Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
db45b2a andrewbogott 14 July 2017, 06:20:27 UTC puppetmaster: Add an additional option, 'thin' for profile::puppetmaster::common::storeconfigs: As per Faidon's comments on 6f5b8353462f26b93fb72ba35763476265e48b4f Change-Id: I2006ebd0eb31708914abac691af9770f7527e049 14 July 2017, 06:24:04 UTC
c8b8927 elukey 17 July 2017, 13:32:45 UTC profile::piwik::backup: remove duplicate old backup clean cron The predump script already removes old data (15d old) so this cron is not needed. Bug: T164073 Change-Id: I20a8b8fc011fe88be4f505ea6155422b529a29f2 17 July 2017, 13:32:45 UTC
4c469a0 elukey 17 July 2017, 13:01:12 UTC profile::piwik::backup: use quotes for the backup's password field Bug: T164073 Change-Id: I07176fe4a421b44fcc679b6eb270239d42c1c552 17 July 2017, 13:03:06 UTC
cf81df8 Giuseppe Lavagetto 17 July 2017, 11:14:26 UTC puppet-compiler: bump to 0.2.1 This fixes a bug with diffing for the future mode Change-Id: Iea33498c19d78a2ba2e7f0846b5e404ccaab07fc 17 July 2017, 11:15:16 UTC
d659231 halfak 14 July 2017, 19:42:38 UTC Adds aspell-el to ORES base.pp Bug: T170709 Change-Id: I88e511b24b0333aa8b2084dde8a08f5cd055b8d4 17 July 2017, 09:58:38 UTC
6ddd83a andrewbogott 13 July 2017, 14:13:41 UTC Puppetmaster profile: Support switching off active records We want this for the labs puppetmaster -- no db needed. Change-Id: If08d30df67247673eee14c177b5b732387efb073 17 July 2017, 09:41:10 UTC
d6f5694 Moritz Muehlenhoff 10 July 2017, 10:26:42 UTC Restrict ores::web to domain networks Accessed via Varnish Change-Id: Ifc2c07908db640ee0797bc60247938f405d36bfa 17 July 2017, 09:19:21 UTC
943e68a Giuseppe Lavagetto 17 July 2017, 08:03:08 UTC puppet-compiler: bump to code version 0.2.0 Bug: T169546 Change-Id: Ibaa0cae3b99865fb538663fdcd5dfa68c05a735f 17 July 2017, 08:03:08 UTC
389f6a9 Daniel Zahn 15 July 2017, 04:17:54 UTC smokeping: restrict http access to prod networks smokeping is behind cache::misc so it doesn't need to talk http to everything anymore. Change-Id: Iaffef289242d93aeed3e605c990543300216a562 15 July 2017, 04:19:16 UTC
124e1b5 Daniel Zahn 15 July 2017, 03:51:42 UTC servermon: restrict http access to prod networks servermon nowadays is behind cache::misc so it only needs to talk http to prod networks, not the world. netmon1003 was still created in .wikimedia.org to be equivalent to other netmon*. but we can close it this way. (this is like same change for RT Iebc3228fc69f1) Bug: T170653 Change-Id: Ia08157bc853f4d2be441d6512b29f97eac16181d 15 July 2017, 04:03:36 UTC
465241a Daniel Zahn 15 July 2017, 02:54:21 UTC servermon: remove role from netmon1001 This is now running on netmon1003, remove role from netmon1001 so that there is no additional "make updates" cron running and talking to db. One step closer to decom netmon1001. Bug: T170653 Change-Id: I4cca02ff082a913dad2de5fcf2dc91c9fe1cc3e8 15 July 2017, 02:59:04 UTC
fc260e7 Daniel Zahn 15 July 2017, 02:24:32 UTC cache::misc: switch servermon from netmon1001 to netmon1003 Bug: T170653 Change-Id: Ib8966a3d7aef2b7f5debd7e77cebcd5dfa6c5998 15 July 2017, 02:39:27 UTC
eca16e0 Daniel Zahn 15 July 2017, 02:17:35 UTC cache::misc: add director for netmon1003 This will be hosting servermon, moving over from netmon1001. Gotta add the director first. Bug: T170653 Change-Id: I66dff48666050341cf47672c6d4c385540114488 15 July 2017, 02:23:21 UTC
452bddc Keith Herron 15 July 2017, 00:17:41 UTC Lists: Change exim filter for spam observed from qq.com Update exim filter with messages attributes seen in spam sent to list -owners addresses. Set check_rfc2047_length = false to decode unusually long subject headers. Bug: T170601 Change-Id: Id5a9766f7b8a3d304d73829eb385cb132e89680a 15 July 2017, 00:26:13 UTC
