Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
7e3347f cpettet 07 September 2016, 14:39:47 UTC labstore: nfs-exportd monitoring into a manifest Bugs: T126083 Change-Id: I2162860119d723fbe968f3ca9f257214f66f655b 07 September 2016, 15:30:52 UTC
fd86a97 Giuseppe Lavagetto 07 September 2016, 14:53:29 UTC ssh::client: add ssh key to template Change-Id: I1922cfa44039e032326b604e700d3c5a82194564 07 September 2016, 14:54:08 UTC
6da4432 Giuseppe Lavagetto 07 September 2016, 14:41:21 UTC puppetmaster::puppetdb::client: add configs, directories Change-Id: Id664388852958be6ba6911c7312418f278b01b47 07 September 2016, 14:43:20 UTC
228d8a6 cpettet 07 September 2016, 14:14:45 UTC labstore: nfs-export-daemon renamed to nfs-exportd This matches 308886 Change-Id: Ieee6533f659f4d92c0ad6c1e7d0b345bee97db52 07 September 2016, 14:29:22 UTC
0f7fdc8 Alex Monk 06 September 2016, 23:40:22 UTC Kill references to $::instancename Bug: T101447 Change-Id: I954ac93e29f80e22bebe73a5804b073388888dd2 07 September 2016, 14:26:16 UTC
d415625 cpettet 06 September 2016, 21:53:20 UTC labstore: nfs-exports/nfs-exports-daemons settle on nfs-exportd Right now the service is nfs-exports and the main file is nfs-exports-daemon. Settle on nfs-exportd. Change-Id: I82aa3a8f47c31b6f3c5be5f4a705ff3a25868729 07 September 2016, 14:02:33 UTC
385cddb elukey 07 September 2016, 06:57:29 UTC Add the logrotate delaycompress setting everywhere This is a proposal to fix the annoying daily cronspam: /etc/cron.daily/logrotate: gzip: stdin: file size changed while zipping From the man of delaycompress: "Postpone the compression of the previous log file to the next rotation cycle. This only has effect when used in combination with compress. It can be used when some program cannot be told to close its logfile and thus might continue writing to the previous log file for some time." It seems to be a non invasive solution, but I am open to suggestions. A better and more elegant step would be to refactor all the classes to use the proper logrotate class, in order to have only one single template for logrotation, but it could be difficult as first step. The solution proposed should solve the immediate problem setting a baseline also for future copy/paste of the logrotate files. I have also added "compress" where it was present only "delaycompress". Bug: T132324 Change-Id: Ib9ae51989d8de215072539d45034d83b3a68b540 07 September 2016, 13:46:59 UTC
061662e Filippo Giunchedi 07 September 2016, 13:41:26 UTC hieradata: move admin::groups to thumbor::mediawiki Change-Id: I7be53ec6975a84af4d8931e8090d59367f451f91 07 September 2016, 13:41:26 UTC
58cc1d8 Filippo Giunchedi 02 August 2016, 17:11:46 UTC introduce thumbor-admins group Bug: T139606 Change-Id: I7cbf52e25e60d00634265cbbcc0613c780c7772b 07 September 2016, 13:35:39 UTC
873d759 Faidon Liambotis 07 September 2016, 13:12:41 UTC Really split the mirrors role class Commit 4899ebb78bc323a1120cbea7018bc9617efe27e1 attempted to split the mirrors role class but ended up splitting it to role::installserver::mirrors which is hardly a role class. Split it to role::mirrors instead, as it conceptually has nothing to do with installing servers or anything like that. Include the class from carbon, which should make this endeavour a noop. Change-Id: I756457caa259e68ad4b481a9a1a8473875c2d5aa 07 September 2016, 13:33:37 UTC
448b70c elukey 07 September 2016, 13:16:24 UTC Allow the nda LDAP group to access yarn.w.o Bug: T116192 Change-Id: Iec84ca1f5295ed678dd66d5fe28d03f11660c853 07 September 2016, 13:29:23 UTC
93b71c6 Faidon Liambotis 07 September 2016, 12:58:39 UTC role::installserver::mirrors fixups Various fixups to commit 4899ebb78bc323a1120cbea7018bc9617efe27e1, that split mirrors out of role::installserver: - Move mirrors::tails to it, forgotten behind - Add system::role with the role name - Add base::firewall and the HTTP/HTTPS rules, making sure to not conflict with the already existing install_server ones. Change-Id: I3cbc00b5bca2702c5fa4393c0111102735e29f13 07 September 2016, 13:16:15 UTC
