Skip to main content

Browse the archive

https://github.com/wikimedia/operations-puppet
12 April 2024, 10:39:33 UTC
sort by:
Revision Author Date Message Commit Date
2eb401e Jaime Crespo 11 April 2024, 16:18:16 UTC mariadb: Reenable notifications for db2201 & db2202 Bug: T355422 Change-Id: Ib871c19f704ce4503cdee7aeeb1a4698a1220ab4 12 April 2024, 09:46:36 UTC
a052538 Taavi Väänänen 12 April 2024, 08:35:49 UTC hieradata: Update Striker to 2024-04-12-081232-production Change-Id: I304a36e2b9d99bd1594119501cc91c6f4eb598b5 12 April 2024, 08:37:15 UTC
5594066 Moritz Mühlenhoff 12 April 2024, 07:30:08 UTC Remove remaining diamond leftovers This has been absented since July 2023 and is only limited to Buster VMs anyway, seems fine to finally remove for good. Change-Id: I70e15f82845355e29209f9423ca1da97a572702d 12 April 2024, 07:59:20 UTC
a0327c7 Moritz Mühlenhoff 12 April 2024, 06:19:45 UTC Switch moss nodes away from insetup::buster These are now all running Bookworm, so switch them to the main insetup role for Data Persistence so that they can be migrated to Puppet 7 alongside the other insetup::data_persistence hosts going forward. Bug: T349619 Change-Id: I5fd469fb93f83d75c9aa08e68d1ff7c5f3f9efe0 12 April 2024, 07:44:12 UTC
254bfb0 Janis Meybohm 11 April 2024, 13:45:06 UTC kubernetes::master: Forward audit logs to kafka Add a rsyslog imfile config to consume /var/log/kubernetes/audit.log sending it to kafka like all other kubernetes logs. Hosts: auto Bug: T290020 Change-Id: I0c89e7635365e2d2af77e62d8b4eac076f9bb109 12 April 2024, 07:29:39 UTC
22c1c0a Marostegui 12 April 2024, 05:18:54 UTC Revert "db2109: Disable notifications" This reverts commit 422771005d5ea74c411770576eccb9b0e5a2aa4c. Reason for revert: Maintenance done Change-Id: I5ab02af8d6fdb2d03bb4dd129177a53e5c1800f8 12 April 2024, 05:54:01 UTC
0b05423 Moritz Mühlenhoff 18 March 2024, 09:38:40 UTC apt-staging: Select the custom nginx provider with no additional modules All apt/staging nodes are on bookworm so we can start using the new nginx configuration scheme: apt-staging doesn't use any extra modules, so we can just go with the empty module list (Strictly speaking the empty module is already the default via common/profile/nginx.yaml, but it still seems useful to have it here more expressiely along with the configuration setting to select the variant) Hosts: apt-staging2001.codfw.wmnet Bug: T329529 Change-Id: I73e16f778a7b848d8b240caae2fb87362ac55132 12 April 2024, 05:18:05 UTC
4227710 Manuel Arostegui 12 April 2024, 05:15:33 UTC db2109: Disable notifications Migration to Bookworm. Change-Id: I005abd396db06e7035074a93150724d380aa8e9d 12 April 2024, 05:15:33 UTC
1234b88 Andrew Bogott 08 April 2024, 18:12:21 UTC Prepare cloudbackup200[12] for decom Bug: T356216 Change-Id: I81a32fd691e446781dc93ae7c087dd71940e91ce 12 April 2024, 03:09:50 UTC
bcc69c7 Daniel Zahn 11 April 2024, 19:43:13 UTC cloud/devtools: switch default puppetmaster from 1001 to 1003 Switch the default Hiera settings for the project from old puppetmaster-1001 (buster, puppet5) to new puppetmaster-1003 (bookworm, puppet7). Note how there are also settings for a puppetdb but that is all pointing to the same machine and NOT to the separate puppetdb* instance we just turned off. Bug: T360470 Bug: T360964 Change-Id: I2cb64c99ab9b3a863f8f668ed8fa0d98d0e264d1 11 April 2024, 19:46:10 UTC
bb86ab6 Chris Danis 11 April 2024, 19:42:10 UTC homedir prompt update Change-Id: Ifcc8331b290b25ecf1a8e4ca9cdc7d009a961456 11 April 2024, 19:43:46 UTC