2513287 Daniel Zahn 14 July 2017, 21:51:12 UTC site: add netmon1003 with servermon role Bug: T170653 Change-Id: I99b4481057a0a1238fbe9fffa7830e6748348fc2 14 July 2017, 22:06:13 UTC
7697df8 Daniel Zahn 14 July 2017, 20:49:48 UTC install_server: netmon1003 use jessie, not stretch Bug: T170655 Change-Id: I85236f65ee182b8b64c3cd4dc4653e01a62a0cb6 14 July 2017, 20:54:41 UTC
3f5278b Brandon Black 14 July 2017, 19:14:34 UTC librenms: bugfix for HTTPS redirect The HTTP->HTTPS redirect was using an empty hostname in the Location header. Turns out this is due to a type of @sitename as @site_name. Also fixed up the other obvious place the templated value could/should be used here. Change-Id: Ie76c15129aeadd618b47b17996b7a011f141e198 14 July 2017, 19:17:53 UTC
7acb959 Keith Herron 14 July 2017, 18:39:23 UTC Lists: Add exim filter for spam observed from qq.com Filter in exim messages with attributes seen in spam sent to list -owners addresses. Bug: T170601 Change-Id: I649a27fb0850f0de6755af1bd8f9497bb684d006 14 July 2017, 18:46:00 UTC
fc1f1b2 Daniel Zahn 14 July 2017, 18:20:28 UTC install_server: add netmon1003 to DHCP/partman Bug: T170655 Change-Id: I463056f3b68aa27910886c1ef0745d5120e5b631 14 July 2017, 18:25:00 UTC
2742353 RobH 14 July 2017, 17:15:55 UTC setting labnet100[34] install params set dhcpd lease, netboot partitioning, and basic site.pp inclusion for firewalling Bug:T165779 Change-Id: I62fbf742bd4e1b10d1c604aa2b4356ed33cb2cc5 14 July 2017, 17:15:55 UTC
d64be19 Keith Herron 14 July 2017, 15:21:43 UTC Change lists to reject spam score of 6 or greater via exim acl Exim on lists currently rejects mail with a spam score of 12 or greater. Lowering to 6 will more aggressively filter spam at the lists MTA. Bug: T170601 Change-Id: I34aa0952a2198f2172df76dfa979a3278375db65 14 July 2017, 16:32:12 UTC
9aa81c9 addshore 14 July 2017, 15:59:10 UTC Remove time command from statistics::wmde crons It looks like this can't be found on stat1005 for this user, so just remove it. Bug: T170282 Bug: T170472 Change-Id: Ieeb88f7f821e08173535473d55ef84b229e6677e 14 July 2017, 15:59:46 UTC
d737c17 andrewbogott 13 July 2017, 14:21:24 UTC Include labsrootpass on labs puppetmasters Change-Id: I7359611818e9591c027fcc19a1b2be15ebd7353b 13 July 2017, 14:21:39 UTC
bf15f71 Moritz Muehlenhoff 14 July 2017, 09:25:42 UTC Add labpuppetmaster* to site.pp to enable base::firewall Installed with a public IP, add it to site.pp to apply base::firewall. Bug: T167905 Change-Id: Ibcb54500e4bb691465068804085453f189894c50 14 July 2017, 13:47:49 UTC
262cc3a Moritz Muehlenhoff 14 July 2017, 09:16:48 UTC Add labweb* to site.pp to enable base::firewall Installed with a public IP, add it to site.pp to apply base::firewall. Bug: T167820 Change-Id: I878348c20bcaec94e1f54f63258761ef0963eadc 14 July 2017, 13:45:43 UTC
35280a0 andrewbogott 13 July 2017, 08:20:28 UTC labspuppetbackend: Include some more python dependencies for jessie. Change-Id: I5eb4ffdf36ff95e0be30f86ca93c705a2fa7c3d4 13 July 2017, 22:22:50 UTC
2270a54 RobH 13 July 2017, 21:15:07 UTC labweb100[12] install params update to dhcp lease file as well as netboot.cfg Bug:T167820 Change-Id: Id4de307ffea0720d4b63af8b09fd48d1b549a0ed 13 July 2017, 21:15:07 UTC
