038cc7b | Ottomata | 12 September 2017, 16:22:46 UTC | role::kafka::jumbo::broker - Don't include standard if already included In labs, this is included elsewhere with a different parameter. Change-Id: I3dae0f00b86c585f715ff78caca10bdae975880a | 12 September 2017, 16:23:12 UTC |
4cac509 | RobH | 11 September 2017, 21:00:53 UTC | adding documentation on renaming users renaming users is possible, but has some steps, detailing them in the readme so they are followed. Change-Id: I2c64faeff9bf56e4cc6ad619dabcc9e894fb8f72 | 11 September 2017, 21:02:19 UTC |
9103a2d | Merlijn van Deen | 04 September 2017, 19:08:17 UTC | [labs] Rename wmflabs-* files to wmcs-* Bug: T174082 Change-Id: I6669fe476ead5e7d1a9a02c21695b56986e9522f | 11 September 2017, 20:54:59 UTC |
dea95b3 | cpettet | 11 September 2017, 20:27:34 UTC | nodepool: make puppet match current settings Nodepool melted rabbitmq saturday and we have been tuning it back up since then. We have been sitting here for a few hours after the previous very conservative settings built up a bit of backlog. Bug: T170492 Change-Id: Icbf8e7e0671a41508f9c75f2b7b80254b92e5d47 | 11 September 2017, 20:27:34 UTC |
d9abcbb | Daniel Zahn | 11 September 2017, 18:13:12 UTC | admins: delete unused group sectools-roots This group was meant to be used on zosma, but that Ganeti VM and the related access request had been rejected so this was not used. Bug: T138650 Change-Id: Ic818072f7a498a24d6d4f2093886562560e2ad24 | 11 September 2017, 18:13:12 UTC |
d78b700 | Daniel Zahn | 11 September 2017, 18:01:38 UTC | admins: fix group membership for 'rho' The group should have been 'analytics-privatedata-users' not 'statistics-privatedata-users'. Follow-up to I3788631dbaa460a2b Bug: T175204 Change-Id: I074df43c845983d240184c8a6a7ffc6e34cb040f | 11 September 2017, 18:01:38 UTC |
d742464 | Daniel Zahn | 08 September 2017, 16:22:34 UTC | admins: add rho to analytics-privatedata-users follow-up to Ia90b710d67251e2 Adds user rho (Rita Ho) to analytics-privatedata-users purpose: review analytics data for the Wikipedia Android app from SWAP notebooks Per https://wikitech.wikimedia.org/wiki/SWAP#Access one of the groups analytics-privatedata-users, statistics-privatedata-users or researchers is needed for the requested access. The request was specifically for analytics-privatedata-users. What the difference is can be seen here: https://wikitech.wikimedia.org/wiki/Analytics/Data_access#Access_Groups This specific group is needed for Hive access to query private data. Bug: T175204 Change-Id: I3788631dbaa460a2b750a3a6a869e7b2216f89f4 | 11 September 2017, 16:57:59 UTC |
f21bc09 | RobH | 11 September 2017, 16:18:12 UTC | Revert "revoke James F's ssh key" James laptop went missing, but turns out OIT had it and it was NOT a security issue. Reverting back his access. This reverts commit 6612a74be5e383c6e33146a8bd7b3101cb031026. Bug: T175505 Change-Id: I69c4c360fbe920c8d7395657a419529a68c5bba8 | 11 September 2017, 16:24:33 UTC |
4caef48 | Andrew Bogott | 11 September 2017, 16:08:24 UTC | Revert "labmon: prometheus classes to monitor the keystone api endpoint" This conflicts with existing nginx things on labmon. Needs more work. This reverts commit 054c8fe0c1c6ffe5e14f901b0b9b2ea0a03295da. Change-Id: Ibac8cd4f641034a5dcb272a1235028246a5b3772 | 11 September 2017, 16:08:24 UTC |
054c8fe | andrewbogott | 27 August 2017, 17:04:12 UTC | labmon: prometheus classes to monitor the keystone api endpoint Change-Id: Ia8831bd328bb4239e34f4740b61b9a6e135c5736 | 11 September 2017, 07:31:12 UTC |
1b88e53 | andrewbogott | 11 September 2017, 07:15:54 UTC | prometheus: Add additional blackbox module http_200_300_connect This is the same as http_connect except it regards 300 as success. This will be useful for openstack service testing. Bug: T167556 Change-Id: Ia1cba2fc6265e0284e4b224c76d8211049c2aa59 | 11 September 2017, 07:31:02 UTC |
