Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
ee40a64 Alexandros Kosiaris 02 November 2016, 11:07:55 UTC Revert "Revert "tendril: Supply a robots.txt disallow all robots"" Resubmitting for review This reverts commit cd910baa67f6d98e1a3d9f6de1c534d579ad743e. Bug: T149340 Change-Id: I837ab1803d7a190409ebb4a5c94bbd09dd627422 02 November 2016, 11:08:43 UTC
1b14423 Alexandros Kosiaris 02 November 2016, 11:07:30 UTC Revert "tendril: Supply a robots.txt disallow all robots" Per the comments in I120ed8102950372e6400 This reverts commit eb7b48c3e33dd99fef6365a6d10df8504cc14ae8. Bug: T149340 Change-Id: Ide48243048331c2c4225cd9b6ea1f707f9b9c9ca 02 November 2016, 11:08:29 UTC
1c0a103 Giuseppe Lavagetto 02 November 2016, 09:01:52 UTC profile::docker::registry: allow overriding the swift password Change-Id: I145f2d7af09e17989f465a7e3cf0416ba08c1b22 02 November 2016, 09:01:52 UTC
d9a6206 Daniel Zahn 27 October 2016, 21:48:23 UTC icinga: move files/icinga/ into module Move the remaining scripts from ./files/icinga/ into the icinga module along with the other check scripts. check_iostat and check_mailman_queue are used on the list server. check_job_queue and check_subdir_limit appear to be unused (?). Also removes some lint-ignore's. Bug: T110893 Change-Id: I8417070a632244589ad633d8c67e6e7b5496568d 02 November 2016, 08:22:44 UTC
0cb13f1 Giuseppe Lavagetto 31 October 2016, 11:13:05 UTC thumbor: use restart:always instead of on-failure Thumbor does exit with exit code 0 (I don't know if this is due to the interaction with firejail or not) when failing in certain situations. Thus systemd won't restart it; change the restart policy to Restart=always to make sure it gets respawned even in such cases. Change-Id: Ia3a6959c455f52c8f3b085d9509eababa898d213 02 November 2016, 07:49:50 UTC
45cc1ee Daniel Zahn 02 November 2016, 05:48:18 UTC aptrepo: fix typo in template that broke release uploads this stupid typo was a good part of the problems with uploading the latest release to releases.wm, before we even got to varnish.. no-op on carbon. fixes and sets distro to jessie per compiler: http://puppet-compiler.wmflabs.org/4514/ which is exactly the manual fix that we applied on bromine. we can now enable puppet on bromine again. .. Change-Id: I8157e055df004fbfa6865f8e0d6a2246e1592302 02 November 2016, 05:56:50 UTC
20c3c25 Antoine Musso 08 September 2016, 12:42:02 UTC zuul: migrate server only settings out of merger The url_pattern and status_url settings are solely for the Zuul server. Stop populating them for both merger and server. Change-Id: I97c1c702be1f44bcdc647517567cb6169d3100f4 02 November 2016, 02:35:09 UTC
9789b54 Faidon Liambotis 01 November 2016, 15:51:34 UTC netops (etc.): add asw2-d-eqiad Change-Id: I779561919640298473be8f72b41e36e5cf637b40 02 November 2016, 00:34:05 UTC
558735e Daniel Zahn 15 October 2016, 00:45:29 UTC add mapped IPv6 address for contint1001 Let's give it a proper IPv6 address and DNS records right from the beginning since this is in the middle of being setup. Change-Id: Ia04f192fb6daf6a65a18a0c1d91b07c56e8ba946 01 November 2016, 23:35:09 UTC
dcf7882 Alex Monk 01 November 2016, 23:27:45 UTC deployment-prep: Fix deployment access.conf rules to allow all deployment servers Not just tin. Also simplifies things. Change-Id: I76bc9348453e19617e48e464712e26370932bc4d 01 November 2016, 23:31:33 UTC
328dfe8 Alex Monk 20 October 2016, 20:32:37 UTC shinkengen: Ensure consistent ordering of hostgroups Otherwise --test-if-up-to-date is rarely (if ever) going to work properly Change-Id: Ic5515e36c1c6616a7eb90df5300886ffa0c557d3 01 November 2016, 23:28:11 UTC