ecc0ac8 Sébastien Santoro 11 July 2017, 16:28:39 UTC admin: Remove deployers from restricted group The `restricted` group offers an access to the production servers, allowing for example to run maintenance scripts. These permissions are already included in the `deployment` group. Removes the following users: hoo khorn ssastry nuria legoktm addshore They are all already in deployment group. Bug: T104671 Change-Id: I34d245e7758fce56c217de35eee342e15a702e19 13 July 2017, 20:41:24 UTC
4d14aef Ottomata 13 July 2017, 20:06:26 UTC ensure => absent for base::firewall in statistics::private profile Instead of just removing the class include. Bug: T170496 Change-Id: I92c9b8db1435eccf774ee441a627548971266370 13 July 2017, 20:06:26 UTC
d3deaf9 Ottomata 13 July 2017, 20:02:00 UTC Remove base::firewall from stat private boxes This was never applied before, and breaks the use of spark, since spark listens on ephemeral ports for each new session. Bug: T170496 Change-Id: I9b0b380000fb5b3be0f4ee6909370da5954dc6de 13 July 2017, 20:02:00 UTC
0def04a andrewbogott 13 July 2017, 06:23:14 UTC Set labs_puppet_master for labtestpuppetmaster2001 Otherwise it tries to talk to the encapi on labtestcontrol. Change-Id: Idf7a338d0fe87f1cb84b9fee4791aa49c271881a 13 July 2017, 06:23:14 UTC
423c9e1 andrewbogott 13 July 2017, 03:28:51 UTC Labtest: Allow the new labtestpuppetmaster to reach mysql on labtestcontrol This is a hack based on the fact that labtest's databases are on labtestcontrol. Change-Id: Ibfe8e264de72ae6c6061b2de16e7d11f3d44a20a 13 July 2017, 17:14:06 UTC
82a6f88 BBlack 13 July 2017, 17:07:56 UTC Revert "ssl_ciphersuite: limit ECDH curves where possible" This reverts commit 1811def526025a67bd6baa8fe509a71a5b147f52. Change-Id: I92d3fbb76f02a3fcd136871062f4617f584ccb76 13 July 2017, 17:07:56 UTC
1811def Brandon Black 28 June 2017, 14:47:02 UTC ssl_ciphersuite: limit ECDH curves where possible This removes support for secp384r1 and secp521r1 in the common case (jessie+nginx), possibly other lesser-known curves on trusty+nginx? Apache doesn't have an easy way to configure this at all. The two curves mentioned above are expensive relative to the default secp256r1, which is sufficient for today's pragmatic security margins. They're also virtually never used (except occasional artificial probing) in our stats. At best, they're a vector for trying to consume CPU on our terminators, and at worst they're vectors for unknown weaknesses, being so little used and therefore studied in the TLS context. X25519 is of course our first preference on installs which have a new-enough libssl. If the world moves towards larger ECDH curves in the future, it will likely be in the direction of X448 instead of the legacy ones anyways, assuming newer PQ-Crypto algs don't overtake the scene before that's necessary. Change-Id: I4b5f4261f3538bee3bd4b413d34aef7925e1b3ae 13 July 2017, 16:42:10 UTC
f6ee5e1 andrewbogott 13 July 2017, 03:13:35 UTC Don't use puppetdb on labtestpuppetmaster2001. Change-Id: I247974a8a308f2f2cfc12e972479c678d1d6cb1d 13 July 2017, 03:14:48 UTC
d57ea83 Alexandros Kosiaris 13 July 2017, 15:19:57 UTC puppetmaster: profilize puppetdb hiera lookups We move the use_puppetdb and puppetdb_host hiera lookups into the profile namespace to be consistent with the standard we have. Also we move the keys into the role per our standards as well Change-Id: I1ce52dc3ed26558013eb5727aac358faf7b87177 13 July 2017, 15:19:57 UTC
f88b80b addshore 13 July 2017, 13:08:45 UTC Fix api_log_dir for statistics wmde It looks like this directory changed as a result of the move from stat1002 to stat1005. The patch which changes the path can be seen at: I87e593eea12af0073625bd423c957a8792311dee Bug: T170472 Bug: T170282 Change-Id: Ic21aec3a51df16d590dbaeb0c0687a0f5bf0eff2 13 July 2017, 14:04:24 UTC
