, 09:37:30 UTC mesos: Use require_package to get docker Change-Id: I08c90eb313390d8d00be30486a6276c97e936630 23 May 2015, 09:37:30 UTC
a8f7e97 YuviPanda 23 May 2015, 09:19:19 UTC mesos: Install docker on all slaves Set up via labsdebrepo Bug: T99923 Change-Id: Ia976d656109bba73ec0281ba0e693f2f118b42a5 23 May 2015, 09:22:08 UTC
d891c2f Antoine Musso 12 May 2015, 16:57:40 UTC contint: disable unattended upgrade HHVM package is broken and we don't want to magically upgrade at midnight UTC. Also find out the hourly run does not work. Bug: T98876 Bug: T98885 Change-Id: I4f67a3b1312a2b57df9613e5ddbc6d33cfda647b 23 May 2015, 00:01:36 UTC
1c31cfb Dzahn 22 May 2015, 23:59:18 UTC Merge "contint: packages for Android SDK" into production 22 May 2015, 23:59:18 UTC
617a8de Dzahn 22 May 2015, 23:31:11 UTC Merge "Add mira to mediawiki-installation dsh" into production 22 May 2015, 23:31:11 UTC
5dff258 Dzahn 22 May 2015, 23:23:40 UTC Merge "phabricator: Add priority keywords/labels for !priority email command" into production 22 May 2015, 23:23:40 UTC
7251461 John F. Lewis 22 May 2015, 22:18:36 UTC mira: add to salt_peer_run Change-Id: I1cedc5c395a3bab1ec41b2fbe47e4456b6a2e8b5 22 May 2015, 22:18:36 UTC
bc0eafd gage 22 May 2015, 16:14:08 UTC merge zookeeper submodule update I1fa0312aedf57c05dfd326b253b9f732abd4c20b https://gerrit.wikimedia.org/r/#/c/212746/ zookeeper-cleanup: don't generate cron email for normal operation Change-Id: I3e0344d8ecd8c65972459ccafcdd9029f8cea4ee 22 May 2015, 16:16:51 UTC
e986b16 YuviPanda 22 May 2015, 16:01:01 UTC shinken: Remove myself from some contactgroups Change-Id: Ia06618c1b16ccc159f066669e0058d8e2239d90b 22 May 2015, 16:01:44 UTC
b0378ef Brandon Black 22 May 2015, 14:54:31 UTC test retry503 on upload-fe for load effects and reboot resiliency Change-Id: I4e153091340d02fb81ffbecf8a98c13260b891d7 22 May 2015, 14:54:57 UTC
824c9c7 Alexandros Kosiaris 22 May 2015, 14:49:53 UTC Merge "Assign role::postgres::maps to labsdb1004" into production 22 May 2015, 14:49:53 UTC
f53f095 Alexandros Kosiaris 22 May 2015, 14:47:02 UTC Assign role::postgres::maps to labsdb1004 Change-Id: I30dccd0c122d5f4b47c42114a561cf1aef82c896 22 May 2015, 14:47:02 UTC
a5c1f98 YuviPanda 20 May 2015, 22:09:25 UTC wmflib: Move ipresolve function into wmflib Bug: T99833 Change-Id: I3a9af69b73cb10ab90d6030457964159cfc33d7d 22 May 2015, 14:37:18 UTC
78dc2fc YuviPanda 20 May 2015, 20:43:33 UTC labs: Set labs nameserver IP globally in $::nameservers Prod has $::nameservers set, so set those in labs as well. Kill all hardcoded versions of the nameserver IP, make them use the global Change-Id: Ie718a470155a0433765954afdc1e95a244669d87 22 May 2015, 14:33:38 UTC
0db1c9d Alexandros Kosiaris 22 May 2015, 12:45:52 UTC Merge "puppetmaster::logstash remove inclusion of base::puppet" into production 22 May 2015, 12:45:52 UTC
07153af Alexandros Kosiaris 22 May 2015, 12:41:27 UTC puppetmaster::logstash remove inclusion of base::puppet No need to include a class that has nothing to do with the resources or the functionality of the containing class Change-Id: Ia5ea8e4672c55eb232a36f6de5bea2adcad11b26 22 May 2015, 12:41:27 UTC
fab1cda Alexandros Kosiaris 22 May 2015, 11:15:16 UTC Merge "Remove inheritance from puppet::self::config" into production 22 May 2015, 11:15:16 UTC