913b498 | Bryan Davis | 10 September 2017, 07:04:38 UTC | rabbitmq: remove orphan files Remove files that were copied to the rabbitmq module in 97deadd. Change-Id: Ib92b7d2e4d9e0f56a89c2d81bdc3eaa3515b172c | 11 September 2017, 14:59:17 UTC |
f8888f1 | Brandon Black | 11 September 2017, 13:21:15 UTC | VCL: Improve cache status stats calcuations The existing calculation for X-Cache-Status tries to make a special exception for the known layer-differential pass cases while assuming that the only known cases are ones where the frontend passes but the backend(s) may miss or hit. We're soon introducing the opposite (fe miss may lead to a backend pass), and also the existing logic looks broken to me anyways. This simple and more-universal view is that if any layer reports a true miss, we count the request as a miss (there was an opportunity to cache somewhere, and we failed). Only those that report pass at every layer will be counted as a global pass. varnishxcache also has the same strange (and probably faulty) layer-differential miss/pass problems as X-Cache-Status, and is re-worked to use the same logic as above. This may cause small jumps in our current cache stats calculations due to re-interpretation. These are not behavioral changes, just changes in reporting. Change-Id: I025d2910149f9754646fcdfd902dfa6ea1b25a08 | 11 September 2017, 14:25:29 UTC |
668ee8f | Alexandros Kosiaris | 11 September 2017, 14:18:45 UTC | Revert "Revert "sshd_config: Increase MaxAuthTries"" Revert for a few days while we revert the repos to use the new setting This reverts commit e35bee9f64296182b13f0527e29d01fefbb511cc. Bug: T172333 Change-Id: I0a9c8377b9f3214ca09cc01a43d37ca32d201ce6 | 11 September 2017, 14:20:17 UTC |
d48bd34 | Filippo Giunchedi | 11 September 2017, 13:59:38 UTC | thumbor: use memorysize_mb fact for unit MemoryLimit Using a percentage for MemoryLimit is a systemd 231 feature. Calculate the percentage at puppet time in the template instead. Bug: T121388 Bug: T174997 Change-Id: I3da3c20016a2dc3fc38c8d1830832227adc4bc29 | 11 September 2017, 14:11:07 UTC |
bc77229 | Bryan Davis | 10 September 2017, 06:50:17 UTC | rabbitmq: Add drain_queue utility script Add a utility script that can be used to view and drain a rabbitmq queue filled with messages from OpenStack's oslo.message component. Bug: T170492 Change-Id: I93062a86bc0c74342467c5009e300bbd429ee15b | 11 September 2017, 14:07:33 UTC |
63355d6 | cpettet | 08 September 2017, 12:39:29 UTC | openstack: re-enable notify and subscribe for nova Bug: T171494 Change-Id: Ic98ff48c44cbdbd24cd4c170664a9e7410cadae7 | 11 September 2017, 13:51:34 UTC |
d18d795 | Moritz Muehlenhoff | 11 September 2017, 11:28:20 UTC | Remove old debdeploy/salt packages via puppet These binary packages were only needed for the salt-based variant of debdeploy, remove them across the fleet (puppet snippet can be removed later on) Bug: T164817 Change-Id: Ia8949ee332e8d7ba63c1e5571c83d0d6d4cbb490 | 11 September 2017, 13:48:16 UTC |
827f78b | Giuseppe Lavagetto | 11 September 2017, 13:01:48 UTC | role::scb: only include profiles, not roles Change-Id: I456d3cb3bcec2c7ba7340aa93e8f3a70aaae35c5 | 11 September 2017, 13:36:43 UTC |
6b88935 | Giuseppe Lavagetto | 11 September 2017, 11:15:03 UTC | citoid: move to role/profile Change-Id: I349c1275f92372c6badb5c14ae4839851f665282 | 11 September 2017, 13:34:04 UTC |
434ca9e | andrewbogott | 11 September 2017, 05:08:39 UTC | wt-static: reword alert messages Icinga was dropping the question-marks from the descriptions which made for puzzling alerts. Change-Id: Ic2ed88a0ec498221de2aa127c4b1a5bb8a2a2170 | 11 September 2017, 05:12:20 UTC |