8ad6943 root 01 November 2016, 22:50:45 UTC Remove extra non-ASCII character in role::cache::text that was causing issues A 0xC2 character caused clients to think the class could not be found Change-Id: I9ca0a1a0265fd8056b65e1171e382e7762752f95 01 November 2016, 22:55:15 UTC
7dea7c5 YuviPanda 01 November 2016, 22:06:13 UTC quarry: Explicitly add python2 plugin Quarry is still python2 Change-Id: I9e11dc727977e8262936c36c5ffe02b18a896110 01 November 2016, 22:06:49 UTC
9b99c87 Filippo Giunchedi 01 November 2016, 21:18:23 UTC mtail: introduce systemd unit Allow mtail to ran as mtail:root. mtail requires being able to read log files in /srv/syslog (duh!) and therefore either running as user root or group root. The former is unnecessary for obvious reasons, and the latter isn't straightforward without changing the sysv init script shipped with mtail. Bug: T147923 Change-Id: I4cacc9d95dbf94ff3288408ef5b67138908e6709 01 November 2016, 21:18:25 UTC
9e6fa48 Daniel Zahn 21 October 2016, 19:56:03 UTC add mapped IPv6 address for eventlog1001 This would be nice because then we can do things like Ia611b075d18a91630fd and have rules for v4 and v6 without needing a special case for this host. Because other hosts like deployment and maintenance already have v6 but this does not. Change-Id: I3f5d90a66d5f9c205d80f73f4dc15b99442512f1 01 November 2016, 20:06:27 UTC
8e7a124 Filippo Giunchedi 18 October 2016, 11:09:47 UTC centralserver: add mtail for kernel messages Bug: T147923 Change-Id: Id4cecbeba4b72f1449ad8f73364f5254c96b4b89 01 November 2016, 19:03:26 UTC
8ec2656 Filippo Giunchedi 18 October 2016, 11:06:03 UTC Introduce mtail module The idea is to extract metrics from (sys)logs and report the results as time series to graphite/statsd/prometheus Bug: T147923 Change-Id: I7fbde97762decbac4cb1ec1984eb987f63ec60e6 01 November 2016, 19:01:30 UTC
f443c8e Ariel T. Glenn 31 October 2016, 10:10:04 UTC mgmt/changepw: clean up indentation, formatting and comments Change-Id: I9aa575e1a1223548d10fd38249fae8bb2442d751 01 November 2016, 18:58:42 UTC
07e9883 Filippo Giunchedi 01 November 2016, 18:42:34 UTC prometheus: swap varnish_exporter ports fe/be Change-Id: I3bd9f4220472af6826500c49a04105a7fa89b6c4 01 November 2016, 18:45:19 UTC
9da08c7 Daniel Zahn 01 November 2016, 17:32:52 UTC admin: add datacenter-ops on iron Let datacenter-ops use iron to run some nmap scans of the mgmt network. Bug: T147074 Change-Id: I1cdde348e0640a3000ba5ebfc1d8e9dd38690cd1 01 November 2016, 18:26:06 UTC
a01acba Madhumitha Viswanathan 01 November 2016, 17:59:54 UTC Remove nfs backup role from labstore200[3-4] in site.pp Change-Id: I32710fdc58101cb553cf8abbd1cfd3dc4e1f77d7 01 November 2016, 17:59:54 UTC
d0aad20 Madhumitha Viswanathan 01 November 2016, 17:28:41 UTC nfs backup: Fix requires paths on mount definitions Change-Id: Icf040eef28cca8c486b73c60dd8579350ed8be7b 01 November 2016, 17:28:49 UTC
d11731e Madhumitha Viswanathan 01 November 2016, 17:17:46 UTC nfs backup: Add mount definitions for backup volumes Change-Id: I8a91f3f02bb0d472fa1f5f34bb46a38d72d113aa 01 November 2016, 17:18:01 UTC
cf73efa Moritz Muehlenhoff 18 October 2016, 11:25:17 UTC Also provide imagemagick wrapper in openstack::nova::manager On app servers and image scalers, convert(1) from imagemagick is contained in a firejail profile. Silver receives the same setting in wmf-config/CommonSettings.php via $wgImageMagickConvertCommand and since we also need to scale graphics on wikitech, provide them in openstack::nova::manager as well. Bug: T145811 Change-Id: I58bf3b925d84c2c92668ec31378c40c840678da0 01 November 2016, 16:52:55 UTC
d73f82e Filippo Giunchedi 01 November 2016, 16:10:42 UTC graphite: s/avg/average/ for aggregationMethod Change-Id: I855384a2ae4d35ad2ee4c6d7d3f7be5b3803126d 01 November 2016, 16:10:42 UTC