1a59161 Alexandros Kosiaris 22 May 2015, 10:58:17 UTC Remove inheritance from puppet::self::config puppet::self::config inherited the base::puppet class in order to override some resources. However that pattern adds way too much complexity and causes dependency cycles and difficult to debug problems. Make the inheritance an inclusion and convert explicit resource references to base::puppet resources to references to the class base::puppet itself. Amend the comment. Use the base::puppet::config definition to move away from specifically handling /etc/puppet/puppet.conf.d Change-Id: I4d30c7ccd3a0b430ca12fe9cbe84a85b7737b989 22 May 2015, 11:06:42 UTC
0b3315b Alexandros Kosiaris 11 May 2015, 14:27:32 UTC beta: Update the puppetmaster more often Way more often. Instead of once per hour, have git-sync-upstream run every 10 minutes. Contrary to what the previous comment says there, the git server should survive another 5 git pulls from 7 clients per hour. In all of labs, only 7 VMs have the setting to use this class Note that we can probably lower this down to 1 minute, but small steps first. Change-Id: I4450150d14a135fe7d917af1bc4398313d32fbb4 22 May 2015, 10:28:05 UTC
d2a0e20 Gabriel Wicke 22 May 2015, 01:57:15 UTC Fix labs graphoid IP Bug: T99885 Change-Id: I125d94cfd5bc76a7fcc445503d7033ed0306989a 22 May 2015, 08:06:41 UTC
d804440 Sean Pringle 22 May 2015, 04:45:39 UTC upgrade db1026 trusty mariadb 10 Change-Id: Ic16bc4ad85e402186913e2d8f398c0c018184870 22 May 2015, 04:46:06 UTC
2f82f0b dzahn 21 May 2015, 17:32:43 UTC Merge "quarry: lint fixes" into production 21 May 2015, 17:32:43 UTC
4eabc8e dzahn 21 May 2015, 16:51:21 UTC Merge "scap: ensure /home/l10nupdate/.ssh exists" into production 21 May 2015, 16:51:22 UTC
710e499 dzahn 21 May 2015, 16:41:17 UTC scap: ensure /home/l10nupdate/.ssh exists When applying the deployment server roles on mira, the new codfw deploy server, which pulls in scap, i got several of these errors: "Could not set 'file' on ensure: No such file or directory" related to l10nupdate because /home/l10nupdate got created but .ssh inside it did not so puppet failed to put the keys there. Bug:T95436 Bug:T82575 Change-Id: Ic5dc2c3f63bc3950a10f4f543d6bc9c22680be79 21 May 2015, 16:50:17 UTC
87c224f dzahn 21 May 2015, 16:07:50 UTC Merge "snapshot: lint fixes" into production 21 May 2015, 16:07:50 UTC
f73786e dzahn 15 January 2015, 22:02:57 UTC sshd: don't use NIST key exchange protocols quote from http://stribika.github.io/2015/01/04/secure-secure-shell.html <quote> OpenSSH supports 8 key exchange protocols: 1. curve25519-sha256: ECDH over Curve25519 with SHA2 2. diffie-hellman-group1-sha1: 1024 bit DH with SHA1 3. diffie-hellman-group14-sha1: 2048 bit DH with SHA1 4. diffie-hellman-group-exchange-sha1: Custom DH with SHA1 5. diffie-hellman-group-exchange-sha256: Custom DH with SHA2 6. ecdh-sha2-nistp256: ECDH over NIST P-256 with SHA2 7. ecdh-sha2-nistp384: ECDH over NIST P-384 with SHA2 8. ecdh-sha2-nistp521: ECDH over NIST P-521 with SHA2 We have to look at 3 things here: ECDH curve choice: This eliminates 6-8 because NIST curves suck. They leak secrets through timing side channels and off-curve inputs. Also, NIST is considered harmful and cannot be trusted. Bit size of the DH modulus: This eliminates 2 because the NSA has supercomputers and possibly unknown attacks. 