e569f01 elukey 13 July 2017, 13:51:28 UTC statistics::sites::stat: fix the symlink for v2 The current httpd document root is /srv/stats.w.o/htdocs, so better to stick with it for the time being. A refactor of the httpd vhost config will surely happen when the new stats.w.o will be launched. Bug: T167684 Change-Id: I5a96c34874a0f3233f9a1eb7e41321c96d6adb8f 13 July 2017, 13:51:28 UTC
fec9074 elukey 13 July 2017, 13:17:36 UTC role::mariadb::misc::eventlogging: remove the readonly constraint for slaves Bug: T156933 Change-Id: I09841c14103e3ed09b68de2e9158b7f5e9a14d17 13 July 2017, 13:31:05 UTC
fbeab38 Emanuele Rocca 13 July 2017, 13:20:30 UTC cache::misc: enable nginx lua support Lua support is required by nginx-lua-prometheus, added to cache::misc in cdd12bcd53ff311abb6e5efd10bed0122907135a. Change-Id: If4a761d3a0ae55024092b64388006b772fcf6d17 13 July 2017, 13:28:51 UTC
b904cfe milimetric 29 June 2017, 01:49:26 UTC Clone wikistats v2 repository and link it to v2 This sets up wikistats v2 to serve at stats.wikimedia.org/v2 Bug: T167684 Change-Id: I6cff8fcf70a91a922f9c37ba3b5f48dee2bd7835 13 July 2017, 13:22:30 UTC
cdd12bc Emanuele Rocca 13 July 2017, 08:25:09 UTC cache::misc: enable nginx-lua-prometheus Expose nginx metrics for prometheus. Change-Id: Idd3fe014201ba80130dfac40db19c2cb9b0bbf60 13 July 2017, 13:15:57 UTC
30cb20f Emanuele Rocca 05 July 2017, 10:52:30 UTC VCL: zero cleanups Add a new VCL subroutine, tag_carrier_cleanup, to unset headers potentially set by tag_carrier. There is no need to unset X-Forwarded-By2 as the header has been dropped in 1d86ca2. Also, zero.inc.vcl does not use the header vmod. Remove related comment. Change-Id: I5d15ca18a3329eb45ca102d26895396d33cd7487 13 July 2017, 13:12:38 UTC
7b4e980 Giuseppe Lavagetto 13 July 2017, 12:56:45 UTC puppet-compiler: fix nginx virtualhost * Add "^~" as a matcher for the /$hostname prefix, to stop processing * Also add a "resolver" directive where we need to do proxy-passing. Change-Id: Ieebc24cdd4ce610c38a81b524a108c927f79fee4 13 July 2017, 12:58:00 UTC
77abced Alexandros Kosiaris 13 July 2017, 11:57:26 UTC icinga: Bump icinga-tmpfs size to 1024m We had this way too low, meaning depending on circumstances it could cause truncation of some files like status.dat. While the disk usage in this filesystems varies greatly, it's possible it gets full from time to time Bug: T164206 Change-Id: Ib9a1f17ca25d24f2ebfe8892e814bda0da85095e 13 July 2017, 12:00:53 UTC
d058240 Alexandros Kosiaris 13 July 2017, 08:57:25 UTC icinga: Bump max_concurrent_checks by 20% We are starting to see Max concurrent service checks (5000) has been reached again, let's bump the number by some 20% to 6000. The hardware seems to be able to withstand it with ease Change-Id: Ie08a1e4891bdafce451c128b8ccf77a3d8ae0290 13 July 2017, 12:00:53 UTC
1d796c6 Giuseppe Lavagetto 13 July 2017, 09:53:46 UTC puppet-compiler: allow more than one runner Since we point our external proxy directly to the puppet compiler machines, we proxy requests to other backends based on the url. This will allow to any backend to serve the changes, independently of where they were created. Reflect this in the compiler config, so that the compiler will be able to give the correct url to the user. Also, fix hieradata for etcd Change-Id: I8a71fc47189d8cb8cb9c5d7a1a766eb800a3234a 13 July 2017, 10:32:17 UTC