8f55063 Filippo Giunchedi 19 October 2016, 14:53:07 UTC graphite: change Cassandra '.count' metrics aggregation Also clarify in comments why the default aggregation schema comes last with 'zzddefault'. Bug: T121789 Change-Id: I43fbb699a6643ebb74fee63d40bc9ca2d211170b 01 November 2016, 15:59:45 UTC
3a17a20 andrewbogott 31 October 2016, 02:20:54 UTC nova_fixed_multi: Change a bunch of debug messages to warnings Making this noisier by default should help us track creation/deletion of records. I don't want to switch all of designate logging to 'debug' because that will flood me with other info we don't care about. Bug: T115194 Change-Id: Ic0906527e7821d489751762064adf81f41fbf873 31 October 2016, 02:27:40 UTC
240c5be Alexandros Kosiaris 25 October 2016, 08:07:27 UTC icinga: Increase max_concurrent_checks tegmen and einstenium are expected to be able to withstand a bit more pressure. Increase the number of max_concurrent_checks by 10% Change-Id: Ic73ca67ed66e1a9d5451d202aa32a6870a755504 01 November 2016, 14:20:47 UTC
bbb8fbc Alexandros Kosiaris 01 November 2016, 14:16:17 UTC Use icinga.wikimedia.org instead of einsteinium.wikimedia.org Since it's possible to now have multiple icinga servers it's quite possible we will be switching the active one between servers. Use the icinga.wikimedia.org name instead of the host name for tcpircbot configuration Change-Id: I24900275abbf882e1acbc683d7c7a16ffc9b24b5 01 November 2016, 14:20:27 UTC
633763b cpettet 01 November 2016, 14:15:49 UTC labstore: keep nfs-kernel-server management in nfs-manage Change-Id: Ia3e9cb32ed79b4e42df57d45c620675cef0f4b50 01 November 2016, 14:16:43 UTC
07f8361 Faidon Liambotis 26 August 2016, 12:16:14 UTC nagios: do both RSA/ECDSA checks in check_sslxNN Until now, check_sslxNN was checking the certificate that was served to it during the TLS negotiation. This may have been one of the two serving the domain (either RSA or ECDSA), leaving the other one unchecked. Check both, effectively doubling the number of check_ssl checks done by this check. Change-Id: I4b41b478eaf7bf828424c1097a40e0a085732cb7 01 November 2016, 13:32:39 UTC
1939c6d Brandon Black 01 November 2016, 13:14:23 UTC check_ssl: don't report full SAN list on success Change-Id: I2c8bfbe4a81396a0edc50046f015c0e60f2c6fe4 01 November 2016, 13:15:08 UTC
977ee55 cpettet 01 November 2016, 12:53:08 UTC labstore: 'other' is really misc-project Change-Id: I99680097a48573bf9bbe74f89b65ff2dffcaf3bb 01 November 2016, 13:03:36 UTC
991dea7 Brandon Black 31 October 2016, 17:57:48 UTC Replace check_sslxNN with check_ssl_unified This is just a config rather than a separate script, and connects only once per authalg while validating OCSP and the full unified SAN list. Change-Id: Ie09fc1ac3e0de63110a3c6c0307b75a41fb18e1c 01 November 2016, 12:55:00 UTC
3ac7043 cpettet 01 November 2016, 12:29:46 UTC labstore: tc-setup new classes * throttle to write to labstore1003 where scratch is temporarily * throttle write to new service ip for tools NFS Change-Id: I5e1adaeb478d920cd01edc831153e4aa53b67041 01 November 2016, 12:31:33 UTC
b5d57a7 cpettet 01 November 2016, 11:23:03 UTC labstore: nfs-manage patches * Tries to use block device as a mount path for another block device at the moment. * A few command paths need updating * Adjust ruby in template whitespace output * Make 'help' match case statements * Add mount_path to drbd/resource.pp for use in config array Change-Id: I878cc2bb1ddb430a331c73774ecdff8cac19747d 01 November 2016, 11:25:47 UTC
8a1072d Brandon Black 01 November 2016, 10:56:39 UTC sort nagios command lists Change-Id: Ied74f184fc304e15c3cc529abb498c16f70b29e7 01 November 2016, 10:57:39 UTC