5d7435c CDobbins 11 April 2024, 19:13:23 UTC Revert "purged: add PKI cert handling" This reverts commit a461a136855a7119c04bc0285513413dfd108d2b. Reason for revert: I merged it prematurely and mistakenly Change-Id: I874dfc5aa28182d9bc46fa0729bdeb3196a026b2 11 April 2024, 19:13:23 UTC
a461a13 Chris Dobbins 05 April 2024, 16:27:17 UTC purged: add PKI cert handling This is an initial attempt at adding code to request certificates from CFSSL Change-Id: Idca0538cf08bd54122ddc607f383de21d4079526 11 April 2024, 18:26:51 UTC
6bf2fb9 Ahmon Dancy 11 April 2024, 15:25:57 UTC Serve mw.org/ontology/ontology.owl via /w/static.php (v2) hieradata/common/mediawiki.yaml: Rewrite https://mediawiki.org/ontology/ontology.owl to /w/static.php which (as of I986905526fad84c0e654ef209d15ebc39956bbe6) will serve it. This will remove the need for the last remaining use of the 'php' symlink in operations/mediawiki-config. Bug: T171807 Bug: T359643 Change-Id: Ibe0043a3c03c176d0b2a4b38affd413782cd8bba 11 April 2024, 16:05:05 UTC
6b2846e Ahmon Dancy 11 April 2024, 15:15:13 UTC Revert "Route /w/docs/ to /w/static.php" This reverts commit 84022fd8b14d82342683e71dac667e7e6162d016. A different approach will be used. Bug: T171807 Bug: T359643 Change-Id: Iafd387b1d5b3855682d1530158d6f2bf08922e9a 11 April 2024, 16:05:05 UTC
73766b1 Jaime Crespo 11 April 2024, 15:32:19 UTC dbbackups: Add striker_toolsbeta to the list of m5 backups Bug: T360149 Change-Id: I451af87b38014968683f2f4f24f16b31ec692045 11 April 2024, 15:48:23 UTC
d33ad27 Moritz Mühlenhoff 16 December 2022, 15:26:43 UTC cache: Add SPDX headers Bug: T308013 Change-Id: I711bc3b27a31f2d1207136faecf575bb7a639e30 11 April 2024, 15:38:03 UTC
c16b0a1 Moritz Mühlenhoff 07 October 2022, 09:02:56 UTC trafficserver: Add SPDX headers Bug: T308013 Change-Id: I71e75af6832c81ef25d9582e6042768f1a0c377b 11 April 2024, 15:33:43 UTC
0e68fb4 Fabrizio Furnari 11 April 2024, 14:38:55 UTC hiera: unify trafficserver storage elements for esams This needs to be merged AFTER each per-host override has been deleted. Both text/cache in esams have dual NVMe drives now. Bug: T360430 Hosts: cp3066.esams.wmnet, cp3074.esams.wmnet Change-Id: I29c95c99c12670f3ea282581e4c56689412f80dd 11 April 2024, 14:44:14 UTC
b4b5143 Moritz Mühlenhoff 11 April 2024, 14:21:33 UTC Remove global root for four engineering managers Remove Joanna, Kwaku, Lukasz and Leo from the ops group, they have confirmed in out of band communication that they currently don't use/need the access. The SSH keys are kept for now, pending further clarification for alternative shell access. Change-Id: I05955e152aa5ed3234ef4a1f6df0acd1c204869a 11 April 2024, 14:39:23 UTC
c885152 Taavi Väänänen 11 April 2024, 11:56:55 UTC O:mariadb::grants: drop unused clouddb.sql.erb Change-Id: I9ea6bf746cf8cbe684d1df77ddbf07504a547a85 11 April 2024, 14:30:17 UTC
9daa8c3 Marostegui 11 April 2024, 14:20:10 UTC Revert "db2149: Disable notifications" This reverts commit 6d2f815b13f1051fa9c9266d4f9e7545ac996deb. Reason for revert: Maintenance done Change-Id: I9c5475f48ba2d6e9baee85b73ad1580d20e66fbc 11 April 2024, 14:27:38 UTC
9a0d992 Luca Toscano 09 April 2024, 15:40:20 UTC Force PKI TLS certs for cassandra instances on aqs1010 First node on AQS that will run PKI TLS certs. Bug: T352647 Change-Id: Ia183575c8e161ec828757ec2725faf8947a9fc0c 11 April 2024, 13:55:39 UTC
6d2f815 Manuel Arostegui 11 April 2024, 13:48:57 UTC db2149: Disable notifications Migration to Bookworm. Change-Id: I650449534efed1a9f8e84a109b296744c4f21634 11 April 2024, 13:48:57 UTC