71d5739 Faidon Liambotis 07 September 2016, 13:04:40 UTC installserver: minor simplification of a ferm rule Change-Id: Ie77d043c9b526b9905ac7d8f5299b5421edd7a21 07 September 2016, 13:16:15 UTC
732bef6 Guillaume Lederrey 05 September 2016, 16:22:07 UTC maps - create project specific indices during initial data import Some indices are required by specific functionalities. The definition of those indices is stored near the code using them to ensure coherence. They need to be re-created when data is re-initialized. Change-Id: I8cf242beaaf7c992c721fb799b5078a9c2e71aca 07 September 2016, 12:48:10 UTC
190306e Filippo Giunchedi 07 September 2016, 12:36:36 UTC swift: add thumborhost port 8800 Change-Id: I64dd7eaa1a322ba19173f4866e92df052dfce5a9 07 September 2016, 12:36:36 UTC
9ce217d Alexandros Kosiaris 05 September 2016, 08:58:19 UTC pybal: Fix require_package Puppet 4.x syntax Puppet 4.x syntax requires parentheses in custom functions. Fix it Change-Id: Iebd9e6b67cf89be2381b8bd0585cf368949fc0ca 07 September 2016, 12:22:53 UTC
6f4426c Alexandros Kosiaris 07 September 2016, 11:36:24 UTC puppetmaster: Redirect cron job stdout/stderr to /dev/null No reason to receive cron spam for this Change-Id: I40b817ec792565816d94607e1af74aa4e7de9a16 07 September 2016, 12:22:36 UTC
e56e218 Moritz Muehlenhoff 25 August 2016, 07:31:36 UTC Add modules-load.d/kmod configuration for br_netfilter for Linux >= 3.18 Starting with 3.18 (34666d467cbf1e2e3c7bb15a63eccfb582cdd71f) the netfilter code was split from the bridge kernel module into a separate module (br_netfilter). Ideally, the nova upstart job/systemd unit would deal with that, but let's load it in puppet for now. Bug: T142388 Change-Id: I9d66a39d62caa6c80a74894da9c633e57197edd9 07 September 2016, 11:58:32 UTC
656cb9b Marko Obrovac 07 September 2016, 11:17:55 UTC Change-Prop: Fix concurrency calculation for transcludes 364a635 doubled the concurrency for transclusion updates. However, it seems that Puppet interprets that as a string, causing Ruby to repeat the number twice instead of doubling it numerically. This patch fixes that by forcing a conversion to a number before the multiplication. Change-Id: I8af871cfd15accaa2337716d4960dec497c607b2 07 September 2016, 11:32:27 UTC
03a4905 Antoine Musso 07 September 2016, 11:01:11 UTC contint: prefer our bin/php alternative The php7.0 package from packages.sury.org has an alternative priority of 70 which takes precedence over our alternative script: $ update-alternatives --display php php - manual mode link currently points to /srv/deployment/integration/slave-scripts/bin/php /srv/deployment/integration/slave-scripts/bin/php - priority 60 /usr/bin/php5 - priority 50 slave php.1.gz: /usr/share/man/man1/php5.1.gz /usr/bin/php7.0 - priority 70 slave php.1.gz: /usr/share/man/man1/php7.0.1.gz Current 'best' version is '/usr/bin/php7.0'. Raise our script priority to 100. Bug: T144872 Change-Id: I5ae1009144bf73dfa71fdaf9e0cff92a4c413c95 07 September 2016, 11:21:09 UTC
a14b93e Marko Obrovac 06 September 2016, 17:10:31 UTC Change Prop: Send the if-unmodified-since header on transclusion updates Send it to limit the amount of requests processed by RB/Parsoid and to eliminate unnecessary re-renderings of titles. Change-Id: I38a1879a4add7a65305e551c60d8adfd4d8364dd 07 September 2016, 11:08:39 UTC
364a635 Petr Pchelko 06 September 2016, 19:13:56 UTC Change-Prop: Increase concurrency for transclusions After a while it's clear that we don't keep up with the rate of transclusion updates, so but concurrecy or this rule even more. Change-Id: I7066c2a293cf24aa30e966b1f60b19c64aa3ae21 07 September 2016, 11:06:51 UTC