3297ef2 Emanuele Rocca 31 October 2016, 15:28:32 UTC cache_text varnishtest: beacon and CP Add tests for beacon endpoints and 'Connection Properties' cookie. Bug: T131503 Change-Id: I92942de0be016e3eb8a015b3a5abc79c058c7dd2 01 November 2016, 10:02:53 UTC
3dac0d7 Alexandros Kosiaris 01 November 2016, 09:34:12 UTC icinga: switch tegmen and einsteinium roles Let's test switching icinga servers works fine. Change-Id: If45ad202bbc0de65a9c3a198e29b29ef0f1056fb 01 November 2016, 09:37:18 UTC
af36422 Alexandros Kosiaris 01 November 2016, 09:21:18 UTC icinga: Always display all results in web interface No point in only displaying 50 entries, always display everything Change-Id: Icdd53fce8d64c9e0141da67e5dc98d7d5ef02386 01 November 2016, 09:36:35 UTC
4aefbe1 Guillaume Lederrey 27 October 2016, 19:19:30 UTC elasticsearch - enable GC logs by default Bug: T134853 Change-Id: I23ebf07a11116913faf1497032757fab43bdbb6c 01 November 2016, 09:21:37 UTC
8aa9562 Guillaume Lederrey 01 November 2016, 09:16:39 UTC Revert "cirrus - disable the rebuild of completion indices" This reverts commit f113cefa345acb5c97c8d03ad2a7e8cf858292d1. Change-Id: I80811dd630df7dc9f2949321391630c3f48574a1 01 November 2016, 09:17:07 UTC
eb7b48c Alexandros Kosiaris 31 October 2016, 10:41:27 UTC tendril: Supply a robots.txt disallow all robots While the site is protected behind LDAP authentication, it makes no sense for (well-behaved) robots to try and access it in case something changes. Bug: T149340 Change-Id: I120ed8102950372e640086f91f7eaf4729cfae62 01 November 2016, 09:07:01 UTC
5d5d0a7 Alexandros Kosiaris 31 October 2016, 16:21:21 UTC icinga: Add comments about paging infrastructure update Add a few comments so that when we move the primary icinga host to new hosts we will not forget to update paging infrastructure whitelists Change-Id: Ibaba6209d2b8c51bfde83523d1933f1413ceb31e 01 November 2016, 09:06:34 UTC
d05a6cb Madhumitha Viswanathan 01 November 2016, 07:56:43 UTC nfs-manage: Fix space trimming in template Change-Id: Iff010bfc18b3fb2b394e6d06008ed62fdef27998 01 November 2016, 07:56:43 UTC
30979cd Madhumitha Viswanathan 01 November 2016, 07:12:04 UTC nfs: Fix drbd resource definition Change-Id: I3dbbfe37fcbb51c9d35976c2f3e0b4718624f8be 01 November 2016, 07:28:53 UTC
49f711d Madhumitha Viswanathan 01 November 2016, 03:50:12 UTC nfs: Move labstore secondary cluster hiera config to eqiad.yaml Need move this to a dedicated hiera file along with all other drbd config soon Change-Id: I65b64befe8183817d94c86385316f3564563e71b 01 November 2016, 03:50:15 UTC
644391e Madhumitha Viswanathan 31 October 2016, 23:32:08 UTC nfs: Fix hiera variable access for drbd config Change-Id: I6343688a575cb671fd4139470ea65496c8c8ff48 31 October 2016, 23:32:08 UTC
7b785a8 Madhumitha Viswanathan 31 October 2016, 23:10:32 UTC nfs: Move drbd resource config to hiera Change-Id: I709edf75763aea07c38f50106cd58a3b5076ff82 31 October 2016, 23:13:37 UTC
41e6e1b Madhumitha Viswanathan 31 October 2016, 17:09:23 UTC nfs: Add script to manage NFS server on labstore secondary cluster Change-Id: I395d2e487459c0aa6ddf315b88db0450b1e1c43d 31 October 2016, 22:00:52 UTC
8dc92fc cpettet 31 October 2016, 21:15:28 UTC labstore: nfs-manage-binds add option to list bind mounts This prints active bind mounts under the root of the /exp tree which may be using the filesystem. Change-Id: I945296c950c83fedce0c2ac2f191b732de9b18d3 31 October 2016, 21:42:54 UTC
e36762b Daniel Zahn 31 October 2016, 21:26:17 UTC admin: add zareen to *-privatedata-users, researchers quote: "Zareen needs access to event logging and weblogs. She also needs to be able two write hadoop jobs against the weblogs or transfer event logs to hadoop for larger operations." Bug: T149211 Change-Id: I6c6ab9f57cfbeaa06618803204c531917367179b 31 October 2016, 21:36:54 UTC