64f9053 | Moritz Muehlenhoff | 11 September 2017, 13:16:48 UTC | Add additional alias Change-Id: I6c9c0218a048f97cf1a1c375c55bde1dc844b4e6 | 11 September 2017, 13:16:48 UTC |
f8ef5b8 | Moritz Muehlenhoff | 11 September 2017, 12:13:22 UTC | Add library alias for src:file Change-Id: I4c3396225aaaad6dd410eb38a29f63c6d6dfab1e | 11 September 2017, 12:13:22 UTC |
ac2a30c | Moritz Muehlenhoff | 11 September 2017, 10:39:48 UTC | Convert debdeploy to a profile and make it part of role::cluster::management The salt-based version of debdeploy was tied to a specific server since the sqlite-based job database was on local storage. This limitation no longer exists with the cumin-based debdeploy, so it can be run from any cumin server. As such, convert debdeploy to a profile and integrate it into the cluster management role. Change-Id: I353630cc2294b57cbeb8959146b82cb79df62d96 | 11 September 2017, 10:49:03 UTC |
0fcb449 | Moritz Muehlenhoff | 11 September 2017, 08:26:15 UTC | Switch role::debdeploy::master role to Cumin-based variant Switch debdeploy.conf to the new variant based on Cumin and install the new debdeploy-server binary package instead of the previously used debdeploy-master based on Salt. Change-Id: Iff3b570c04b24116f42f1385d687e2c05161bae7 | 11 September 2017, 10:28:31 UTC |
a8b72d1 | elukey | 16 August 2017, 10:52:28 UTC | Introduce role::analytics_cluster::coordinator This is the first step to move all the analytics1003's roles to profiles: one single coordinator role appears in site.pp. Bug: T167790 Change-Id: I94480677b16821054aaa85ac7d0d7d345c0fec40 | 11 September 2017, 10:09:59 UTC |
e35bee9 | Alexandros Kosiaris | 08 September 2017, 15:11:53 UTC | Revert "sshd_config: Increase MaxAuthTries" Since we now have the capability to add keyholder_key to scap.cfg forcing scap to use the correct key, we no longer need to workaround introduced in 099990dc7, hence revert it This reverts commit 099990dc778e5a4fb4481a1218cda3007aaefce3. Bug: T172333 Change-Id: I5efbd8e0a194ab8da169fe62c96f3bc605e18035 | 11 September 2017, 10:01:00 UTC |
f90874c | Filippo Giunchedi | 11 September 2017, 09:20:07 UTC | thumbor: add logstash config for codfw Also only use logstash handler if it is configured Bug: T150734 Change-Id: I027ccd6219cc763b6f634ade03a971551260b5e5 | 11 September 2017, 09:31:46 UTC |
442b04e | Emanuele Rocca | 08 September 2017, 06:44:47 UTC | prometheus: add aggregation rules for IPVS Change-Id: Ide723e69fa4b98b85000f8cdccb85262e23ca811 | 11 September 2017, 09:19:45 UTC |
ef1a473 | Marko Obrovac | 11 September 2017, 07:54:16 UTC | CP-JobQueue: Add the service to SCB Bug: T175281 Change-Id: I1ebdb7eb4964e0ecb57c050ce46876bb8e72a1c7 | 11 September 2017, 09:11:45 UTC |
b41843d | Emanuele Rocca | 07 September 2017, 14:05:19 UTC | varnish: convert role::cache::instances into a class role::cache::instances is currently a define for no valid reason. Turn it into a class so that we can reference attributes defined there from elsewhere. Change-Id: If06e33b95587e76efc93af7d2ccb756c95a10ca9 | 11 September 2017, 09:10:28 UTC |
b709f7e | Marko Obrovac | 11 September 2017, 09:07:23 UTC | ChangeProp: Separate packages into profile::changeprop::packages Change-Id: I768a6000c7ae44017a71f2790b8c5894b88e4f33 | 11 September 2017, 09:08:29 UTC |
d4f1881 | Gilles Dubuc | 08 September 2017, 09:20:07 UTC | Thumbor: enable new MAX_ANIMATED_GIF_AREA option Bug: T173580 Change-Id: Ief91a92e05d2c3fdbbe72ec4e422590042cff95e | 11 September 2017, 09:00:23 UTC |
103d2d4 | Giuseppe Lavagetto | 11 September 2017, 07:25:40 UTC | graphoid: convert to role/profile Change-Id: Ib15aaa3d86c825edb3d672331bcaf113852fb10c | 11 September 2017, 08:41:45 UTC |