1d33d1b elukey 13 July 2017, 08:52:33 UTC eventlogging_cleaner.py: set default loglevel for the main logger This change is related to https://gerrit.wikimedia.org/r/#/c/364956. Not setting the default logger loglevel stops any stdout output. Bug: T156933 Change-Id: Id36303a3ae7789962004ded357da339e470490c7 13 July 2017, 08:52:33 UTC
f36933e elukey 13 July 2017, 08:34:07 UTC eventlogging_cleaner.py: split logs between stdout/stderr$ Separate the logging levels to redirect ERRORs only to stderr.$ The script will probably run as cron and it will be easier$ with the new configuration to get email notifications.$ Bug: T156933$ Change-Id: Ib78c09992181b6d95a0c90c7168b50fb7edb8215 13 July 2017, 08:35:25 UTC
ea30571 elukey 13 July 2017, 07:28:15 UTC eventlogging_purging_whitelist.tsv: remove unnecessary schemas The eventlogging_cleaner.py script fails to execute on db1047 due to these tables being present in the whitelist but not in the log database. This error condition should alert analytics about typos while redacting the whitelist, but in this case it means something different: one table is an old one that has already been dropped, meanwhile the other one is too new and it has received no events yet (that means no table created in the db yet too). Bug: T156933 Change-Id: I3cf3570ef0a9f8f1e95b7dbc657236aa0a139e90 13 July 2017, 07:32:27 UTC
d4c6d9c Giuseppe Lavagetto 13 July 2017, 06:26:35 UTC recommendation-api: check robots.txt The root url on this service returns 404, so let's use one which is not likely to go away soon. Bug: T165760 Change-Id: I12e39b817cd060bd17e118591b6c3f2287976fef 13 July 2017, 06:26:35 UTC
868ba55 Moritz Muehlenhoff 12 July 2017, 09:13:00 UTC Remove sshd options specific to SSH protocol 1 These options are currently not used anyway (we only use SSH protocol 2), but they've been removed in the openssh release present in stretch, so they're logging errors there: Quoting from the sshd_config manpage: RhostsRSAAuthentication Specifies whether rhosts or /etc/hosts.equiv authentication together with successful RSA host authentication is allowed. The default is “no”. This option applies to protocol version 1 only. RSAAuthentication Specifies whether pure RSA authentication is allowed. The default is “yes”. This option applies to protocol version 1 only. ServerKeyBits Defines the number of bits in the ephemeral protocol version 1 server key. The minimum value is 512, and the default is 1024. KeyRegenerationInterval In protocol version 1, the ephemeral server key is automatically regenerated after this many seconds (if it has been used). The purpose of regeneration is to prevent decrypting captured sessions by later breaking into the machine and stealing the keys. The key is never stored anywhere. If the value is 0, the key is never regenerated. The default is 3600 (seconds). Bug: T170298 Change-Id: I8ec75aa59dc1395f5cf4436f7c8d597ed6172409 13 July 2017, 05:52:55 UTC
a50166a Martin Urbanec 25 June 2017, 11:20:29 UTC Add maiwikimedia to Apache conf Bug: T168782 Change-Id: Icbc4024e60385ff73f2894bdd815c3fcb1165373 12 July 2017, 23:18:05 UTC
9c84705 RobH 12 July 2017, 21:56:44 UTC labnodepool1002 install_server updates update to dhcpd lease file and partitioning for netboot.cfg Bug:T168407 Change-Id: Ifbcc33b6a90c0c26a925630291315a4a2177346e 12 July 2017, 21:59:22 UTC
3375258 andrewbogott 12 July 2017, 19:36:32 UTC Nodepool: Slow down VM spawns by a lot. I don't necessarily want to leave this at 10 seconds for good, but right now I'm seeing a lot of rabbit timeouts and want to see if reducing traffic eases the problem. (If it does, then the next step is probably to tune up rabbit before turning nodepool back up.) Bug: T170492 Change-Id: I11516ff1f9335e87df55d3296ac0cf0e4380fbef 12 July 2017, 21:44:15 UTC