9f572bf Ben Tullis 11 April 2024, 13:44:29 UTC Ensure that matomo install grub to /dev/vda Bug: T349397 Change-Id: I5662b5ff07c22c90367bdf3f5e1967c18172070c 11 April 2024, 13:44:29 UTC
1f1843a Sukhbir Singh 01 April 2024, 13:17:22 UTC cp3073: update hieradata for dual NVMe disks configuration Bug: T360430 Change-Id: Icb50110eb37414599d5c779b5351b68a0d2a2afa 11 April 2024, 13:33:12 UTC
9470a54 Ben Tullis 11 April 2024, 13:20:27 UTC Correct the device names for matomo disks The partman configuration referenced /dev/sda and /dev/sdb instead of /dev/vda and /dev/vdb Bug: T349397 Change-Id: Ie1d2af48e2f3648fceb38fb22c3625ec5cf57187 11 April 2024, 13:20:27 UTC
d39c3cf Marostegui 11 April 2024, 11:21:17 UTC Revert "db2177: Disable notifications" This reverts commit 6f31937525c2593333492871875624c4d1220386. Reason for revert: Maintenance done Change-Id: I95734ead1fe066b7cd33304fb5759ee421f66474 11 April 2024, 12:27:58 UTC
86627f4 Simon Lyngshede 11 April 2024, 11:53:24 UTC P:idm allow security key backended SSH keys Allow the use of sk-ssh-ed25519@openssh.com and sk-ssh-ecdsa@openssh.com SSH key types. Bug: T361714 Change-Id: Ib09239fe73cf7474d65ca3e5d0fa0a06150586cd 11 April 2024, 12:03:07 UTC
3a58be8 Clément Goubert 10 April 2024, 13:59:53 UTC trafficserver: move 70% of traffic to mw on k8s Bug: T360763 Depends-On: I936da4aa72150b09d6d8a0bb5edbab002f233cfe Change-Id: I9e050d7e0db2fc099e044c28eac04d7450096abe 11 April 2024, 12:02:56 UTC
f7dc9f8 Moritz Mühlenhoff 11 April 2024, 11:42:04 UTC Fix typo Change-Id: I8adba442d9998a90afa4bd3990d4d97d84b6965d 11 April 2024, 11:47:48 UTC
75057e3 Arzhel Younsi 11 April 2024, 11:35:48 UTC Add public testvm200x support Bug: T300152 Change-Id: Id8d4cbe4caeb3fa94b2e6c5e215b992a5c65fdb1 11 April 2024, 11:42:19 UTC
9da1689 Moritz Mühlenhoff 11 April 2024, 11:34:36 UTC Add library hint for psql 15 Change-Id: I2c612fbac570c5890d0dddb957ac145ddacb78ae 11 April 2024, 11:34:36 UTC
245f78c Ben Tullis 11 April 2024, 11:00:13 UTC Add a partman recipe for the new matomo server We have added a second disk to this VM, which we are going to mount at /srv in order to facilitate future reimages. This new partition recipe configures /srv as an XFS volume, since it will be serving MariaDB for Matomo. Bug: T349397 Change-Id: I45824fe7f2380f9725fd9170b615836610ebfee4 11 April 2024, 11:10:33 UTC
6f31937 Manuel Arostegui 11 April 2024, 11:09:07 UTC db2177: Disable notifications Migration to Bookworm Change-Id: I5ff5ab68c42dece87e2286ac07b9c98769675d8d 11 April 2024, 11:09:07 UTC
39ad192 Moritz Mühlenhoff 10 April 2024, 08:21:01 UTC Add andyrussg to analytics-privatedata-users Bug: T361742 Change-Id: Ia8d84578986ff7851fd77311eef2eb6dce67e0f8 11 April 2024, 10:54:44 UTC
f7c66af Moritz Mühlenhoff 10 April 2024, 07:52:47 UTC Add stoyofuku to analytics-privatedata-access Bug: T362113 Change-Id: Iaf6383577b2c65e3c724a47f9734d3d47300ff50 11 April 2024, 10:48:57 UTC
6065965 Ben Tullis 11 April 2024, 09:46:38 UTC Use a more WMF standard mariadb configuration for Matomo This will move the datadir to /srv and apply other minor changes to make it more suitable for the MariaDB 10.6 configuration. Hosts: matomo1003.eqiad.wmnet Bug: T349397 Change-Id: I6dee55a2a10c5fc01405631e9ba9c0c9fbb5eddd 11 April 2024, 10:16:15 UTC
34530f3 Fabfur 11 April 2024, 09:42:01 UTC Revert "benthos: temporary disable haproxy metrics" This reverts commit 567ba66af21839c2e3632459f0ba857fdb65c3d3. Reason for revert: aggregate filtering has been fixed Change-Id: If35bee02c716ce2976b864af4a6f5014844b4b5b 11 April 2024, 09:57:51 UTC