c5a8779 | Giuseppe Lavagetto | 11 September 2017, 07:18:00 UTC | changeprop: convert to role/profile Change-Id: I191a4f46aaffa13bca21bfbb3a00292ef10f46b1 | 11 September 2017, 08:38:51 UTC |
c52ca51 | Giuseppe Lavagetto | 11 September 2017, 06:58:05 UTC | pdfrender: switch to role/profile In this case, since it's not incapsulating service::node and collects quite a few resources, we prefer not to remove the named class. Change-Id: I735701d4ea4069c307b328d8fcb5fab782aad165 | 11 September 2017, 08:36:48 UTC |
cb5c8b8 | Giuseppe Lavagetto | 11 September 2017, 06:46:38 UTC | eventstreams: convert to role/profile Change-Id: I94dad66103ce344a04b85a581203ecc5540052d0 | 11 September 2017, 08:35:33 UTC |
91c2011 | Giuseppe Lavagetto | 11 September 2017, 06:08:09 UTC | trendingedits: move to role/profile Change-Id: Ia0a2248c7282583a8c2fcc87e94d86fd749c9c33 | 11 September 2017, 08:34:27 UTC |
3f01be5 | Giuseppe Lavagetto | 08 September 2017, 16:19:42 UTC | apertium: move to role/profile Change-Id: I65f9890bad802dedee36296bf1b4bbfe309d59e1 | 11 September 2017, 08:29:12 UTC |
13c8691 | Moritz Muehlenhoff | 11 September 2017, 07:19:32 UTC | Stop creating salt grains for debdeploy All previously existing Hiera defitions have been removed. Change-Id: I70d887ef2136686f05f0d023a3ec285819c8b5e9 | 11 September 2017, 08:18:52 UTC |
98174d3 | Giuseppe Lavagetto | 08 September 2017, 15:59:50 UTC | cxserver: convert to role/profile Change-Id: I04872168708db65d316c7fb32bfc4dd6f536f97b | 11 September 2017, 07:26:12 UTC |
8a7172b | Giuseppe Lavagetto | 08 September 2017, 15:48:00 UTC | mathoid: move to role/profile Change-Id: I5756122ac1f1363ee7239c43ecb403e8ba1e54c2 | 11 September 2017, 07:26:12 UTC |
d7a1634 | Giuseppe Lavagetto | 08 September 2017, 15:38:10 UTC | mobileapps: move to role/profile Change-Id: I579fd89846f54aab6762e709edcc076f4efec948 | 11 September 2017, 07:26:12 UTC |
aecb3e5 | Moritz Muehlenhoff | 11 September 2017, 07:10:24 UTC | Update comment Change-Id: I9547710b8bd17b17dc898224e80fde6aeaf63b94 | 11 September 2017, 07:10:24 UTC |
b4ed8e4 | Moritz Muehlenhoff | 08 September 2017, 11:06:33 UTC | Remove remaining salt grains previously used by debdeploy Change-Id: I0843ccdd5cbd73e585b9c2403240b4f5d90e56b4 | 11 September 2017, 06:56:04 UTC |
a369c93 | andrewbogott | 11 September 2017, 03:40:09 UTC | Add wmcs-roots to role::wmcs::openstack::main::control This was included for the old role (common::labs::openstack::nova::controller) but lost in the refactor and rename. Change-Id: I73b3081566ce43e1f2fe5e8aa25344a0a04d502b | 11 September 2017, 03:41:25 UTC |
6612a74 | Ariel T. Glenn | 10 September 2017, 20:53:42 UTC | revoke James F's ssh key Change-Id: Ib939ef0a35a1fe4fc0f4a7a7245dd3bcf64d66eb | 10 September 2017, 20:53:42 UTC |
b5e3c93 | Daniel Zahn | 08 September 2017, 19:23:24 UTC | site: remove unused virtual host 'zosma' This is a Ganeti VM that hasn't really been used and the related access request has been declined. It was created after last years Wikimania. Removing it now. If it's ever desired (again), happy to recreate it. But so far it's just been sitting here. Bug: T138650 Change-Id: I8ef7db97942858dcfd6eee6cfe734845ccc42882 | 08 September 2017, 19:23:24 UTC |
761489b | Daniel Zahn | 08 September 2017, 18:09:20 UTC | admins: add Kai Nissen (knissen) to LDAP (nda) users Kai Nissen now has an NDA on file with legal, confirmed on Google doc. He will be added to the LDAP group "nda" for access to pivot. Bug: T168046 Change-Id: Ice27ea96603f33051ec795933aaa98a605523fb1 | 08 September 2017, 18:12:35 UTC |