dfa5eb9 Guillaume Lederrey 05 September 2016, 13:31:24 UTC graphite - fix storage_schemas order Storage schemas are matched in the order in which they are declared in the configuration file. We write them in alphabetical order, so renaming the "default" schema to "zzdefault" ensure that the default schema comes last in the configuration file. This feels a bit like a hack, but less than dropping configparser_format or hacking it to support non alphabetical ordering. Change-Id: Ib4c96c0f80908b7894f5d631becc2525d3c66e46 07 September 2016, 10:56:55 UTC
0940cbb Alexandros Kosiaris 07 September 2016, 10:35:53 UTC Revert "Rename ores deploy repo" Ends up cloning from an empty repo on gerrit. Reverting in the interest of getting this done correctly and not breaking deployment This reverts commit 73f443d7a617de8ac96f9fec6826abe4052f1b3b. Bug: T139008 Change-Id: Id09a8c7bd9f7654efc764308d10ebc4433c0d2ef 07 September 2016, 10:36:20 UTC
f136f0f elukey 07 September 2016, 10:18:32 UTC Extend the access to yarn.wikimedia.org to the wmf group Bug: T116192 Change-Id: I6131e6e6dbefb55d02db9b317592db1152c32c50 07 September 2016, 10:19:40 UTC
f2eead0 Filippo Giunchedi 06 September 2016, 14:52:43 UTC swift: enable shadow thumb requests for small wikis Note that resulting thumbnails are stored in swift but not served back to users. Bug: T139606 Change-Id: I8096ce865cf6a94c6cff993612d9016159f97690 07 September 2016, 10:17:35 UTC
12772cb amir 30 June 2016, 03:18:56 UTC Rename ores deploy repo Bug: T139008 Change-Id: I8c27470f1b6df1898d3142ca13514c3e57b0e657 07 September 2016, 10:12:17 UTC
3ee35f9 Moritz Muehlenhoff 07 September 2016, 09:49:33 UTC Update SSH key for Alexander Krause Bug: T142780 Change-Id: I9e012276ec272b05dfbca2381ef3fb37eac99be9 07 September 2016, 10:04:04 UTC
8ec7484 Kunal Mehta 07 September 2016, 01:56:51 UTC contint: Add PHP 7 packages from packages.sury.org This uses the packages.sury.org Debian repository to provide and install packages for PHP 7 on jessie contint machines in labs. Bug: T144872 Change-Id: I14e1b61f38082c8a0ae859dbb9939682515588ca 07 September 2016, 09:51:18 UTC
3a8dd80 Jcrespo 06 September 2016, 07:06:18 UTC nagios: Add marostegui to the dba contact group The dba group does not receive currently any exclusive alert, but that may change in the future. Change-Id: I77425ccf65c51624eb5c58808f5fb6411a439ff1 07 September 2016, 08:12:12 UTC
f027389 elukey 06 September 2016, 17:23:42 UTC Move yarn.w.o traffic to stat1001.eqiad.wmnet The Analytics team added an Apache VHost to stat1001 to support yarn.wikimedia.org. The VHost authenticate the user via Basic Auth + LDAP and proxies the requests to analytics1001 (that runs a Java based web-server). Bug:T116192 Change-Id: I72efac79b727d20dfc3fbd2b08d0e3182ee614ee 07 September 2016, 08:06:13 UTC
4a12b9e Moritz Muehlenhoff 05 September 2016, 15:09:42 UTC role::statistics: Limit to production networks We're removing INTERNAL, since it's too broad. rsync access should only occur from hosts in production networks, so use $PRODUCTION_NETWORKS. Change-Id: I1063621f6ea461380081895d63c0a36e793ff057 07 September 2016, 07:02:55 UTC
004e538 Paladox 03 September 2016, 16:24:34 UTC pybal: Fix optional parameter listed before required parameter Bug: T93645 Change-Id: I09cc342039205b3efa9ab2d511bca2abadf23445 06 September 2016, 23:54:54 UTC
97cedda Paladox 03 September 2016, 15:51:15 UTC lvs: Fix optional parameter listed before required parameter Bug: T93645 Change-Id: Ie946603eee038ac642501cdf559a75c0cb70b9c8 06 September 2016, 23:48:55 UTC
e14d2be Paladox 03 September 2016, 18:36:13 UTC statsd_proxy: Fix optional parameter listed before required parameter Bug: T93645 Change-Id: I8bc0529c0e4e15df4d13ec483ae38241954c0b1f 06 September 2016, 23:36:31 UTC
27bcc11 Paladox 03 September 2016, 15:49:40 UTC lvs: Fix indentation of => Bug: T93645 Change-Id: I42a704f38512a5e56f7d7fde3e1da170471e9432 06 September 2016, 23:20:44 UTC
dbfcb3a andrewbogott 06 September 2016, 08:08:31 UTC ldap::role::client::labs: Allow restricted_from and _to from hiera Bug: T101447 Change-Id: I1fe7f1dd89f08206f3f11d72d21c9f3e2f45ddf4 06 September 2016, 21:53:23 UTC