6b58ae3 Ottomata 12 July 2017, 21:18:24 UTC Use proper topics variable for new eventlogging mysql eventbus consumer Change-Id: I856ff8098fb8ccb3e970fc12d1f944abafd448a6 12 July 2017, 21:18:24 UTC
72d458c Ottomata 12 July 2017, 21:03:48 UTC Set up separate EventLogging Analytics MySQL Consumer process for eventbus events This caused a bug with the main eventlogging mysql consumer. It was flapping every 5 minutes and dying, because inserts into the mediawiki_page_create_1 table were failing, because https://gerrit.wikimedia.org/r/#/c/362321/ added a field to the schema of the same version. We need to start properly versioning eventbus schemas. Change-Id: I2df1d8eae141e7b51e6903aa906e613817fc0659 12 July 2017, 21:07:13 UTC
32adfb7 RobH 12 July 2017, 20:30:34 UTC setting labpuppetmaster100[12] install params setting dhcp lease and partition info Bug:T167905 Change-Id: Id79f60458b9fd3309dc9cb1183cc5d0d9f2a72b0 12 July 2017, 20:30:34 UTC
f7e7eab Ottomata 12 July 2017, 20:13:35 UTC Move statistics::wmde jobs to stat1005 from stat1002 Bug: T170471 Change-Id: Id313940d0b747a161e1415b6d9c7991af6db0783 12 July 2017, 20:13:35 UTC
3c1c510 Ottomata 12 July 2017, 19:38:40 UTC Rsync MW API logs to stat1005 Bug: T152712 Change-Id: I87e593eea12af0073625bd423c957a8792311dee 12 July 2017, 19:38:40 UTC
918aa1e Ottomata 12 July 2017, 19:14:06 UTC Move refinery::job::data_check to stat1005 from stat1002 Bug: T152712 Change-Id: I95aa75ecfacffdcb9e10fbf0bd3b9543e2da7124 12 July 2017, 19:14:06 UTC
49985bb Ottomata 12 July 2017, 19:06:53 UTC Run reportupdater::jobs::hadoop from stat1005 instead of stat1002 Bug: T152712 Change-Id: If59e868ea02a24b503c1448eb7cd41da04e8681a 12 July 2017, 19:06:53 UTC
6f0f969 Ottomata 12 July 2017, 18:58:51 UTC Use conditionals instead of new role files to deal with stat box migration Bug: T152712 Change-Id: I71693b4a868f149aa3969837052cd8b8645c3ebc 12 July 2017, 18:59:18 UTC
03f08e8 Ottomata 12 July 2017, 18:55:20 UTC AH, yes, statistics-privatedata-users should be on cruncher, it is a superset of perms Bug: T152712 Change-Id: I000dfdb773cc301c2108852cd13d609c2e2ac04d 12 July 2017, 18:55:20 UTC
0f65e54 Ottomata 12 July 2017, 18:53:01 UTC Remove statistics-privatedata-users from stat1006.yaml (cruncher) This should not be in cruncher.yaml, but it is. Hm. Bug: T152712 Change-Id: Iecfab33a06651d7629fb700f44b672dda5673b8b 12 July 2017, 18:53:01 UTC
19c8500 Ottomata 12 July 2017, 18:51:05 UTC Add groups to stat1005 Bug: T152712 Change-Id: Ib142f8fbbf607558d93f1b5e95289c43fab458e2 12 July 2017, 18:51:05 UTC
44215eb Ottomata 12 July 2017, 18:37:44 UTC Apply role statistics::private_new to stat1005 Bug: T152712 Change-Id: I4e4a84f23457e0ecdba484b47acdca489dfbcda9 12 July 2017, 18:42:23 UTC
d82de31 Ottomata 12 July 2017, 18:22:51 UTC Move more stuff into profile::statistics::private Bug: T152712 Change-Id: I1fb259a1a5ab1618349944b68186c8965396cf10 12 July 2017, 18:28:24 UTC
8cee81b andrewbogott 12 July 2017, 18:19:40 UTC Nova: Depool labvirt1014 as well. Trying to get this back to a known good state. Change-Id: I317d4abc55e5c2433fdbfba93bf8bbc4d7ac3ff9 12 July 2017, 18:20:25 UTC
39b694e andrewbogott 12 July 2017, 18:11:43 UTC Nova: Depool labvirt1015 for now New instances are messing up, and this may be the issue. Change-Id: Ieeb24da3564d62012a0ed431d49d3b8b45e1a9d2 12 July 2017, 18:14:04 UTC
5c7f2fe Giuseppe Lavagetto 12 July 2017, 17:34:48 UTC pybal: remove proxyfetch from recommendation-api temporarily Since the check would fail, remove it until the bug is solved. Bug: T170439 Change-Id: I22329fa52da6947bc81e0a2bc370138e593f97dc 12 July 2017, 17:34:48 UTC