1024 bits simply don’t offer sufficient security margin. Security of the hash function: This eliminates 2-4 because SHA1 is broken. We are left with 1 and 5. 1 is better and it’s perfectly OK to only support that but for interoperability, 5 can be included. </quote> Change-Id: I7413e1ca49167eceb5d633582d412dee59fb7b46 21 May 2015, 15:43:49 UTC
7fed969 dzahn 16 May 2015, 01:27:35 UTC snapshot: lint fixes "indentation of => is not properly aligned" "ensure found on line but it's not the first attribute" fixes more puppet-lint warnings for T93645 Change-Id: I2af3270989fe4b8d6a5b68a87a79c69d8a4bebdb 21 May 2015, 15:37:52 UTC
598389d dzahn 15 January 2015, 22:24:13 UTC sshd: set Message Authentication Code ciphers Excplicitely define the MAC ciphers used. No MD5, no SHA1. No ripemd Only use Encrypt-then-MAC. quote from http://stribika.github.io/2015/01/04/secure-secure-shell.html <quote> Here are the available MAC choices: 1. hmac-md5 2. hmac-md5-96 3. hmac-ripemd160 4. hmac-sha1 5. hmac-sha1-96 6. hmac-sha2-256 7. hmac-sha2-512 8. umac-64 9. umac-128 10. hmac-md5-etm 11. hmac-md5-96-etm 12. hmac-ripemd160-etm 13. hmac-sha1-etm 14. hmac-sha1-96-etm 15. hmac-sha2-256-etm 16. hmac-sha2-512-etm 17. umac-64-etm 18. umac-128-etm The selection considerations: Security of the hash algorithm: No MD5 and SHA1. ... Encrypt-then-MAC: Since there are no downgrade attacks, you can add them to the end of the list. You can also do this on a host by host basis so you know which ones are less safe. Tag size: At least 128 bits. This eliminates umac-64-etm. Key size: At least 128 bits. This doesn’t eliminate anything at this point. </quote> Change-Id: Iddeaafda0080b46a175e6e383c90fad4d73b28a9 21 May 2015, 15:35:03 UTC
595a633 dzahn 20 May 2015, 00:44:26 UTC site.pp: small lint fixes fixes more puppet-lint warnings for T93645 Change-Id: I790d880edddfe7b68dcd48bd169bc35bda3b9a00 21 May 2015, 15:25:18 UTC
bdfb248 dzahn 16 May 2015, 01:43:47 UTC statistics: lint fixes fixes more puppet-lint warnings for T93645 Change-Id: Ie3adcc01011acaed04ee41331263ed0c91c0172c 21 May 2015, 15:22:49 UTC
40c4743 Kartik Mistry 21 May 2015, 10:05:52 UTC CX: Add languages for deployment on 20150521 Bug: T98741 Bug: T99255 Bug: T99780 Bug: T99781 Change-Id: I704271f14771f6db0cab8e26d437d9c6a0eabeca 21 May 2015, 15:11:36 UTC
504f4b0 Brandon Black 21 May 2015, 14:41:12 UTC another trivial fixup for 5db2d5c Change-Id: I8cf01570b080b026a52f5c6876b51b16058e6fa1 21 May 2015, 14:41:12 UTC
765ff8b Brandon Black 21 May 2015, 14:17:10 UTC trivial fixup for 5db2d5c Change-Id: Ie5dea809caeeef90a83b5c1f26a5f4561d459dc9 21 May 2015, 14:17:10 UTC
5db2d5c Brandon Black 20 May 2015, 22:01:23 UTC Fix up varnish director-level retries non-chash directors get default retries == num_backends. chash directors get some math to give them a relatively-small value with 99% probability of hitting all backends while searching for a healthy one. Bug: T99839 Change-Id: I15d66e6f14198c365317590a136b755ca4994ce2 21 May 2015, 13:31:48 UTC