0c65007 Jaime Crespo 10 April 2024, 16:45:24 UTC mariadb: Reenable notifications for db2199, db2200 after setup Bug: T355422 Change-Id: Ie20eec5ca540a34c2338f73ddaea12a9aebb0aa0 11 April 2024, 09:47:42 UTC
1b0fd20 Clément Goubert 10 April 2024, 13:43:32 UTC kubernetes: Move 7 codfw appservers to kubernetes appserver: mw2412.codfw.wmnet mw2413.codfw.wmnet mw2414.codfw.wmnet mw2415.codfw.wmnet api_appserver: mw2416.codfw.wmnet mw2417.codfw.wmnet mw2418.codfw.wmnet Bug: T351074 Change-Id: I73191f38e9549c16bfeedfcf656b36012162bdaf 11 April 2024, 09:31:53 UTC
11bd5f1 Taavi Väänänen 10 April 2024, 10:17:26 UTC hieradata: Add CDN config for toolsadmin-toolsbeta.wikimedia.org Bug: T360025 Change-Id: I5406209edb032e88ff2a93f0154c0658d9eb1e0a 11 April 2024, 09:31:09 UTC
63b07ca jelto 11 April 2024, 09:18:43 UTC gitlab_runner: add dockerfile support for test runner in WMCS To properly test new changes for runners with dockerfile support, also add dockerfile frontend to the test runner in WMCS. Bug: T357612 Change-Id: I7bd6011d1d2e886fc98d274a482cf5405397e536 11 April 2024, 09:28:01 UTC
c952a33 gerritbot 11 April 2024, 08:54:19 UTC mariadb: Promote db2114 to s6 master Bug: T362302 Change-Id: I1b1bea774d412303391c258cc4e9925d2b6e9098 11 April 2024, 09:18:28 UTC
5cda168 Marostegui 11 April 2024, 08:50:49 UTC Revert "db1198: Disable notifications" This reverts commit c334f77df5cef5c9e1e68c71fa600913a8b28844. Reason for revert: Maintenance done Change-Id: I097fd2921a03ead2f78b393ebf17538ea0d8e9ca 11 April 2024, 08:57:29 UTC
395db1a Arzhel Younsi 04 April 2024, 12:20:59 UTC add_ip6_mapped - don't fail if the host already have a /128 address Bug: T300152 Change-Id: Id75ef1ab58c33032d905da3b1ebe4796d83d5927 11 April 2024, 08:21:57 UTC
379b19c Simon Lyngshede 11 April 2024, 07:09:25 UTC R:idp decommision Bullseye IDP hosts. Bug: T357748 Change-Id: Ifa117ce7abf27737d5349932acfc491964f354da 11 April 2024, 08:07:06 UTC
c334f77 Manuel Arostegui 11 April 2024, 08:04:46 UTC db1198: Disable notifications Migration to bookworm Change-Id: Ib6c3bf34e13446e2ed2c70730942e7b0abf0bc27 11 April 2024, 08:04:46 UTC
1970cb1 Sukhbir Singh 01 April 2024, 13:17:22 UTC cp3072: update hieradata for dual NVMe disks configuration Bug: T360430 Change-Id: I89263c4958761cc1dcafe7727329c665a4d483b9 11 April 2024, 07:45:02 UTC
3519182 Moritz Mühlenhoff 11 April 2024, 07:12:07 UTC Blacklist n_gsm kernel module This provides support for the GSM MUX protocol for tty devices, we don't use/needed it. Change-Id: I1f77b66298d587ced5e42448140e96b3b97e19dd 11 April 2024, 07:25:17 UTC
5e9828e Taavi Väänänen 10 April 2024, 14:33:18 UTC alertmanager: karma: Set group too The config file is no longer world-readable as it contains the metricsinfra password. Right now the file is root:karma with 0444, so to read it the systemd service needs Group=karma which it currently does not have. Change-Id: I45e597c2688ebb955795fb080f3d2e301857b777 11 April 2024, 07:17:09 UTC
1612d11 Filippo Giunchedi 08 April 2024, 09:31:29 UTC titan: trim 5m retention to 3y + 2w Previous limit of 4y + 1w isn't quite sufficient to start removing data as we're just about to hit the 4y mark. Temporarily trim to 3y + 2w instead, until more capacity comes next FY. There might be a need to trim further as well depending on growth. Bug: T351927 Change-Id: I4bbe1f15d34f97df36f83405f3adeaee961d9ec3 11 April 2024, 07:05:25 UTC