55a4633 Faidon Liambotis 26 August 2016, 12:16:14 UTC check_ssl: append (RSA|ECDSA) to name if authalg specified Change-Id: I13ebd5ae73480f9c4ede2d645d2cf9467a3035d5 31 October 2016, 19:59:07 UTC
0f827bc Brandon Black 31 October 2016, 14:49:46 UTC check_ssl: support OCSP Stapling New option "-o off|valid|must-staple" (default off) valid: Actually check OCSP and fail hard if it's not valid (may check externally over the network if not stapled? not sure) must-staple: As above, but require stapling off: Do not ask for stapling or verify OCSP (default) Time remaining to the stapling nextUpdate stamp are also checked with the default warning at 3 days out and the default critical at 1 day out. (Our current vendor serves 4-day responses). Bug: T148490 Change-Id: I02ab77d2bbc2f0966a2b49c3c6982898fa7755c1 31 October 2016, 19:58:48 UTC
3611d8b Brandon Black 31 October 2016, 17:38:48 UTC check_ssl: add --sans argument This adds an optional verification step which takes a list of comma-separated SAN elements as --sans, and checks that the server's certificate SAN list contains all of them. Change-Id: I920a1fe55dc97ebd5c7682a141e056b1403e95d3 31 October 2016, 19:42:26 UTC
018f3e3 Brandon Black 31 October 2016, 17:31:10 UTC check_ssl: clean up ssl_verify/_subject_matches ssl_subject_matches was giving incorrect verbose output for the SAN list (only showing the final element of the SAN list), because it lacked the transformation already done on the same data in ssl_verify above it. Fix this up by merging the two functions (which are called sequentially anyways) and having them share common correct data for SAN and names arrays and strings. Change-Id: I3af922b63b42a57d91d6f9adad014765b562c53c 31 October 2016, 19:42:26 UTC
983a7d8 YuviPanda 31 October 2016, 16:38:36 UTC nfs: Wait 10s between nfs-exportsd restarts To help recover from 'transient' wikitech outages Change-Id: Ic2bf9ab901d2ca4dae88e2d9ee571bb67a131ed6 31 October 2016, 19:10:43 UTC
7aef3ee YuviPanda 13 October 2016, 19:04:49 UTC tools: Grant clush user complete sudo rights for everything Also include toollabs::infrastructure explicitly, to deny non root / non-admin users access. SCARY Change-Id: I99b067b2a76feb0281ac881d7052cceefd790a37 31 October 2016, 18:56:38 UTC
097302d Daniel Zahn 31 October 2016, 18:44:09 UTC fix permissions on changepw script, let all users run it Any user (on salt masters) should be able to run this script, avoiding the need for sudo rules for this. It doesnt allow anything more than the existing access, since you still need to know the mgmt password to do anything. (just like when you'd SSH to it directly) Change-Id: I9b98f1eeee8a2121dabd4248a09c85bf226c4cf2 31 October 2016, 18:52:22 UTC
13dd711 cpettet 31 October 2016, 18:26:53 UTC labstore: secondary cluster setup eth1 using interface::manual sets interface to come up on boot Change-Id: I50df27749c7e83823c2192da119fa64536cb40b4 31 October 2016, 18:48:39 UTC
06cd3f6 Daniel Zahn 29 October 2016, 15:41:38 UTC admin: create shell account for Zareen Farooqui Create shell user for Zareen Farooqui, requested for her internship projects with the Reading team. quote: "Zareen needs access to event logging and weblogs. She also needs to be able two write hadoop jobs against the weblogs or transfer event logs to hadoop for larger operations. UID matches existing Labs/Wikitech user. Key is different from Labs key. Bug: T149211 Change-Id: I236906df140b62239c0e843243c0809c5b380787 31 October 2016, 18:29:32 UTC