ae5d53c YuviPanda 06 September 2016, 21:51:47 UTC tools: Provision /srv volume for prometheus Change-Id: Ie3ace1d363853761383fc085c7edc57a3654b6d3 06 September 2016, 21:52:30 UTC
23572f7 cpettet 06 September 2016, 20:40:41 UTC tools: exec-manage option parsing and list option * add list command to output possible execs * shuffle usage into a function for reuse * output on no args or -h Change-Id: I7d1f705462d3aa65f875c87ed862f1cbcc6b444f 06 September 2016, 21:40:08 UTC
aac718a andrewbogott 06 September 2016, 08:03:03 UTC toollabs: Allow $::node_dedicated_tool to be set from hiera Bug: T101447 Change-Id: I61133a9c469dc98740bc81e1a866bf72cf1bad43 06 September 2016, 21:34:53 UTC
9f31ea7 andrewbogott 06 September 2016, 07:58:22 UTC role::labs::lvm::mnt: Allow mount_point to be set from hiera Bug: T101447 Change-Id: Ia36380fe0d8436c04baaaea178290782012a41d8 06 September 2016, 21:16:39 UTC
808f00f andrewbogott 06 September 2016, 07:49:24 UTC mediawiki_singlenode: Move $::labs_mediawiki_hostname to a param Bug: T101447 Change-Id: I6500aa8cda778188b25ebbd6dffc9a6145c8e47b 06 September 2016, 20:42:26 UTC
ce33f36 Brandon Black 06 September 2016, 19:41:33 UTC ciphersuites: drop mid-level SHA-2 HMAC suites This should affect ~2.6% of client requests, downgrading them from mid-grade (FS CBC-mode) ciphers with SHA-2 to otherwise equivalent ciphers with SHA-1. ClientHello sampling as well as known data on popular browsers indicates this is a non-issue (all the SHA-2 negotiators affected also support the equivalent SHA-1 option). The HMAC downgrade here doesn't actually affect security, so this should just reduce the noise in our list of broken ciphers we support for backcompat (and their stats) without actually impacting client security in any meaningful way. The SHA-1 variants are slightly faster anyways, not that it matters much in practice. There's a little more risk in this one than most of our other recent ciphersuite simplification changes. We'll need to watch stats closely to verify the affected clients shift to the ciphers we expect them to, and revert if they don't. Change-Id: I0696e0dd15d3c09d5e39570d7807c2c9e8bbc013 06 September 2016, 19:56:58 UTC
2c2507b andrewbogott 06 September 2016, 07:36:30 UTC wikistatus: Rename some oslo. imports to oslo_ Because openstack can't stop renaming things, ever, ever, ever Change-Id: Iaa44d8dd1ce4c2565f398d721a8700686fbc6800 06 September 2016, 07:38:29 UTC
1be76ee RobH 30 August 2016, 16:48:07 UTC new star.wmfusercontent.org certificates this patchset includes new key file contents for both the RSA and ECDSA signed certificates for *.wmfusercontent.org. This should NOT be pushed into service without also updating the private key files. The new private key files are in the repo with new.keyname. These should be git mv into place as the keyfile name without the prepended new. Bug:T140649 Change-Id: I6304a62c053524c6cb2d3a1fa768a6d70087adcf 06 September 2016, 18:25:19 UTC
e4abf4e Paladox 03 September 2016, 02:24:25 UTC Fix setting phabricator logo Follows-up: 98589f0f636be175ac20b50683764f8c0a0e8707 Change-Id: Ic7a10f60aa5eeb9cba15fcedf1d505bfefdb026e 06 September 2016, 18:13:52 UTC
f87c122 Paladox 29 August 2016, 23:56:07 UTC phabricator: Add text/x-python to files.viewable-mime-types Change-Id: Ifd4a6484be5b9aab8b1b30e7a2ed49b0609597e7 06 September 2016, 18:06:09 UTC
a969a6f Paladox 03 September 2016, 15:32:54 UTC docker: Fix optional parameter listed before required parameter Bug: T93645 Change-Id: Iae18ce2681268be46852ed80f2787f531fc22f32 06 September 2016, 18:03:14 UTC
4828ec4 Paladox 03 September 2016, 16:16:02 UTC puppetmaster: Fix indentation of => Bug: T93645 Change-Id: I0eba3799f831a5a47f95c4f1ad42918b064db548 06 September 2016, 18:00:34 UTC