1a231b5 Marostegui 11 April 2024, 05:37:40 UTC Revert "db1189: Disable notifications" This reverts commit b74c44b569d14a70f38cc2e51dda7a5ddc45a0ca. Reason for revert: Maintenance done Change-Id: Ic1f036692c4eb2f8bca1f8499097c20eababa7b7 11 April 2024, 05:37:40 UTC
b74c44b Manuel Arostegui 11 April 2024, 05:13:45 UTC db1189: Disable notifications Migration to bookworm Change-Id: I68c5a70fd97cdf75c4dbd0cedf860dc4464b9240 11 April 2024, 05:13:45 UTC
76fc042 Eoghan Gaffney 10 April 2024, 21:03:47 UTC gitlab: Unquote rsync path with glob rsync doesn't know how to glob a filename, so we unquote it for this instance so the globbing happens in the shell script. Change-Id: Id774d509f6fbedeb4e00caf6e9f78a56fa47eac6 10 April 2024, 21:03:47 UTC
eaf7969 Andrew Bogott 10 April 2024, 19:50:35 UTC nova-fullstack: switch test image from Bullseye to Bookworm Change-Id: I35232f8bede50473568bc9941a107a8346653be2 10 April 2024, 19:50:54 UTC
d86abb4 Sukhbir Singh 01 April 2024, 13:17:22 UTC cp3071: update hieradata for dual NVMe disks configuration Bug: T360430 Change-Id: I8eb81e24f1bff3c8b9fbd5315a5d9fe177b8c3e4 10 April 2024, 18:24:46 UTC
65792a1 Ben Tullis 10 April 2024, 17:50:56 UTC Add missing file to the matomo profile The piwik profile was used as a template for the matomo profile, but one file was inadvertently omitted when the prfile was copied, preventing Apache from starting. Bug: T351552 Change-Id: I78dc02e433794383f20696564bc1b4a74e2f369e 10 April 2024, 17:50:56 UTC
ead8bda Ben Tullis 10 April 2024, 15:40:31 UTC Create a new and profile for the new matomo server We intend to replace matomo1002 with matomo1003, upgrading matomo itself from 3.14.1 to 4.16.1 and the host from buster to bookworm. Matomo was previously named Piwik, so we still apply a 'piwik' profile to matomo1002, although this profile loads a 'matomo' module. In order to facilitate setting up the new host without adversely affecting the production service, we are going to duplicate the piwik profile to matomo. Once the service has been migrated to the new host, we will remove the unused piwik profile. Hosts: matomo1002.eqiad.wmnet,matomo1003.eqiad.wmnet Bug: T351552 Change-Id: I2b586460511528769c84eb64556aaf7b23950b35 10 April 2024, 17:22:05 UTC
cc9c96f Andrea Denisse Gómez-Martínez 10 April 2024, 16:52:46 UTC prometheus: Ensure the Benthos metrics are correctly parsed In Prometheus, when using the sum by aggregation operator, the label matchers (such as {job=~"cache_.*"}) should be inside the rate function, not outside. Bug: T361845 Change-Id: I3925b6d9837528b19aeedf0680759bccfcd0b427 10 April 2024, 16:52:46 UTC
4adcd0c Jaime Crespo 09 April 2024, 12:14:11 UTC mariadb: Migrate db2097 backups to db2197 db2097 is going to be decomissioned, migrate away the logical backups, the snapshots and the media backup metadata scanning to db2197, with bookworm and MariaDB 10.6. Bug: T360751 Bug: T355422 Change-Id: I637f20b56e6ba25cbb372090e315d96a4ca6fc4b 10 April 2024, 15:49:18 UTC
5d74c3a BCornwall 10 April 2024, 15:43:02 UTC Revert "ssl_ciphersuite: Reorder suite preferences" This reverts commit 83631e9824afaaf9ba624101cd8485b0d1c096a6. Reason for revert: We use that specific order in combination with openssl to prioritize chacha feature. https://trac.nginx.org/nginx/ticket/1445 Change-Id: Id5eb74774f152190c9a378f44a78f3ffd6fe259d 10 April 2024, 15:49:07 UTC
23c056a Brett Cornwall 09 April 2024, 21:23:14 UTC ncredir: Set ssl_ciphersuite to strong We've failed to keep ncredir synced in terms of supported ciphersuites compared to our CDN cluster. We should sync up. The "strong" ciphersuite currently syncs up with our haproxy deployment in the CDN. Bug: T362197 Change-Id: I6214feb693adeb150e79cc315ea493ea494251ed 10 April 2024, 15:26:55 UTC