5941749 Kartik Mistry 21 May 2015, 08:04:04 UTC CX: Corrected language code based on wgLanguageCode setting Change-Id: I0d3a7734d458a9f0028e505d2f4659fb3f15f153 21 May 2015, 11:36:52 UTC
660fe61 Giuseppe Lavagetto 21 May 2015, 09:37:28 UTC puppet/self: fix the kafkian puppet syntax On all the labs instances with puppet::self::config, we had catalogs compilation fail as this file resource was not defined in the parent class anymore, but in a separate define. Another way around this would've been to ensure that specific define to absent. So as detailed here: https://docs.puppetlabs.com/puppet/3.8/reference/lang_resources.html in this case we can only amend the resource using a collector, but see the caveats there. I really think this is just an hotfix and we should get away from inheritance here. I will do so in a later commit. Change-Id: Icf7613d3e7569f787f5881b358304bd401d3965e 21 May 2015, 09:44:13 UTC
01a88ba Alexandros Kosiaris 20 May 2015, 16:46:45 UTC Remove the unneeded priorites in filenames Now that we use base::puppet::config, priorities in filenames are not needed Change-Id: I8305150f8edc1bfb619f1793f7af667152e3b93f 21 May 2015, 07:51:20 UTC
a9c9779 Alexandros Kosiaris 21 May 2015, 07:39:03 UTC Merge "puppetmaster: DRY on inclusion of hiera configuration" into production 21 May 2015, 07:39:03 UTC
a1465cf Alexandros Kosiaris 21 May 2015, 07:37:25 UTC Merge "puppetmaster: Move backups to the role class" into production 21 May 2015, 07:37:25 UTC
c160ee6 Alexandros Kosiaris 21 May 2015, 07:37:05 UTC Merge "puppetmaster::logstash. Fix out of module dependencies" into production 21 May 2015, 07:37:05 UTC
e50e807 Kartik Mistry 21 May 2015, 05:38:34 UTC CX: Fix language codes Language selector shouldn't use MW domain code. Also added missing Lithuanian (lt) Change-Id: Ie2f1ea1f5ead4b98db940fe6ffb26f6628b2046c 21 May 2015, 06:28:58 UTC
7ca60c1 Ori Livneh 21 May 2015, 04:04:33 UTC Typo fix for Iaba1aee51: apache::mod::headers, not header Change-Id: I9b76b424f62e7622ec97c6a365a2e440b2d8771a 21 May 2015, 04:05:19 UTC
8d55d81 Ori Livneh 21 May 2015, 03:57:57 UTC Make performance.wikimedia.org HTTPS-only With a 301 redirect from http://, as is the norm. Change-Id: Iaba1aee512dee1a54d0a7330d48789d2fec4ff7e 21 May 2015, 04:01:05 UTC
69ba8cb Ori.livneh 21 May 2015, 00:07:56 UTC Merge "Set HHVM mysql connection timeout to 3s on canary servers" into production 21 May 2015, 00:07:56 UTC
b9bbcc9 Ori Livneh 20 May 2015, 23:00:22 UTC Add a script to disable Puppet temporarily I am surely not alone in occasionally leaving Puppet disabled for longer than I had intended. This script provides a means of disabling Puppet temporarily. It does so by creating a detached screen session which sleeps for the desired amount of time and then re-enables Puppet. It also leaves a better paper trail by setting a default reason which includes the name of the user disabling Puppet and the time it was disabled. Usage: puppet-disable [DURATION] [REASON] DURATION - Disable Puppet for this much time. Defaults to 1h. REASON - Reason for disabling Puppet. Defaults to a generic message. Examples: Disable Puppet for a day, no reason given: $ puppet-disable 1d Disable Puppet for 30 minutes, with reason: $ puppet-disable 30m "experimenting with HHVM config" Change-Id: I3f89fd339aacac862903974a149b6493cfefb8c9 20 May 2015, 23:21:45 UTC