db85ad5 | Daniel Zahn | 07 September 2017, 22:43:38 UTC | admins: create user account for Rita Ho (rho) Create shell account for Rita Ho. Since she already was an LDAP-only admin, remove her from there, as an upgrade. purpose: review analytics data for the Wikipedia Android app from SWAP notebooks https://phabricator.wikimedia.org/p/RHo/ https://www.mediawiki.org/wiki/User:RHo_(WMF) Addition into groups has to be done in a seperate patch, so this just creates the account without giving it access yet. UID matches existing LDAP user, cn: Rho, rho@wikimedia Key as provided on Phabricator ticket. Bug: T175204 Change-Id: Ia90b710d67251e290f9c5893b3df81d2f5047ce9 | 08 September 2017, 17:21:39 UTC |
ac1c65d | RobH | 08 September 2017, 16:52:01 UTC | dsaez uid update making the shell and wikitech user match Bug: T175220 Change-Id: I0f5115d19a52b099d2d3e7a1c29bb7293a74f86f | 08 September 2017, 16:52:01 UTC |
13e68d2 | Antoine Musso | 20 June 2017, 20:17:05 UTC | contint: upgrade git on zuul mergers Upgrade git-daemon service to use jessie-backports. Bug: T161086 Change-Id: Iab9181128b224aa186d6aaa68e4e106042b0687b | 08 September 2017, 16:38:17 UTC |
271ba77 | Alexandros Kosiaris | 08 September 2017, 14:48:47 UTC | dnsrecursor: Enable PowerdnsRecursor diamond collector Ship the diamond collector and enable it along with the require sudo rules Bug: T169600 Change-Id: I6287a6aacdae041d96ccdd5ec3204182f38f53df | 08 September 2017, 14:50:56 UTC |
f4b76d7 | Alexandros Kosiaris | 08 September 2017, 14:31:49 UTC | role::dnsrecursor: Partially transform into a profile Move the DNS related parts of the role into a corresponding profile class. Bug: T169600 Change-Id: I173f5dcc284d62340f31f656e652cb3507435450 | 08 September 2017, 14:50:56 UTC |
3663205 | Marko Obrovac | 08 September 2017, 14:26:04 UTC | ChangeProp-JobQueue: Fix the repo location and name Bug: T175281 Change-Id: I029f8b52e51277dcbde341f1ea1289465f1a9a55 | 08 September 2017, 14:42:45 UTC |
5be9b70 | Antoine Musso | 08 September 2017, 14:32:19 UTC | nodepool: reduce trusty pool by one Most of the repositories had their jobs moved from Trusty to Jessie. There is a long tail of annoying jobs left, but really that is just for a few dozen of mediawiki extensions. Reduce the initial pool of trusty nodes from 4 to 2. That would allow the pool to get one more jessie instance when it is busy. Bug: T161882 Change-Id: I4cea67ced7bf385266ab74cc722f103d2e8b4b7a | 08 September 2017, 14:39:12 UTC |
3a5ef79 | andrewbogott | 28 August 2017, 07:44:32 UTC | nodepool: specify 'nova' availability zone If this is unspecified, the nova scheduler will just pick a zone at random. Currently we only have the one zone, but when I experimentally added a zone a few months back nodepool started scheduling in the wrong zone and hilarity ensued. 'nova' is the default zone -- with this explicit here it's slightly safer to add additional zones to nova in the future for other purposes. Bug: T170447 Change-Id: I87b4f02ddbda0290291dd704f8e4e7a47bb9e235 | 08 September 2017, 14:26:40 UTC |
2e2775e | Giuseppe Lavagetto | 08 September 2017, 13:12:26 UTC | etcd: limit RAID resync speed if on linux software raid This should help avoid the loss of consensus we experienced on the codfw cluster whenever the nodes were resyncing their RAID partitions. Bug: T162013 Change-Id: Ia0e331d2a3ad2cbb78fe18dda3959175580f9890 | 08 September 2017, 13:12:26 UTC |
e588fde | Alexandros Kosiaris | 06 September 2017, 13:03:35 UTC | Document in-datastore calico configuration Add the various objects we have in our calico configuration as yaml files. Those are not expected to change often. At some point in time they should partly enforceable by puppet, but we are not there yet Bug: T170111 Change-Id: I2c6d992210ec822a16be0a7362efb4587b5eaa5b | 08 September 2017, 12:36:26 UTC |