6385e99 andrewbogott 06 September 2016, 04:34:56 UTC Add egg-info files for wikistatus plugin. This should get our entrypoints set up as we need them. Change-Id: I87fbf3d9027029c6e5fbbd6a1e50c3e80074febf 06 September 2016, 17:35:29 UTC
c532e67 Bryan Davis 02 September 2016, 00:38:05 UTC google_api_proxy: Add role for Google-api-proxy Labs project Add a role that can be used to provision one or more nginx reverse proxies in the Google-api-proxy Labs project. This project provides static outbound IP addresses for Tool Labs tools and other Labs projects that are using Google APIs. Expected to be used with wikitech managed hiera configuration similar to: role::labs::google_api_proxy::instances: google-api-proxy.wmflabs.org: proxied: https://www.googleapis.com default: true googlevision-api-proxy.wmflabs.org: proxied: https://vision.googleapis.com This was originally committed as I2fe9263 but then reverted in Id199f0c due to T119042 (putting roles into module/roles conflicts with role/*.pp import). A README is added to modules/role/manifests to help remind people of this potential problem. Nobody ever reads the docs, but hey it is worth a shot. Bug: T144290 Change-Id: Ie9e38b243309d110695c776908c22ce556a7b7b8 06 September 2016, 17:05:38 UTC
d39a282 Brandon Black 31 August 2016, 14:58:47 UTC deployment caches: enforce secure POST (etc) Change-Id: Id08727f3acdc8ef6d43b8f91e6a1eb2261aa511c 06 September 2016, 16:50:24 UTC
07f2787 Brandon Black 06 September 2016, 13:14:44 UTC text VCL: remove support for rest.wm.o Bug: T133001 Change-Id: Ife5860a9fbf07b92e2ce6fcb7291f75e3cbfc412 06 September 2016, 16:49:41 UTC
4237761 Paladox 03 September 2016, 15:59:29 UTC nagios_common: Fix optional parameter listed before required parameter Bug: T93645 Change-Id: I2b02c493f303ff2000e609635be660ce1e5257bf 06 September 2016, 16:46:37 UTC
d7a38f9 Paladox 03 September 2016, 15:30:36 UTC deployment: Fix optional parameter listed before required parameter Bug: T93645 Change-Id: I354e638296e67c4c0b7a7225844e639a287b34cd 06 September 2016, 16:43:59 UTC
ad69851 Paladox 03 September 2016, 15:41:02 UTC ganglia: Fix optional parameter listed before required parameter Bug: T93645 Change-Id: Icf06eaba5964e34921b03aa90741770b30249656 06 September 2016, 16:41:35 UTC
8ac98ea Paladox 03 September 2016, 10:57:41 UTC manifests/role/dns: Fix indentation of => Bug: T93645 Change-Id: I3ad66a427f3c4e5bcaa6545eba032ac8fe8df585 06 September 2016, 16:30:50 UTC
2a51bba Sébastien Santoro 06 September 2016, 16:24:36 UTC Wikitech: fix Apache Alias order Apache wants more specific Alias directives first. Reference: https://httpd.apache.org/docs/current/mod/mod_alias.html#order This is a follow-up for 612627225f10. Change-Id: I3867af6721877edddc2f4aea2d77afe160102b9d 06 September 2016, 16:24:36 UTC
9a4ae5b Alex Monk 06 September 2016, 15:20:04 UTC Follow-up I65c58485: Fix style Change-Id: Ib2f4c0c0630ca765c0b5c167b1a4ba4795d79553 06 September 2016, 16:18:16 UTC
6126272 Sébastien Santoro 05 September 2016, 23:41:23 UTC Wikitech: Serve /srv/math-images as /w/images/math Bug: T126338 Change-Id: Id2751dccf71acaf497e00f465d2c1366f95b62f5 06 September 2016, 16:13:45 UTC
f66cb52 Moritz Muehlenhoff 06 September 2016, 13:27:20 UTC RT: Drop old code only relevant for precise/magnesium magnesium/precise has been replaced with ununpentium/jessie, so this can be removed. Change-Id: Icf1b644bbff422b20354b78d14b7a02c3f8fd5ce 06 September 2016, 16:09:32 UTC
e781520 Petr Pchelko 02 September 2016, 19:59:03 UTC Change-Prop: Rerender mobile-sections when wikidata item is changed Bug: T144632 Change-Id: Ic3f4bf6bb58b5fccc2480fe0413385e76c595fe3 06 September 2016, 16:02:53 UTC