7b0044f Brandon Black 20 May 2015, 22:11:40 UTC Revert "Add storage cfg for cp1099 T96873" cmjohnson put normal 400G disks back into this machine... This reverts commit 03a4ed1f875d9484bb4de3047080e83e86ceb34c. Change-Id: Ib0d00246575d823a56a863122bc07723fe7c44e3 20 May 2015, 22:13:24 UTC
0de969b John F. Lewis 20 May 2015, 20:18:21 UTC mira: add ssh::hostkeys-collect as role As mira is supposed to be a tin version with the same purposes, this may be useful as it is noted as being important on tin for performance. Change-Id: I56a86700b9600fca2c51134a03e13ee32ca593a9 20 May 2015, 20:18:21 UTC
a9e228e John F. Lewis 09 May 2015, 15:41:36 UTC Add deployment server role to mira New codfw deployment server. Bug: T95436 Change-Id: Ic8f1b3472fb48e20c8736173726f474b1715ea9c 20 May 2015, 19:53:26 UTC
99ac180 Tim Landscheidt 11 May 2015, 03:26:37 UTC tools: Puppetize database aliases as host resources Bug: T63897 Change-Id: I14b8b4a691f82d8eacfbc7cf5fee6d4d739c7a74 20 May 2015, 19:52:15 UTC
b9ff3d4 dzahn 20 May 2015, 19:41:34 UTC Merge "mira, codfw deploy server, set $cluster" into production 20 May 2015, 19:41:34 UTC
f466070 Bryan Davis 15 May 2015, 19:20:15 UTC Set HHVM mysql connection timeout to 3s on canary servers Use hiera to configure the hhvm.mysql.connect_timeout setting on canary app and api servers to be 3 seconds instead of the default 1 second in an attempt to reduce the number of aborted database connections seen in the HHVM error logs. Bug: T98489 Change-Id: Id4dd19222b6187e903a267c32f05f47c46f6b45c 20 May 2015, 19:05:04 UTC
af00315 Brandon Black 20 May 2015, 18:28:58 UTC Revert "depool cp1050 in puppet (testing)" This reverts commit e2e5ea65d86d5729bc7a31780b63e0d2b3419c7c. Change-Id: Id1ebb61c3200fa1651df6d61b11e8751b5f6e320 20 May 2015, 18:29:17 UTC
e2e5ea6 Brandon Black 20 May 2015, 17:57:21 UTC depool cp1050 in puppet (testing) Change-Id: I33b5ea86811f9d8bcc3a067f5f7cf73639b72be5 20 May 2015, 17:57:32 UTC
606aa4e Dzahn 20 May 2015, 17:11:58 UTC Merge "mailman: restart mailman after config changes" into production 20 May 2015, 17:11:58 UTC
1d73bed Alexandros Kosiaris 06 May 2015, 16:53:02 UTC puppetmaster::logstash. Fix out of module dependencies Instead of notifying specific out of module resources, use base::puppet::config to populate the config stanza and allow it to notify the compilation process Change-Id: I4e8ab6864654f457d94cff7ed6c25173a01dffc3 20 May 2015, 16:46:07 UTC
3f60ecb Alexandros Kosiaris 06 May 2015, 17:01:15 UTC puppetmaster: DRY on inclusion of hiera configuration Instead of conditionally defining twice the hiera class, rely on conditionally setting a variable and using to specify the correct class incantation Change-Id: I41afdf9fa7b79374f085578c75159d8c7d840a08 20 May 2015, 16:46:07 UTC
f964430 Alexandros Kosiaris 06 May 2015, 16:56:27 UTC puppetmaster: Move backups to the role class Move it from the module class to the role class. This is cleaner and also avoids backing up slave puppetmasters who do not anyway have anything worthy backing up Change-Id: I2720cf760c00a778ff99616e97f023f8347575c9 20 May 2015, 16:46:07 UTC