1782aad Daniel Zahn 30 October 2016, 03:19:47 UTC admin: add niedzielski to contint-admins Add Stephen Niedzielski to contint-admins, so that he can maintain the Jenkins job to run Android tests for the mobile team. As requested by hashar and approved by greg-g. Bug: T149233 Change-Id: I7b1820fc326d0d668b8e8e7d1199bda759c61f69 31 October 2016, 17:13:06 UTC
bb25b12 Andrew Otto 31 October 2016, 17:02:27 UTC Add kafka1003 into conftool for eventbus service Bug: T148849 Change-Id: Ib6504aa597797644a4fe4cc2ed72df8d3971202d 31 October 2016, 17:06:14 UTC
1b3cda0 cpettet 31 October 2016, 16:05:02 UTC labs: tc-setup param thresholds applied We have a use case for per-project settings here and this is a prereq. Change-Id: I31785c7a4412d350f09b7c012226b66cccb69a81 31 October 2016, 16:11:41 UTC
0da8b45 Giuseppe Lavagetto 31 October 2016, 15:28:45 UTC profile::docker::registry: fixup for I4383ea6e Change-Id: Ia3b61dc7865279f10dff52a901dcb68535b7edbb 31 October 2016, 15:28:45 UTC
1f7bfd9 Giuseppe Lavagetto 31 October 2016, 15:25:24 UTC profile::docker::registry: define correctly the swift password Change-Id: I4383ea6e38c4b774a857b0e6a634ea8b7bbb62ec 31 October 2016, 15:25:24 UTC
8700ff6 Giuseppe Lavagetto 31 October 2016, 15:02:50 UTC profile::docker::registry: remove duplicate declaration Change-Id: I87cc55292dda5e37e8116ba49620090d27824246 31 October 2016, 15:02:50 UTC
91da4d5 Giuseppe Lavagetto 31 October 2016, 14:56:40 UTC docker::registry: fix parameter passing for swift Change-Id: I7df4aa13dcaee2226725174a8b74fc0e735250da 31 October 2016, 14:56:40 UTC
7509b20 Giuseppe Lavagetto 31 October 2016, 14:39:27 UTC docker::registry: fix typos Change-Id: I9154fa652da84daa1f177b6fc322083f6206ca67 31 October 2016, 14:39:27 UTC
6ffabd3 Giuseppe Lavagetto 25 October 2016, 11:38:55 UTC docker::registry: puppetization for production Bug: T148966 Change-Id: Iddbac366bde6010b87f7032ea7950a0b3590ff20 31 October 2016, 14:24:25 UTC
f62c41a Andrew Otto 28 October 2016, 18:14:42 UTC Add kafka1003 to main-eqiad Kafka cluster Bug: T148849 Change-Id: I832201e9cbf3497022ad99ca752e4a6b240089b4 31 October 2016, 14:12:07 UTC
0b962e3 Brandon Black 31 October 2016, 13:43:51 UTC stream.wm.o: remove old monitoring class This pre-dates the move to cache_misc termination. Change-Id: I1119ff7787c114473c724ec5863d0a2e5926c0ce 31 October 2016, 13:44:36 UTC
73404cc Alexandros Kosiaris 31 October 2016, 13:29:56 UTC icinga: Purge unmanaged local resources Bug: T149376 Change-Id: I66afbe0bf6d50b6b70c15004fbdb31a0e50f617f 31 October 2016, 13:35:48 UTC
5564384 Alexandros Kosiaris 31 October 2016, 13:15:52 UTC Kill monitoring::decommission_monitor_host As the comment says, this should go away, it is not used anymore by anything Change-Id: Ia84e274f719bc461be25843010a3b40684aed73f 31 October 2016, 13:35:31 UTC
99986f2 Ariel T. Glenn 31 October 2016, 11:58:14 UTC add mirror list to dumps download page, clean up formatting Change-Id: I0ed2b829acbc659904ca67e98ee573f44e9fadb2 31 October 2016, 11:58:14 UTC
c50284e Giuseppe Lavagetto 27 October 2016, 16:17:32 UTC base::service_unit: enable/disable the service if managed here We want units to correctly respect their WantedBy stanzas if enabled, so that i.e. services start at the server boot and not following the first puppet run. This is valid even for the other init systems, although there under debian derivatives it is mostly irrelevant in those cases. Change-Id: I6d2b50d782da5c82846888ed81a869701b0b7fbd 31 October 2016, 10:23:33 UTC
d9d06fb Daniel Zahn 27 October 2016, 22:04:35 UTC icinga: remove ServerAlias with hardcoded hostname First impulse was to update "neon" to "einsteinium", second was to replace it with "<%= @hostname %>", third was to remove the ServerAliases altogether. Or is there a need for them and we want them to exist? Currently you'll get a certificate error for https://einsteinium.wikimedia.org/ Bug: T125023 Change-Id: Ie79954982faa0d7687864f85f15d8301533d5266 31 October 2016, 08:54:08 UTC