8b65627 Giuseppe Lavagetto 12 July 2017, 17:20:07 UTC lvs::configuration: fix port for icinga check on recommendation-api Change-Id: If3a0c290c2487de498b9a479394d20d6ae915683 12 July 2017, 17:30:21 UTC
98e36df Faidon Liambotis 10 July 2017, 13:57:29 UTC icinga: move RIPE Atlas measurements under netops Move the RIPE Atlas measurements towards our Anchors in the netops module and make them DRY. This helps with code readability, the two new anchors that are coming, and also moving these under the "network" Icinga group (T167279). Change-Id: I33e96d5d0538960326ec34a91ec85d826f1e68f8 12 July 2017, 17:13:27 UTC
9bd14a7 Ottomata 12 July 2017, 17:06:23 UTC Own mediawiki/core checkout as stats Bug: T152712 Change-Id: If6c273baa2a7ee4c6f39efc882aa4bd209849f55 12 July 2017, 17:07:36 UTC
c00335a Faidon Liambotis 10 July 2017, 13:33:01 UTC icinga: move RIPE Atlas host monitoring under netops Move the RIPE Atlas monitoring::hosts stanza in the netops checks, which makes it more DRY and grouped properly under the "network" group. Also, add IPv6 host checks while at it. Bug: T167279 Change-Id: I8c1b34138a385d36af5fda3d9a8dd473eac138aa 12 July 2017, 17:01:42 UTC
d9b8767 Ottomata 12 July 2017, 16:58:21 UTC MySQL client for stastistics::packages in stretch, /srv/mediawiki dir Bug: T152712 Change-Id: I9dc2c7acfbf664f84fe63dd025d1b692a7550e0d 12 July 2017, 16:58:21 UTC
0cb7185 Ottomata 12 July 2017, 16:50:41 UTC Require libgdal-dev in stretch in statistics::packages Change-Id: Idbb5f583ba12597f3b30791aee39a3a97311ac48 12 July 2017, 16:51:08 UTC
03c983a Ottomata 12 July 2017, 16:46:57 UTC Invert os_version check conditional in statistics::packages Change-Id: I655c5e2828bffb99f8157711b32497a415b3fdb0 12 July 2017, 16:48:08 UTC
cf69eed Giuseppe Lavagetto 12 July 2017, 16:46:05 UTC conftool-data: correctly rename discovery object Change-Id: Idb0d0ab12003c31aa9f92966ffd021805c1b04d0 12 July 2017, 16:46:05 UTC
36e8e77 Ottomata 12 July 2017, 16:44:26 UTC Fix typo in statistics::packages Change-Id: I52dc97c6bf6f0b8b9f4bb74d1ad3572f5a059cdb 12 July 2017, 16:44:26 UTC
22c64ab Ottomata 12 July 2017, 16:13:33 UTC Package fixes for stat boxes to stretch Bug: T152712 Change-Id: Iec6427317f5bd0d32caafea3d2a69baadaab6195 12 July 2017, 16:38:47 UTC
827fa0c Ottomata 12 July 2017, 16:19:06 UTC geowiki already uses /srv on stat1003, so we can change the backup director path now Bug: T152712 Change-Id: I0e11a8df04ce1451b7bbbcc82ad9bf9903e01c73 12 July 2017, 16:19:06 UTC
b62d9f5 Ottomata 12 July 2017, 16:16:19 UTC Remove references to geowiki::params Bug: T152712 Change-Id: Ic7ce633e07170ea687fb1280fbb2a545bc5b47fc 12 July 2017, 16:16:19 UTC
09b4dff Jaime Crespo 12 July 2017, 15:49:46 UTC dbstore3: tune down some of the parameters due to multi-instance Bug: T169514 Change-Id: I011fee4e7bd6cfcce5f6d08af89e5d51488474c2 12 July 2017, 15:52:15 UTC
45ed08e Arzhel Younsi 05 July 2017, 09:56:04 UTC Add runbook link and remove <br> from Nagios interfaces check messages. Change-Id: I4adede6d70f542a6c64b8da07113248236e1d853 12 July 2017, 15:49:42 UTC
54d14c2 Ottomata 12 July 2017, 15:42:21 UTC Apply cruncher_new role to stat1006 Bug: T152712 Change-Id: I4624b8fdb2618a0bdea73f4d1377cd5554278333 12 July 2017, 15:44:08 UTC
42b7aa3 Giuseppe Lavagetto 12 July 2017, 15:42:49 UTC admin: fix typo Change-Id: I06d727dcdb977455b0671874865e9cbb00e595af 12 July 2017, 15:42:49 UTC
e5db788 Giuseppe Lavagetto 11 July 2017, 15:11:09 UTC role::scb: add recommendation-api service Bug: T165760 Change-Id: I0a0126c97767264078c1b8bb5b5ea139cde56312 12 July 2017, 15:38:48 UTC