83631e9 Brett Cornwall 09 April 2024, 21:25:24 UTC ssl_ciphersuite: Reorder suite preferences To keep our "strong" ciphersuite consistent with production CDN, reorder the preferred ciphersuites to match haproxy. Bug: T362197 Change-Id: I13ad9d8ef305545526f8786221b49a79288dab6e 10 April 2024, 15:26:46 UTC
793e469 Taavi Väänänen 10 April 2024, 15:01:59 UTC hieradata: Update striker container to add staging env warning Bug: T254598 Bug: T360025 Change-Id: Iaf41ea4aeedf56dfc2b6590b6fbcdb0f998fb8d0 10 April 2024, 15:02:26 UTC
9c23523 Ben Tullis 10 April 2024, 11:35:19 UTC Update third-party/matomo repository definition As per the notes at: https://debian.matomo.org/ The codename repository has been changed since version 4.0.0 of matomo from piwik to matomo. We wish to install matomo version 4.16 on bookworm, so we need to update the apt repository definition accordingly. The key used to sign the packages has not changed. We can also use the opportunity to enforce HTTPS in package retrieval. Hosts: O:apt_repo Bug: T351552 Bug: T349397 Change-Id: Ic3aeef563335f2b6ae296f308613054634aa1519 10 April 2024, 14:31:10 UTC
18d21b9 Fabrizio Furnari 09 April 2024, 12:27:06 UTC prometheus: add aggregate metrics for benthos Similarly to what's already present for mtail-generated metrics above. The aggregated metric for mtail keeps the same name but are built specifying explicitly the job label. The benthos aggregate metrics has different name to easily differentiate, will probably be discarded when the transition to Benthos will be completed and the former aggregated metrics will be built with job=~"benthos". Bug: T361845 Change-Id: I37caa14311d01a012ac9a12d2646482de0949c64 10 April 2024, 14:03:13 UTC
5190d48 Moritz Mühlenhoff 16 February 2024, 14:51:32 UTC configmaster: Avoid Ferm-specific syntax Remove Ferm-specific syntax from firewall definitions and switch to firewall::service. This will eventually allow to migrate invididual roles to nftables. Also remove a stray comment Hosts: C:profile::configmaster Change-Id: I65ea04e2ee5e04c68d479e15fd3ab9e6b49bb5ad 10 April 2024, 13:42:45 UTC
2fe0c35 Moritz Mühlenhoff 02 April 2024, 11:09:16 UTC Remove now obsolete certificate All the services which had been using this cert were migrated to cfssl. Bug: T360412 Change-Id: If100e4fccc533e9e3a7fa4fa535483541ff41179 10 April 2024, 13:28:58 UTC
4b334a8 Luca Toscano 09 April 2024, 16:13:50 UTC cassandra::instance: fix PKI keystore for each instance In the current code the Cassandra instance's keystore resource is called "cassandra_keystore", that works when we have only one instance for each host (like ml-cache, the first cluster running PKI) but that leads to duplicate resource declaration for 2+ instances on the same node. Add the hostname to the resource definition to avoid name clashes. Bug: T352647 Change-Id: I78f18f5e6c3392c9f0163d98fccb530c64ed107d 10 April 2024, 12:49:31 UTC
3275380 Moritz Mühlenhoff 05 April 2024, 12:41:55 UTC Uninstall eject on production VMs The hardware emulated by our Ganeti machine type includes a "CDROM" If d-i detects such a drive, it installs eject on the installed system (used by functionality which ejects the CDROM if installung from optical media. We don't need this, so uninstall it via Puppet Restrict to production systems Change-Id: I38efc9711fecdaa65a9c7edfd19f1d10096eb960 10 April 2024, 12:49:24 UTC