0a0aa3d dzahn 20 May 2015, 16:35:02 UTC mailman: class for helper scripts install the "remove_from_private" script added in Ia206c6a1282a41d8 but make a new class for helper scripts for this. other scripts might follow as well. Change-Id: I96a1735c1991d5ad29b419a8f483a7668678e377 20 May 2015, 16:42:24 UTC
f35a9a4 Alexandros Kosiaris 20 May 2015, 16:41:30 UTC Merge "Introduce base::puppet::config definition" into production 20 May 2015, 16:41:30 UTC
2d716bc Alexandros Kosiaris 20 May 2015, 16:33:46 UTC Introduce base::puppet::config definition Add a definition that allows to provide puppetmaster configuration stanzas in /etc/puppet.conf.d/ and notifies the configuration compilation process. This removes the burden of populating files and notifying the compilation process from consumers like base::puppet and puppetmaster::config which are being transitioned in this commit as well. Change-Id: I45d96ee338d191bd4d6baf63ec02484cd6854913 20 May 2015, 16:33:46 UTC
ef63648 dzahn 20 May 2015, 16:17:06 UTC Merge "fundraising.pp: indentation fixes" into production 20 May 2015, 16:17:06 UTC
2f94236 dzahn 20 May 2015, 16:15:56 UTC Merge "mailman: script to remove user from private lists" into production 20 May 2015, 16:15:56 UTC
5bc8c40 dzahn 20 May 2015, 16:10:45 UTC Merge "monitoring.pp - indentation fixes" into production 20 May 2015, 16:10:45 UTC
a78ac01 S Page 24 March 2015, 01:35:20 UTC Redirect dev.wikimedia.org URLs Redirect to API:Data_and_developer_hub. Figure out what to do with other URLs on dev.wikimedia.org later. I ran `refreshDomainRedirects` locally to create ../redirects.conf from the changed redirects.dat. Bug: T372 Change-Id: I6998d67738c347cfd127b1840795a4b302284e99 20 May 2015, 16:08:16 UTC
eff68dc Antoine Musso 11 May 2015, 11:37:18 UTC labs_vmbuilder: sort files/postinst.copy Make it easier to track down what is being copied. Change-Id: I3a1e945282c3932a5dbfb99e22a7d36fe9ef08fc 20 May 2015, 16:03:43 UTC
0ce2f0d Gabriel Wicke 18 May 2015, 19:22:30 UTC Enable graphoid in labs & production Depends on RESTBase deploy to make the public graphoid API spec available. Change-Id: Ia20ff1843d19b2db623057c18bab82df521f296f 20 May 2015, 15:28:22 UTC
924cfed Alexandros Kosiaris 06 May 2015, 16:48:05 UTC puppetmaster: latest to present As per our generic policy of not using puppet to push upgrades, changing all latest to present in puppetmaster module Change-Id: I22c8a9ed958f2d4307c3fc97b029f66e3ed0e006 20 May 2015, 14:28:04 UTC
b6ad52c Alexandros Kosiaris 06 May 2015, 16:41:25 UTC puppetmaster::gitpuppet lint cleanups Specify some requires Amend some obsolete syntax Change-Id: Iae97d94f9ca961b8741ad69a484bba8a986f4bde 20 May 2015, 14:28:04 UTC
c578f40 Alexandros Kosiaris 06 May 2015, 16:30:53 UTC puppetmaster::config Avoid out of module dependencies Instead of explicitly relying on the resources defined in the base module for dependencies, rely on the base::puppet class. The require/notify will be carried over to the resources in that class and the same goal will be achieved, with the added bonus of cleaner code Note that notify is a superset of require so the require parameter gets discarded as both amount to the same thing Change-Id: Ib6b0a5a7930bab31abec3f9e49abacda32aeb130 20 May 2015, 14:28:04 UTC