0baa9b5 Ottomata 12 July 2017, 14:35:34 UTC Add statistics private, cruncher and web profiles, with a little refactoring Bug: T152712 Change-Id: I24b283b2a76234ff3c7933ca19acbe693eaa45e1 12 July 2017, 15:29:58 UTC
ac5f7d5 Jaime Crespo 12 July 2017, 14:47:12 UTC mariadb-multiinstance: Make the main multisource 3306 instance available There is soon-to-be-replaced instance with multi-source replication still on dbstore2002. Make it available again temporarelly until only the new model is used, by opening the 3306 and 3307 ports to the appropiate hosts with the same rules than core servers. Bug: T169510 Change-Id: I3538949501ce29bfc0d2c5b95ed21323c327d94f 12 July 2017, 15:23:53 UTC
f2c01ec Giuseppe Lavagetto 12 July 2017, 15:03:33 UTC puppet: add --no-splay As we moved the splay outside of puppet, we need to tell puppet explicitly we do NOT want splay to happen, or we will make things way worse than before. Change-Id: I91853d3c41fbe55e8a747594fae6629688dc64c4 12 July 2017, 15:09:13 UTC
c1d998a Faidon Liambotis 10 July 2017, 13:22:44 UTC icinga: merge routers/switches monitoring groups Merge the "routers" and "switches" monitoring groups into a single "network" one and move all current checks in there. While at it, drop the unused "storage" monitoring group. Moreover, move the RIPE Atlas checks under the "network" group, as they're clearly network-related checks. Bug: T167279 Change-Id: Ie05f7538d469b112cf158287ef537d75d4e6da21 12 July 2017, 15:05:37 UTC
918ad2e Alexandros Kosiaris 12 July 2017, 12:31:53 UTC Monitoring: Simplify BMC hostnames Drop the $::site.wmnet suffix from all hostnames, making the defined BMC hostnames more aligned to the current status quo of only using hostnames and not FQDN. Amend check_fqdn respectively to now check to FQDN against the IP Change-Id: Ie77daf21c8c9d8716ffc15d316ec936de9572bbe 12 July 2017, 14:58:56 UTC
3015689 andrewbogott 12 July 2017, 14:38:41 UTC Add ipv6 to labtestpuppetmaster2001 Change-Id: Ib5c5527f2190c27472a81ec103548eca6d39cc4f 12 July 2017, 14:51:32 UTC
45f17ed elukey 12 July 2017, 14:45:19 UTC eventlogging_cleaner.py: configure configparser ConfigParser needs to allow duplicate/empty values while reading a my.cnf config to avoid unnecessary runtime exceptions. Change-Id: I13904b55c3ba1dae9473af4f22a6dba30c1822fe 12 July 2017, 14:45:19 UTC
299ffa1 Giuseppe Lavagetto 10 July 2017, 06:34:03 UTC recommendation api: refactor profile, remove module The dedicated module was of not much use at this point, just remove it. Bug: T148129 Change-Id: I604520ad6e05cfe0e8cc7da0558bb02d2e99c9cc 12 July 2017, 14:13:56 UTC
f248f2f Ottomata 12 July 2017, 13:56:50 UTC Refactor geowiki a bit and make a geowiki profile This helps with stat box migration Bug: T152712 Change-Id: Ib568d371df4a2b0b26cb42e4a7cdcd13bb98d0fd 12 July 2017, 14:05:44 UTC
1b3d0fe andrewbogott 12 July 2017, 13:24:35 UTC include 'standard' on labtestpuppetmaster2001 Change-Id: I6d3ea4dda05bc9e98973f7780efbdded5d8e465a 12 July 2017, 13:38:34 UTC
e4d76ae Brandon Black 12 July 2017, 00:36:38 UTC puppet-run: manual splay at the top Change-Id: Ic1ba3f66c5f5cd8a570df14b56c92a09ee441adf 12 July 2017, 13:35:50 UTC
e430825 Ottomata 12 July 2017, 13:16:55 UTC Create reportupdater::jobs profiles for stat boxes This makes it a little easier to conditionally include reportupdater in different roles, and helps with the new stat box migration. Bug: T152712 Change-Id: I51f5b85f7c378f250e477dcca625cc3e9b3ae99b 12 July 2017, 13:34:58 UTC
back to top