a54f2c2 elukey 06 September 2016, 11:55:21 UTC Reduce cronspam to root@ from zookeeper zkCleanup script The analytics hosts define the JAVA_TOOL_OPTIONS environment variable in /etc/environment to prevent issues like T128295. The zookeeper zkCleanup script emits messages like the following everytime it runs in cron: 'Picked up JAVA_TOOL_OPTIONS: -Dfile.encoding=UTF-8' We want to keep informed about legitimate failures logged to stderr but we don't care about any JAVA_TOOL_OPTIONS message. Bug: T132324 Change-Id: I8b55c3e3e809182b3c1dbae8d25bfbb967c98c46 06 September 2016, 15:43:56 UTC
ce6fcaf Filippo Giunchedi 06 September 2016, 15:04:30 UTC thumbor: fix swift account name Change-Id: I9771eec3c7b87ca2a7a47f7bd781f7c022e9a477 06 September 2016, 15:31:58 UTC
82841a5 Giuseppe Lavagetto 06 September 2016, 15:14:14 UTC puppetdb: fix variable scoping Change-Id: I642a1a85dd8081d33dad87ed6feaebf691961bd6 06 September 2016, 15:14:14 UTC
da9b5f9 Giuseppe Lavagetto 06 September 2016, 14:59:41 UTC puppetdb: allow large POSTs from the puppetmaster Change-Id: Ie678489ff1d2ef932ab7bcf1152b7076f3573412 06 September 2016, 15:03:33 UTC
a446279 Alexandros Kosiaris 06 September 2016, 14:39:42 UTC postgres: Ensure postgresl-contrib installed Turns out we might need postgresql-contrib more often than just to support postgis. Ensure it installed in any postgresql server Change-Id: I3210bcf5ec23377d0e7f8585d3e3a0a0552154d9 06 September 2016, 14:48:32 UTC
d59e38c elukey 06 September 2016, 14:35:36 UTC Fix Yarn apache configuration with the missing ldap password Change-Id: I42d8bc9a7538508c51c2dd42563679cf57b2d0d5 06 September 2016, 14:36:06 UTC
db64c79 Alex Monk 02 September 2016, 14:09:11 UTC openstack: Import openstack-wikistatus nova plugin Instead of deploying it with debs sourced from a repository outside the normal naming conventions, import it into puppet. Files come from the 'wikistatus' directory of openstack-wikistatus.git, revision 2b040abb31b52fe490e4f01742a0bbc8cfa06557 Bug: T144317 Change-Id: I65c58485226c6996731f2c7e328f65d5872a9790 06 September 2016, 14:28:54 UTC
a8a88a9 Filippo Giunchedi 06 September 2016, 13:52:52 UTC swift: add thumbor configuration Change-Id: Id44a7b23d08e89c78c4d462f70bc00176ca050be 06 September 2016, 14:25:44 UTC
adb2651 elukey 06 September 2016, 12:52:44 UTC Add a proxy to the Yarn UI on stat1001 This is an attempt to add a LDAP Basic auth in front of the Yarn UI to avoid using ssh tunnels to get information about the health of the Hadoop cluster. This code change enables only the ops group but it can be easily extended. Known downside: I added a Proxy directive with a domain name (analytics1001.eqiad.wmnet) rather than a straight IP, this will of course cause more work for during each request handling. Bug: T116192 Change-Id: If7d1a2b46e1d645e3ac749fea069318d27dee390 06 September 2016, 14:23:54 UTC
473b82b Alexandros Kosiaris 11 August 2016, 09:06:38 UTC Move labtest hiera in regex.yaml In 9bb29c12, in an effort to fix unrelated problems, labtest hiera was modified to be per host. This was a temporary stopgap and not optimal. Fix it in a more permanent way by moving all the lookups from the individual hosts to the regex.yaml file. This allows the shared labtest configs to be in one place again in a DRY fashion Change-Id: I17017965a3e7f66256ec1ea6f550f34690fad9fd 06 September 2016, 14:21:04 UTC
f45fbf1 Giuseppe Lavagetto 06 September 2016, 14:12:58 UTC ssh::client: further fixes to known_hosts Change-Id: I939abe95370887c694910749fb5aefce60296985 06 September 2016, 14:13:59 UTC
8242c8d Filippo Giunchedi 06 September 2016, 14:01:13 UTC admin: add filippo to analytics-privatedata-users Bug: T144811 Change-Id: I1676db0b8cbd25e118f5f529464ff724abbfb94c 06 September 2016, 14:01:13 UTC
a0ce9e7 Giuseppe Lavagetto 06 September 2016, 13:47:19 UTC ssh::client: fix function call in template Change-Id: I2173ecdc8fbe0a9fbb3872e3cb1ff9341b5aabac 06 September 2016, 13:52:54 UTC
39188f3 Antoine Musso 03 September 2016, 11:37:29 UTC labstore: ignore autoloader layout lint error labstore::drbd has a few defines that are used to ensure uniquness of resources. Even if they do not match the autoloader layout, there is probably no point in having each in a standalone .pp file. Bug: T93645 Change-Id: I46ca1bb6363abc81ce199726277b5a292a1f1651 06 September 2016, 13:44:01 UTC