d4c39c1 YuviPanda 31 October 2016, 04:13:49 UTC jupyterhub: Add some hardening for the notebooks Bug: T149543 Change-Id: I4e999af8351abd2e67fb337993c3ad85a796501a 31 October 2016, 04:24:02 UTC
fef09c3 Madhumitha Viswanathan 31 October 2016, 04:15:18 UTC jupyterhub: Remove venv creation from deploy script Puppet already creates the venv Change-Id: I820cf3686e3e24980a3a3f83c934574102d951e0 31 October 2016, 04:16:30 UTC
25c3efc YuviPanda 31 October 2016, 03:56:38 UTC jupyterhub: Specify proper class for config keys LocalAuthenticator doesn't exist. We could use the correct name of the class we derived, but that is unnecessary I think - the way I understand traitlets to work, this should work too. Change-Id: I6a9b7377f313f9789441ef2b192b8a8a14c87941 31 October 2016, 04:02:39 UTC
f83d40f YuviPanda 31 October 2016, 03:21:14 UTC jupyterhub: Safer defaults for authenticator We'd rather have LDAP be the default, and someone in labs not be able to get in, than dummy be the default and be accidentally enabled in prod Bug: T149543 Change-Id: I0a51bf09ab620d0333a94db393ca5a7d02527056 31 October 2016, 03:24:08 UTC
2ed1092 YuviPanda 31 October 2016, 03:20:55 UTC paws_internal: Rename hiera file to match Change-Id: I937f133fa49ee33953646aa14f04b17c71e518de 31 October 2016, 03:23:51 UTC
375e3a5 Madhumitha Viswanathan 10 May 2016, 20:43:40 UTC jupyterhub: Add module to set up Jupyterhub for paws-internal See https://wikitech.wikimedia.org/wiki/PAWS/Internal for more information. Bug: T149543 Change-Id: I33104206fe75d817531c23f10e4ccf225da81fa0 31 October 2016, 02:55:56 UTC
0643004 andrewbogott 30 October 2016, 15:55:58 UTC Fix typo in mariadb::service include This takes a 'package' arg, not a 'version' arg. Change-Id: I07e081bd8ef18bb2881bea62baa8b6070f42a481 30 October 2016, 15:55:58 UTC
9d3d295 Jcrespo 18 October 2016, 17:23:12 UTC labs dns: Add mariadb::service and changes for new package New package and class manages mysql symlinks and init.d automatically. Change-Id: Ic7b4ed6d4de9ea035c31074461fe37aea15b51c5 30 October 2016, 14:47:29 UTC
f113cef Guillaume Lederrey 27 October 2016, 09:38:28 UTC cirrus - disable the rebuild of completion indices The rebuild of completion indices is a fairly long operation. To help the reboot of terbium we can disable those crons for a short period. This change should be reverted once terbium is rebooted. Change-Id: I1b585a88257737c70dfd7d2f260fa5dc4ccfeb64 30 October 2016, 13:53:23 UTC
1175f92 Filippo Giunchedi 28 October 2016, 22:38:38 UTC Offboarding Rob Lanphier Change-Id: I650f2add0ee40b4d8614ab7ea228edc2630fcd93 28 October 2016, 23:29:59 UTC
62c301f Daniel Zahn 21 October 2016, 23:57:51 UTC phabricator: add vcs::listen_addresses for codfw Add the phabricator VCS listen address for codfw, added to DNS in I2e1d2114a6c048e50. This will be the equivalent to iridium-vcs.eqiad.wmnet (renamed to phab1001-vcs.eqiad.wmnet) = 10.64.32.186 but for codfw. We need to adjust puppet manifests to use the right IP for the right datacenter and not the same IP on both, leading to problems like T143363. There are more changes needed but this is a start of it, compare to existing hieradata/role/eqiad/phabricator/main.yaml. Bug: T143363 Change-Id: I4c5709a2561f3af24364c76df97032fde4b19c65 28 October 2016, 23:07:45 UTC
1fcaa70 Daniel Zahn 28 October 2016, 23:02:37 UTC mgmt: add missing # in changepw script and some spaces Change-Id: I53f91162fc55896247f4dc7c0f872ed5829f4d60 28 October 2016, 23:02:37 UTC