f8167bb | Alexandros Kosiaris | 31 August 2017, 10:24:49 UTC | kubernetes: Add a few recommended admission controllers Add ServiceAccount, PersistentVolumeLabel and DefaultTolerationSeconds. These are for production only, toollabs are not touched. Those are the recommended admission controllers for version 1.7 of kubernetes which is what we are running Bug: T170119 Change-Id: I7ddb79fb7fa2ed70703fe8adf5d9f52433cc2ca3 | 08 September 2017, 12:36:00 UTC |
73db34a | Marko Obrovac | 08 September 2017, 11:51:31 UTC | Add the cp-jobqueue profile Bug: T175281 Change-Id: I78a09d0d99ae20a38d397da8f8a1faf9dd015fe3 | 08 September 2017, 12:29:09 UTC |
ff6cba4 | Moritz Muehlenhoff | 08 September 2017, 10:20:25 UTC | Remove memcached/redis salt grains previously used by debdeploy Change-Id: Icb78c17fed6ec16ca9b6e871fea5b19790d5a1f3 | 08 September 2017, 10:20:25 UTC |
280cca2 | Moritz Muehlenhoff | 08 September 2017, 09:00:24 UTC | Remove labtest salt grains previously used by debdeploy Change-Id: If2833d9a0a0a520e59972b762c691f234c0777b4 | 08 September 2017, 09:00:24 UTC |
3f19ae4 | Moritz Muehlenhoff | 06 September 2017, 14:37:45 UTC | Remove NFS salt grains previously used by debdeploy Change-Id: I9046f01c0f3e22d1d46e13a4e34bb6d5a0b64114 | 08 September 2017, 08:56:29 UTC |
7acce04 | Moritz Muehlenhoff | 06 September 2017, 12:59:16 UTC | Remove WMCS-related salt grains previously used by debdeploy Change-Id: I104b6b31c605aa78392800fe77bb642b594465dc | 08 September 2017, 08:52:26 UTC |
ecb9a01 | Moritz Muehlenhoff | 06 September 2017, 13:02:48 UTC | Remove parsoid salt grains previously used by debdeploy Change-Id: Ibde5e3e38e7feb02af8e8e67939711db4dc0ea43 | 08 September 2017, 08:43:43 UTC |
291a489 | Moritz Muehlenhoff | 06 September 2017, 12:56:39 UTC | Memove releng-related salt grains previously used by debdeploy Change-Id: I6e5daf79bc15101cc518ed158962dc76fd9b2997 | 08 September 2017, 07:23:57 UTC |
726bbc2 | Moritz Muehlenhoff | 06 September 2017, 13:00:47 UTC | Remove ganeti salt grains previously used by debdeploy Change-Id: Ia107afb2b160aee7c4bec2c0f38e84786ae7623b | 08 September 2017, 07:22:01 UTC |
fd466ae | Moritz Muehlenhoff | 06 September 2017, 14:22:17 UTC | Remove k8s salt grains previously used by debdeploy Change-Id: Ie3de7f33768e9b31f814fa562865ea2aacee3603 | 08 September 2017, 07:18:44 UTC |
8a31c5b | Moritz Muehlenhoff | 06 September 2017, 10:13:29 UTC | Remove cache salt grains previously used by debdeploy Change-Id: Ia27a700006800d498261bb0c246906e5e96646e3 | 08 September 2017, 07:13:23 UTC |
0f81aa4 | Moritz Muehlenhoff | 06 September 2017, 10:16:33 UTC | Remove lvs salt grains previously used by debdeploy Change-Id: Icf07bfedf7949a5c3933267448e3564dd979c465 | 08 September 2017, 07:10:45 UTC |
acabe8e | Moritz Muehlenhoff | 06 September 2017, 14:41:08 UTC | Remove puppetmaster/puppetdb salt grains previously used by debdeploy Change-Id: If2693224c8eabb4654152fde994a8f19d715c92a | 08 September 2017, 07:04:55 UTC |
6e9d703 | Moritz Muehlenhoff | 06 September 2017, 14:32:05 UTC | Remove sca/scb salt grains previously used by debdeploy Change-Id: Ice8aa80106e11f8608f257770d66dcb64e0d0ab0 | 08 September 2017, 07:02:42 UTC |
89f25f7 | Moritz Muehlenhoff | 06 September 2017, 13:04:52 UTC | Remove restbase salt grains previously used by debdeploy Change-Id: I3f066fc4ac475f895a1b675465dbe794acb702a1 | 08 September 2017, 06:58:26 UTC |