2093467 Marko Obrovac 06 September 2016, 13:33:57 UTC Change-Prop: Increase tranclusion concurrency During template updates, a large amount of pages might need to be re-rendered. In order to go through the backlog a bit quicker than usual, increase the allowed concurrency for transclusion jobs by 50% Change-Id: I88680f8a723ec822cf7e8c75dee87002238a9866 06 September 2016, 13:43:18 UTC
b8744f2 Alexandros Kosiaris 06 September 2016, 13:40:54 UTC puppetdb: Fix typo in ssh known hosts generator Seems like the function name is plural not singular. Of course the README does not agree with that, so if this works, I 'll fix that too Change-Id: Ic62d065641d76df10c3d35d01f7f67b96ba8c4c1 06 September 2016, 13:40:54 UTC
bb60333 Filippo Giunchedi 06 September 2016, 13:31:19 UTC thumbor: better firejail comment about required /sbin Change-Id: I21e0d7199457ea00a3af0f2d4c8b60fc04fb8182 06 September 2016, 13:37:20 UTC
dec54ad Alexandros Kosiaris 06 September 2016, 13:16:01 UTC puppetdb: Cast settings::storeconfigs_backend In order to get settings::storeconfigs_backend matching the "puppetdb" string we needed to cast it to a String Change-Id: I934d0861005d522fc549752f9c6cd23e4f29ebea 06 September 2016, 13:31:34 UTC
520737c Gilles Dubuc 12 July 2016, 09:20:31 UTC Add ability to dual-serve a portion of Swift rewrite.py traffic to Thumbor This shouldn't do anything without the thumborhost and thumbor_wiki_list config values set. Bug: T140072 Change-Id: I1eb90c604555c78526c32425ed9678d0e60c73ae 06 September 2016, 13:11:53 UTC
662507c Brandon Black 06 September 2016, 13:04:49 UTC ciphersuites: drop DHE SHA256 option from mid List cleanup: ~0.13% negotiate this presently, but in sampling ClientHello they all seem to fall back to the security-equivalent SHA-1 option, which we need to support for quite a while yet due to mostly to Android 2.x and/or OpenSSL 0.9.8. Change-Id: I11b6245dfc71892f1e997934eb63e43a488bdf1b 06 September 2016, 13:04:49 UTC
fe3bb55 Brandon Black 06 September 2016, 12:57:44 UTC ciphersuites: remove DHE+AES256 from strong list List cleanup: very few negotiate this (avg <0.000001% last week), and we'd rather not encourage any further growth in DHE stats unnecessarily by offering a 'strong' option using them. DHE is on its way out in the world, and they'll still reach us, they'll just fall back to other (technically-worse) choices. Change-Id: I19f4f5cc514bb0cf11304eb27945d68a8a99c20d 06 September 2016, 13:02:33 UTC
98d3fdc Brandon Black 04 September 2016, 14:17:20 UTC ssl_ciphersuite: remove DHE+chapoly Nothing has negotiated this to date, and it seems unlikely any client will ever implement this as their only ChaPoly option, seeing as DHE is on its way out the door everywhere and viewed as a distateful fallback option. Change-Id: I9c4b2844bd8a26a2b9ef1ef38df72e8758565112 06 September 2016, 12:34:40 UTC
056a0f6 Alexandros Kosiaris 06 September 2016, 12:32:15 UTC puppetdb: One more whitespace typo fix Remove the trailing whitespace in section's name Change-Id: Iaa55bce27e0a28912ce578f112b5449b7f4a5038 06 September 2016, 12:32:15 UTC
a531fe9 Alexandros Kosiaris 06 September 2016, 12:26:54 UTC puppetdb.conf: Remove whitespace typo Whitespaces around "main" in [main] cause an error Unparseable line '[ main ]' Remove those Change-Id: I9d86cbd9d95b5ebd11b33c9c0b99799999d92a4f 06 September 2016, 12:26:54 UTC
2311e2e Alexandros Kosiaris 06 September 2016, 12:19:08 UTC puppetmaster: Fix /etc/puppetdb.conf Newline characters are not evaluated inside single quotes and just replacing the single quotes with double quotes seems wrong. Populate a file and ship it instead Change-Id: I325606df55228a5d39a9bff80e85276526b46228 06 September 2016, 12:19:08 UTC