1e63f96 Alexandros Kosiaris 06 May 2015, 16:29:48 UTC puppetmaster::config. Minor lints Change-Id: If7db959757691d1bad95d897b087247359e6dfb7 20 May 2015, 14:28:04 UTC
ffc54d8 Alexandros Kosiaris 06 May 2015, 16:26:19 UTC puppetmaster::reporter::logstash. Remove the reporter namespace Having a reporter namespace in puppetmaster::reporter::logstash which is not being used by anything else is superfluous. Fold back to the main module namespace. While at it perform minor lints to the file Change-Id: Ife56525a6bafa99be8a106bfcbac4e42fe64fc1e 20 May 2015, 14:28:04 UTC
82ead80 Alexandros Kosiaris 06 May 2015, 16:22:13 UTC puppetmaster: remove extraneous empty line For documentation generator to work there should be no empty line between comments and the class definition Change-Id: Id6d866ee437614945a77798ddb8b7db60e0c7d89 20 May 2015, 14:28:04 UTC
38a36ba Andrew Otto 20 May 2015, 14:16:53 UTC Send refinery dump emails to Joseph as well Change-Id: Ib25f329707ac8da4a9547f78f135633c82185f7e 20 May 2015, 14:16:53 UTC
04e2a8e Andrew Otto 20 May 2015, 14:14:25 UTC Fix stderr redirection for hdfs balancer log Change-Id: Ic1d20fd374ff5312429329af16d4685e39f90a7a 20 May 2015, 14:15:18 UTC
2bcf5eb Andrew Otto 20 May 2015, 14:13:22 UTC Fix kafkatee logrotate olddir Change-Id: I448598634a3617bd7233e9723f80db7d6317988f 20 May 2015, 14:13:22 UTC
18632b9 Andrew Otto 20 May 2015, 14:09:08 UTC Compess kafkatee generated logs in logrotate (forgot to save before committing the last one) Change-Id: I96cc490d89f46a6debb9aa5c0b913ff23807aa01 20 May 2015, 14:09:08 UTC
15ca7b5 Andrew Otto 20 May 2015, 13:58:39 UTC Rotate kafktee generated log daily and compress Change-Id: I8158888610add91b7948410c927c4608a6c06edf 20 May 2015, 14:00:57 UTC
7faa0e6 Alexandros Kosiaris 20 May 2015, 13:54:30 UTC Merge "puppetmaster: cleanups in gitsync" into production 20 May 2015, 13:54:30 UTC
6336a05 Alexandros Kosiaris 20 May 2015, 13:51:32 UTC Merge "puppetmaster: remove legacy resources" into production 20 May 2015, 13:51:32 UTC
659b703 Giuseppe Lavagetto 20 May 2015, 09:49:24 UTC hhvm: adjust TC size and ratios I created the new values based on data collected in production Change-Id: I15a428c95b5affe27db323334a3ab47e11394c7f 20 May 2015, 10:03:51 UTC
1a7cf18 Giuseppe Lavagetto 05 May 2015, 10:25:08 UTC etcd: create puppet module This also creates the puppet role so that it is directly usable in production Bug: T97973 Change-Id: Ib80e3d3c3e46f9ff0b81c5dd675ce79184324576 20 May 2015, 09:33:34 UTC
ad7947e Matanya Moses 20 May 2015, 08:49:57 UTC mailman: restart mailman after config changes Change-Id: Iccb968655788a23b267beb3a622cf9836e73afb0 20 May 2015, 08:49:57 UTC
cf1fb79 Marko Obrovac 19 May 2015, 16:57:05 UTC Disable RESTBase restarts by Puppet on config change When the config/init files change, we do not want Puppet to do an uncoordinated restart of RESTBase, as that would likely fail. Also, this protects us from accidental modifications being deployed. Change-Id: I5161e9d4cbe9f9ac9d116fe28050be4ad9f48d76 20 May 2015, 08:39:42 UTC
d2f856d Brandon Black 20 May 2015, 07:40:32 UTC enable OCSP for misc cluster certs T97506 Change-Id: Ie804f1d3a1a46badcf5b0fc16b3c81b4b3b6d950 20 May 2015, 07:40:32 UTC
back to top