7f385e4 Filippo Giunchedi 10 April 2024, 10:38:01 UTC opensearch: set vhost and issuer url for dashboards sso test Bug: T337818 Change-Id: I9bc90d1254f8a3f7ce64f7d7adb5f43a1a0fdbc5 10 April 2024, 12:27:14 UTC
2a15672 Taavi Väänänen 10 April 2024, 11:26:44 UTC P:wmcs::striker::docker: bind on 0.0.0.0 instead Envoy talks to the node's routable IP address, and we can't change that due to how the MediaWiki Apache config works. The host firewall will still block direct access from outside. Change-Id: I4cc3c6d0697d3bcadd89adbd406877c51a994804 10 April 2024, 11:29:06 UTC
38cc7ff Taavi Väänänen 10 April 2024, 11:14:34 UTC P:wmcs::striker: Set the port to bind on Bug: T360025 Change-Id: I287296b2a7f5ea10ff9a5d3283a33dfa1cee622e 10 April 2024, 11:19:55 UTC
424d69e Moritz Mühlenhoff 10 April 2024, 11:00:09 UTC Remove certs for docker-registry and testreduce Both migrated to cfssl now Bug: T360636 Hosts: registry1004.eqiad.wmnet, testreduce1002.eqiad.wmnet Change-Id: I2a5732a6aa02017531ce63a8c7ed53c610ff343e 10 April 2024, 11:18:00 UTC
f23b71a Clément Goubert 10 April 2024, 10:00:10 UTC kubernetes: move 6 eqiad api_appservers to kubernetes mw1421.eqiad.wmnet mw1422.eqiad.wmnet mw1491.eqiad.wmnet mw1492.eqiad.wmnet mw1493.eqiad.wmnet Bug: T351074 Change-Id: I6462b5cc49bb5ea33adcdc9180aa6c0150023bca 10 April 2024, 11:02:22 UTC
246f0ef Marostegui 10 April 2024, 10:47:08 UTC Revert "db1175: Disable notifications" This reverts commit 8f4f0510c96fe8fe6e5e2c85abfc00a7fcd0c7c5. Reason for revert: Maintenance done Change-Id: I3e0f267358496dfc6b0e6ff40b52955eee9f31a8 10 April 2024, 10:53:52 UTC
6d49d8f Taavi Väänänen 10 April 2024, 10:17:13 UTC hieradata: Add Striker toolsbeta instance Bug: T360025 Change-Id: Iff2ba5908beedd5e34adf2c58c88473a17473015 10 April 2024, 10:53:22 UTC
6e525a9 Moritz Mühlenhoff 09 April 2024, 09:04:46 UTC Switch testreduce to cfssl Hosts: testreduce1002.eqiad.wmnet Bug: T360636 Change-Id: Ibf313ea09d870b0a9559d3fdc9acf19bbcd8e810 10 April 2024, 10:50:57 UTC
9cdbbc4 Moritz Mühlenhoff 10 April 2024, 10:27:08 UTC puppetboard: Remove obsolete cert puppetboard was switched to cfssl in 2021 via commit 3c891f45f6ee767592327fddd7ec610d7c0aa6c7, this certificate can be removed. Change-Id: Iee7f095d35aaa59ee16f8ae909ff8fac0188a648 10 April 2024, 10:27:08 UTC
cd2c4b8 Filippo Giunchedi 10 April 2024, 10:21:35 UTC opensearch: move apache-auth-sso.erb to the right location Bug: T337818 Change-Id: I592a3588357d6e59667eda7d1233c178cd3caa48 10 April 2024, 10:21:49 UTC
8f4f051 Manuel Arostegui 10 April 2024, 10:18:09 UTC db1175: Disable notifications Migration to bookworm Change-Id: I079a09df1c279e301cab3a508ba690afccb99b59 10 April 2024, 10:18:09 UTC
b6943b2 Clément Goubert 09 April 2024, 12:16:07 UTC docker_registry_ha: Migrate to cfssl Why: In order to unblock puppet 7 migration, phase out cergen. What: Switch docker-registry to cfssl. Hosts: O:docker_registry_ha::registry Bug: T360636 Change-Id: I246550fdae90d0bcafa68ed4bd27ca356c128ab4 10 April 2024, 10:16:57 UTC
a90779d Filippo Giunchedi 10 April 2024, 10:13:58 UTC opensearch: use Sensitive[String] for sso secrets Bug: T337818 Change-Id: Ife23a4ea15c10cf7b7bc4f52c8eb201fd8d31115 10 April 2024, 10:14:11 UTC
ff074de Taavi Väänänen 12 March 2024, 12:11:01 UTC P:wmcs::striker: add support for multiple instances Updates the Striker profile so that we can have multiple Striker instances on the same host (for example for separate Tools and Toolsbeta instances). Also, TRUSTED_PROXY_LIST is now generated from the canonical cache_hosts hiera key. Bug: T360025 Change-Id: Ie585c656e7387d7de7a8326a990458a00a56ba11 10 April 2024, 10:11:54 UTC