f732d7c | Daniel Zahn | 07 September 2017, 21:04:06 UTC | base/icinga: increase warn/crit thresholds for screen monitoring Instead of 1 and 3 hours respectively, set warn and crit thresholds for monitoring of "long" running screen and tmux processes to 8 and 48 hours. Per feedback from bblack. < bblack> maybe something more like 6h? < bblack> (there's a lot of legit cases for keeping a screen session up for most of a working day while waiting on system reimages or taking long log samples for investigation or whatever) < bblack> but you've got some example alerts up there that are months < bblack> so there's definitely a need heh For now, use WARN unless it's longer than 2 days. Bug: T165348 Change-Id: I2abbf90f5334b2730b12ed2aaf0f2f6421fb4d2a | 07 September 2017, 21:12:53 UTC |
8b84c5f | cpettet | 07 September 2017, 14:22:18 UTC | openstack: cleanup keystone references in old module Bug: T171494 Change-Id: Ibebb0e4ee6186d642d9ea63e54f04ad624385333 | 07 September 2017, 20:07:18 UTC |
f8725c2 | Dzahn | 07 September 2017, 19:38:32 UTC | Revert "icinga/base: screen monitoring by default. whitelist copper, terbium" This reverts commit dce429bfe4b12ca22937449c3d851e381e315451. Change-Id: I959702d4c12bc24d727922e33de6a330a4e28355 | 07 September 2017, 19:40:11 UTC |
4aa48cc | RobH | 07 September 2017, 19:19:21 UTC | set deploy1001 isntall params deploy1001 install info, setting to spare until pressed into service Bug: T175288 Change-Id: I157ba11946749f8d7260c1ca2e7bbf59c965966d | 07 September 2017, 19:23:49 UTC |
dce429b | Daniel Zahn | 26 August 2017, 17:33:07 UTC | icinga/base: screen monitoring by default. whitelist copper, terbium Enable screen/tmux monitoring for all hosts by default, except whitelist copper and terbium per the original ticket. Any others to remove? Bug: T165348 Change-Id: Ib34a53205235eb9310a32731f1383e6a77985ee7 | 07 September 2017, 19:09:12 UTC |
6a1b5e4 | Brandon Black | 06 September 2017, 15:21:52 UTC | browsersec: bump to 14% 2017-09-07 Bug: T163251 Change-Id: Ibffb729646d16f9873aff2175648f45968f2e2d1 | 07 September 2017, 18:38:49 UTC |
3034afb | Ariel T. Glenn | 04 September 2017, 12:44:35 UTC | convert "other" dump crons to use script to grab config settings grep + mawk is shorter but grodier. Bug: T174929 Change-Id: Ifbfe38201742b0d1e95cc33f2e4d6350777ef340 | 07 September 2017, 15:56:16 UTC |
4b0dbeb | cpettet | 07 September 2017, 14:11:28 UTC | openstack: clean up kilo files and templates This really shouldn't be in use anywhere and seems not to be. Bug: T171494 Change-Id: I0731d9f694fcdd205414ca22b6fdf37d80896c36 | 07 September 2017, 14:13:19 UTC |
665b869 | Alexandros Kosiaris | 07 September 2017, 12:35:56 UTC | Remove redundant double-quotes from LVS config No need for them Change-Id: Ic0fae71b5077085e69116cfe696b88176969827a | 07 September 2017, 14:07:56 UTC |
3bea245 | Giuseppe Lavagetto | 07 September 2017, 13:32:06 UTC | jobrunner: add discovery data Bug: T174599 Change-Id: I0db2528ba95ab7cf509f8178e8ff3fe34c7cb09d | 07 September 2017, 13:50:58 UTC |
31b7797 | Riccardo Coccioli | 07 September 2017, 13:42:14 UTC | Icinga: RAID handler ignore case for blacklist Change-Id: Ice6992f3b562570daaecbe73391828a231e5c978 | 07 September 2017, 13:44:44 UTC |
d7072cd | Elukey | 07 September 2017, 13:21:38 UTC | Revert eventlogging_sync batch size back to 1000 After some tests in Production the increased speed does not really improve so much the replication timing of a very busy Eventlogging schema (like 100 events/s). With the current architecture of eventlogging_sync such a use case needs to be handled semi-manually. This reverts commit 058acf0cf7a05ef9e31afe200628201318348008. Change-Id: Iad517448ea24d1545932f3889a4c319261a5f4b0 | 07 September 2017, 13:25:59 UTC |
1842aa6 | Antoine Musso | 06 September 2017, 18:29:46 UTC | package_builder: typo: s/output/result/ directory Change-Id: Ib932628a2c885a5fb382e9064b9de5bf7bd57d73 | 07 September 2017, 09:02:31 UTC |