ab769d5 Giuseppe Lavagetto 14 August 2016, 10:11:28 UTC ssh::client: allow using puppetdb Bug: T142846 Change-Id: I91320b04c97a742cd367f122a504f79b7056f8fd 06 September 2016, 11:44:09 UTC
9d4595d Giuseppe Lavagetto 05 September 2016, 13:55:59 UTC puppetdb: use on codfw puppetmaster This is just for testing puppetdb, given the codfw infrastructure is still not actively used. Change-Id: If15afd0b44f8de4e25797caf5a99d10a3f077240 06 September 2016, 11:24:09 UTC
2939964 Giuseppe Lavagetto 06 September 2016, 11:17:10 UTC puppetmaster::puppetdb::client: fix typo Change-Id: I6d1205df4fd28c8eb9409920a692476ad3ca3e12 06 September 2016, 11:17:10 UTC
c1c701b Petr Pchelko 05 September 2016, 16:11:19 UTC Change-Prop: Encode page title before calling links module If the page title contains special characters like slashes we need to url-encode it before calling the links module. Change-Id: I25e93ba88847a8be7c46f20426e0555d1110d8b9 06 September 2016, 11:12:51 UTC
331b09d Filippo Giunchedi 06 September 2016, 09:48:23 UTC thumbor: don't double log timestamps Bug: T139606 Change-Id: I0acc45dcef84c8d35c911a44835d8246c143bc5f 06 September 2016, 10:39:19 UTC
a0b94f4 Moritz Muehlenhoff 05 September 2016, 17:26:29 UTC postgres/osm: Restrict to labs networks OSM needs to be accessed from labs only (apart from standard exceptions like monitoring etc). Also rename it to postgresql_osm to make it more distinguishable. Change-Id: I301af3809929b102be8fe6d2eb7e2af13e7c9dcf 06 September 2016, 09:49:34 UTC
f8b7c0e Alexandros Kosiaris 06 September 2016, 09:28:46 UTC puppetmaster: Add apache::mod::lbmethod_byrequests On jessie+ boxes we have to enable the lbmethod_byrequests apache module the get BalancerMember loadbalancing by requests. The apache::mod::lbmethod_byrequests class does that already and even takes care of distribution version conditionals. Change-Id: Ie9674694c9b7d25ae91c3947bcd41e37a93fccf9 06 September 2016, 09:35:44 UTC
5aa4c78 Antoine Musso 05 September 2016, 15:41:32 UTC nodepool: stop injecting show:true to images We had images with the the property show=true to have them shown in Horizon. From T91782 that is no more needed and upstream added a 'disabled' property instead. Drop the property block for both jessie and trusty update. Bug: T91782 Bug: T144753 Change-Id: I5ded52f96dbcf33295a5b3280fcabf7b981ac6c9 06 September 2016, 08:34:15 UTC
6f79bc0 Alexandros Kosiaris 06 September 2016, 07:37:08 UTC puppetmaster: absent the post-merge hook on backends The post-merge hook on backends is no longer useful and actually spews an unwanted error. Even if it was not erroring out it would just create duplicate email notifications which we can do without. Ensure it absent Change-Id: I5a3bda2b8e4a31078b416d6542a8fd9c129ad175 06 September 2016, 08:09:53 UTC
8737885 Alexandros Kosiaris 06 September 2016, 07:28:48 UTC On git masters, make /srv/private gitpuppet owned /srv/private on puppetmaster git masters should be gitpuppet owned otherwise syncing fails Change-Id: Ia3350ffa1e1f24d3900a4725873a0a0bc2b773b4 06 September 2016, 08:09:42 UTC
a301bd8 Alexandros Kosiaris 05 September 2016, 16:13:28 UTC Specify master branch to push in private repo There is no point in not defining the branch we want to push anyway in this case and it also appeases a git behaviour when on the receiving end the repo is empty Change-Id: I56297483f0da0d34cbc56191c856e7d31b864e17 06 September 2016, 08:09:23 UTC
9cf53d1 Moritz Muehlenhoff 05 September 2016, 17:19:49 UTC Rename ferm service for postgres/puppetdb There are multiple ferm services for postgresql databases, rename to postgresql_puppetdb to make them nore distinguishable. Change-Id: Ia292ca0d7db1d3d616d12a868d3db5f4caa67700 06 September 2016, 07:55:01 UTC
fb69ea7 Kunal Mehta 05 September 2016, 22:34:53 UTC Add test to ensure there are no *.pp files in modules/role/manifests/ Bug: T144774 Change-Id: Iee980ad0c4251818af51d54945b6f67c36aac7c8 06 September 2016, 07:51:45 UTC
back to top