617cd82 Filippo Giunchedi 10 April 2024, 10:02:08 UTC opensearch: fix sso support Bug: T337818 Change-Id: Ia68a47c989e3e36bf4ef190aae6a6947e9424aac 10 April 2024, 10:06:05 UTC
8c05f77 Moritz Mühlenhoff 10 April 2024, 10:01:16 UTC Switch mariadb::sanitarium_master to Puppet 7 Bug: T349619 Change-Id: I404300b896b87ada5d9ad0b1ed43a6cc4bca40b4 10 April 2024, 10:02:00 UTC
69aa866 Filippo Giunchedi 10 April 2024, 09:06:48 UTC hieradata: test sso for opensearch-dashboards in cloud vps This is the host backing beta-logs-idp.wmcloud.org Bug: T337818 Change-Id: Ifc37f47b4a8c732c80d5fe1f8fa3164d581bb392 10 April 2024, 09:57:34 UTC
35779e9 Arnaud Bran 10 April 2024, 09:22:10 UTC mariadb: create new account and database on m5 for striker_toolsbeta As required on T360149 account and database have been created Bug: T360149 Change-Id: Ia1199f3f6e7d2b6b70aa6d8caacfcd003f4b19fb 10 April 2024, 09:29:10 UTC
1be51c0 Filippo Giunchedi 27 March 2024, 14:50:10 UTC Use oauth2-proxy for opensearch dashboards Bug: T337818 Change-Id: I8cce3dbc32e19407d9bd612bf09e08513683c191 10 April 2024, 08:53:12 UTC
3a12893 Eoghan Gaffney 10 April 2024, 08:35:48 UTC gitlab: Fix typo in systemctl timer command Change-Id: I6b0b60132a9e615d0889214bc49081fdaf149701 10 April 2024, 08:35:48 UTC
d8a99b9 Simon Lyngshede 10 April 2024, 08:09:22 UTC C:idm::deployment Add Django REST Framework. The new API features depends on the Django REST Framework. This will be marked as a dependency in the Debian package, but needs to be listed as a dependency for the Git installation on test. Change-Id: I499f209746c08f6c349134357a1db54435b1a75c 10 April 2024, 08:16:06 UTC
57369bb Moritz Mühlenhoff 08 April 2024, 07:27:14 UTC puppetdb::microservice: Use firewall::service The firewall definition already uses compatible data types. Also drop an obsolete OS check, the puppetdb hosts are all on Bookworm. Hosts: puppetdb1003.eqiad.wmnet Change-Id: Ibc6f7f875cb5b103a508597475ea072c14aba5b4 10 April 2024, 08:11:09 UTC
f797d20 Moritz Mühlenhoff 09 April 2024, 18:58:28 UTC Remove now obsolete redirects DNS entries are already gone, also remove the redirects itself. Change-Id: I07da4407cc712b8c7c513b0ed59d1e96c8635bcb 10 April 2024, 07:53:33 UTC
7c88d52 Sukhbir Singh 01 April 2024, 13:17:22 UTC cp3070: update hieradata for dual NVMe disks configuration Bug: T360430 Change-Id: I44674af6c20a1969a065c8a65eaeb2ee3ec8b5b2 10 April 2024, 07:49:20 UTC
925af7d Moritz Mühlenhoff 10 April 2024, 07:26:40 UTC Switch dumps::generation::server::spare to Puppet 7 Bug: T349619 Change-Id: I340de523c2da2db2dd28bdf09e7b0fa0efbc249e 10 April 2024, 07:26:40 UTC
b3e9dd4 Arnaud Bran 10 April 2024, 06:21:38 UTC mariadb: toggle notifications for db2212 host is ready to be pooled Bug: T355422 Change-Id: I324d56a16d7e40690cdafcfbe8a99160795e49dd 10 April 2024, 06:21:38 UTC
d8f2a06 Marostegui 10 April 2024, 05:00:22 UTC Revert "db1166: Disable notifications" This reverts commit 40aaf9a5e83e01117adb6c760ae35870132e7507. Reason for revert: Maintenance done Change-Id: I1f6f996cae3a21b5b2a75b83063b5601332e76a3 10 April 2024, 05:00:22 UTC
40aaf9a Manuel Arostegui 10 April 2024, 04:56:46 UTC db1166: Disable notifications Migration to Bookworm Change-Id: I4cf0933a2eac3d4aa169611941866301833d0134 10 April 2024, 04:56:46 UTC
2fea920 Manuel Arostegui 10 April 2024, 04:50:32 UTC installserver: Do not format es2040 Change-Id: I3a049156be4b636e36f08b1993101b06e45984bd 10 April 2024, 04:50:32 UTC
back to top