935c595 | Antoine Musso | 06 September 2017, 20:25:50 UTC | package_builder: test -nt differs in bash vs dash When the BUILDRESULT/Packages file does not exist, test -nt in dash would yield false unlike bash. From the man pages: dash(1) file1 -nt file2 True if file1 and file2 exist and file1 is newer than file2. ^^^^^^^^^^^^^^^ bash(1) file1 -nt file2 True if file1 is newer (according to modification date) than file2, or if file1 exists and file2 does not (exist). ^^^^^^^^^^^^^^^^^^^^^^^^^^^ Fix up D05localsources which uses dash by catching lack of a Packages file. Change-Id: I94e12a9c2bec116d29cfb53886b06333dd7114d3 | 07 September 2017, 08:59:09 UTC |
d99074f | addshore | 04 September 2017, 14:05:51 UTC | statistics::wmde: use the same name for group and user in wmde stats The graphite class currently only uses $user. I think, at least right now, it makes sense to remove this mild aditional compexity and just have the group be called the same as $user (which is currently true) Change-Id: I185590f138960054c7bb555264c2d321816b5c37 | 07 September 2017, 08:40:00 UTC |
06c8e41 | Paladox | 24 August 2017, 10:35:01 UTC | Gerrit: Set autoMigrate so that changes are stored in both reviewdb and notedb This will allow us to do this whilst online so no downtime required. This is required for gerrit 3.x which will remove support for online migration. See doc at https://gerrit-review.googlesource.com/Documentation/note-db.html#migration Note: Requires us to first migrate to 2.15 before merging this. Change-Id: Id2486db96c069d33f58c98504004a431eda5faf7 | 07 September 2017, 00:23:14 UTC |
df4e4cf | Antoine Musso | 31 August 2017, 14:27:56 UTC | contint: include mediawiki::packages::php5 mediawiki::packages::php5 is added on the CI images but that does not reflect in the contint module. Change-Id: Ifa7107e1d524fb93ad8287d32d4ffd2f35d2ce78 | 07 September 2017, 00:17:42 UTC |
55586f8 | Andre Klapper | 08 August 2017, 12:17:15 UTC | Phabricator: Block vandalism IP that repeatedly added comments / uploaded files Change-Id: I42707bdbf081257f1b96125d4c56da3a8f9eb694 | 07 September 2017, 00:13:41 UTC |
7decb5c | Timo Tijhof | 05 September 2017, 22:54:50 UTC | jsbench: Prep osmium for decom and remove 've' and 'jsbench' roles The 've' and 'jsbench' roles are no longer used. Prepare osmium for decom. Bug: T175093 Change-Id: I99356298ba12d574d84528306e9dbc33c270873c | 06 September 2017, 23:52:29 UTC |
d893b1d | Timo Tijhof | 05 September 2017, 22:05:53 UTC | webperf: Decom webperf::ve service Bug: T175083 Change-Id: I76bf0e43d700120551f79013a2a6dd7394ab63be | 06 September 2017, 23:49:56 UTC |
cb61b2f | Paladox | 04 September 2017, 20:58:35 UTC | Gerrit: Set base url for commitlink This is needed so that these will work in polygerrit. Change-Id: I9d572ab932fb811c2616bc8db3142f298acf3a3b | 06 September 2017, 22:35:07 UTC |
3e336d4 | cpettet | 06 September 2017, 22:03:26 UTC | openstack: preserve limiting SSH listen IP for nova network host Bug: T171494 Change-Id: Icfeaa72e699a59fb9bb3a9c7f5e872295d0060ab | 06 September 2017, 22:03:26 UTC |
9a102d8 | cpettet | 06 September 2017, 21:55:06 UTC | openstack: add nova-fullstack upstart template to openstack2 Bug: T171494 Change-Id: I99645ce781c99b9ea14c319a50b1f3bd53e34b44 | 06 September 2017, 21:56:07 UTC |
9e9af28 | cpettet | 06 September 2017, 21:46:49 UTC | openstack: bare_metal is a hash and set main accordingly Bug: T171494 Change-Id: Ic97757435c1f7b47eda28c7ba673421580927a8d | 06 September 2017, 21:48:58 UTC |
e564fe1 | Ottomata | 06 September 2017, 21:23:25 UTC | Enable topic deletion for kafka-jumbo Change-Id: I8fc24fbb39f22f1ab0002df18c7fb9d4ef98613d | 06 September 2017, 21:24:10 UTC |
800b20d | cpettet | 06 September 2017, 21:19:25 UTC | openstack: pass in network_public_ip for nova network Bug: T171494 Change-Id: Ib83532ae2a38b817ec3bcf87ea085679f26f9af8 | 06 September 2017, 21:20:12 UTC |