cf186b8 pt1979 28 October 2016, 22:34:40 UTC script to change mgmt password Change-Id: Iae0ca122cc471a1623d821ed72046fab6d40e942 28 October 2016, 22:49:18 UTC
7a1700d YuviPanda 28 October 2016, 20:10:55 UTC tools: increse k8s apiserver open files limit Current limit seems to be 1024 and that is exhausted quickly Change-Id: I5f04f24aaf50007ba71904cf741677d2b735bbd2 28 October 2016, 20:13:41 UTC
140f07b cpettet 28 October 2016, 18:38:18 UTC k8s: install bridge-utils with docker::engine This package contains utilities for configuring, inspecting and debugging the Linux Ethernet bridge. Notably comes with `brctl` for debugging such as `brctl show`: bridge name bridge id STP enabled interfaces docker0 8000.024251e804d6 no veth0d74a21 veth18940d3 Change-Id: I73729b6bfca065a051773ba4242251dafc7a53cd 28 October 2016, 19:19:00 UTC
baf27a8 Filippo Giunchedi 26 October 2016, 19:11:27 UTC hieradata: add swift user for docker_registry Bug: T149098 Change-Id: I88d76f18e6069554a020ef2eec1d949107a97b61 28 October 2016, 19:06:56 UTC
2ddc822 YuviPanda 13 October 2016, 19:04:31 UTC tools: Update clush classifier prefix for static nodes Change-Id: I47e86b141fc18a9f967eae36db8fcf9e8abac917 28 October 2016, 18:27:36 UTC
f2cece0 Antoine Musso 25 October 2016, 21:29:05 UTC contint: move php5 install on jessie to nearest user On Debian Jessie, mediawiki::packages no more install the Zend PHP. That has to be done explicitly via mediawiki::packages:php5. contint::packages was/is meant to be shared between production and labs slaves, however everything now runs on labs. Move the definition to contint::packages::labs next to the include of mediawiki::packages. Change-Id: Ide58718c9da3cf1ada60e304c082704b63aa66d4 28 October 2016, 16:49:38 UTC
d32f3c8 Antoine Musso 25 October 2016, 21:15:42 UTC contint: move doxygen/graphviz to labs instances doxygen is the utility to generate online documentation. It used to be run directly on the Jenkins master (contint::packages) which is no more the case nowadays. doxygen depends on Graphviz to generate methods/function call graphs and class dependencies. We had a use for Graphviz on the production/Jenkins master which was for the "job dependency graph". As indicated on 3906dbe72, the plugin is no more used and thus we no more need Graphviz on the Jenkins master. Move 'doxygen' and 'graphviz' from contint::packages (for prod) to a new standalone class contint::packages::doxygen. Include the new class solely on the labs Jenkins slaves (contint::packages::labs). Change-Id: I8fa65a35047b0d0734a6b0a6e021e7dd053e0e58 28 October 2016, 16:37:35 UTC
fac58aa Andrew Otto 28 October 2016, 15:24:55 UTC Use same partman recipe for all kafka-main hosts Bug: T148849 Change-Id: Ifc3aac705144c607b169298a2b4463107587d66f 28 October 2016, 16:08:20 UTC
57f87aa Guillaume Lederrey 28 October 2016, 15:59:53 UTC maps / postgresql: monitoring uses template1 database Change-Id: I775de411a257891339eb525b20a8e18673a2c6e4 28 October 2016, 15:59:53 UTC
e40eea6 Emanuele Rocca 28 October 2016, 11:05:43 UTC cache_text varnishtest: set X-Carrier based on XCIP Test setting X-Carrier based on XCIP using a test version of carriers.json. Bug: T131503 Change-Id: I94f79faa7a4e5cdd8ad7a12e22d7c29fe0fd2f9f 28 October 2016, 15:03:27 UTC
d624529 Emanuele Rocca 27 October 2016, 16:46:30 UTC VCL: allow to load test versions of netmapper JSON files Do not hardcode /var/netmapper in wikimedia-frontend.vcl.erb, use a template variable instead. Specify a different directory for the test version of wikimedia_text-frontend.vcl to allow loading test versions of carriers.json and proxies.json. Change-Id: Icca24978a200ec45638dd4ff03182b3f33f23540 28 October 2016, 14:14:04 UTC
back to top