da0b59e | Filippo Giunchedi | 13 June 2017, 15:03:59 UTC | hieradata: a/p for varnish swift_thumbs Bug: T162609 Change-Id: I8184a2eeb300c4ac6cdb171887b214a04451fdc1 | 13 June 2017, 15:13:06 UTC |
dd6e835 | Filippo Giunchedi | 13 June 2017, 15:03:21 UTC | hieradata: a/a for varnish swift_thumbs Bug: T162609 Change-Id: I198d282e81f8b7d4605c1e19282cd9c6000a451b | 13 June 2017, 15:04:19 UTC |
f06af93 | Filippo Giunchedi | 13 June 2017, 14:42:16 UTC | hieradata: point varnish upload esams to codfw Test swift 2.10 upgrade in codfw with additional traffic from esams Bug: T162609 Change-Id: I762af83f228c297c472ca2102796ec399a8bb26d | 13 June 2017, 14:50:43 UTC |
704332a | Faidon Liambotis | 13 June 2017, 14:39:08 UTC | smokeping: s/FRack/frack/ Change-Id: I1c095b64e24309ff810e975753a8e9a3724c25b8 | 13 June 2017, 14:40:08 UTC |
fae4f45 | Filippo Giunchedi | 12 June 2017, 14:02:27 UTC | hierata: swift active in codfw only Test traffic on swift 2.10 in codfw Bug: T162609 Change-Id: I07f9469ffae54f7b1d887d2da17bf67185a4a2b3 | 13 June 2017, 14:14:49 UTC |
73328a3 | Filippo Giunchedi | 12 June 2017, 14:02:08 UTC | hieradata: swift temporary a/a Bug: T162609 Change-Id: Icf517e3440544b3bdaf29169cf4c15f3d209d760 | 13 June 2017, 14:11:00 UTC |
1dfe4f8 | Alexandros Kosiaris | 13 June 2017, 14:01:07 UTC | Specify correct hostname in DHCP config Set up kubestagetcd hostnames correctly in the DHCP configuration Change-Id: I84d07c767d47b34cdd4240fbd5bd6f2cba5fc079 | 13 June 2017, 14:05:22 UTC |
9cc36c2 | andrewbogott | 12 June 2017, 22:39:59 UTC | wmf_sink: Bugfixes for proxy cleanup Change-Id: Idf21c9b2611c8772dffc785e050d6667fb774af4 | 12 June 2017, 22:48:22 UTC |
e408245 | Filippo Giunchedi | 13 June 2017, 13:50:09 UTC | hieradata: use thumbor.svc for codfw too Until Thumbor is also deployed in codfw Bug: T121388 Change-Id: Id574e94edc4cc320eefe7b45f1fb8dc4d896ad37 | 13 June 2017, 13:51:21 UTC |
3a30947 | Antoine Musso | 31 May 2017, 20:32:23 UTC | nodepool: lower min-ready for trusty We only have 13% of builds running on Trusty nowadays. Zuul metric report that we almost never have to wait for a Trusty node. Hence lower the min-ready by one which would get us one more Jessie node. Typically when there are now jobs on Trusty instances. Add link to the Zuul metric Graph which show the time to wait per OS. Change-Id: I1a13e53c04736825d0cd845b81294a6fe05b86eb | 13 June 2017, 13:43:15 UTC |
3df362f | andrewbogott | 12 June 2017, 16:29:49 UTC | wmfsink: Clean up proxy records for deleted instances. Bug: T163765 Change-Id: I91fa488a20c5f4ad4e24c6ce14513457ceb13b8e | 13 June 2017, 13:34:01 UTC |
c5c656f | Brandon Black | 26 May 2017, 16:37:36 UTC | numa_networking: add facter data from sysfs Change-Id: I4ae47a8010d8c2e9db3ffee2c4dbce765d98ce02 | 13 June 2017, 13:30:10 UTC |
3055b7c | Gilles Dubuc | 13 June 2017, 13:27:28 UTC | Deploy Thumbor to group1 wikis + mediawiki.org Bug: T167782 Bug: T167793 Change-Id: I5f32476f69071efe8f9a4eb893416cd803ddc37e | 13 June 2017, 13:27:28 UTC |
30fc023 | Gilles Dubuc | 13 June 2017, 13:10:11 UTC | Fix mediawiki.org container name for Thumbor config Bug: T167782 Change-Id: I6c89dc205ffab90856061fae6a61326900bfe853 | 13 June 2017, 13:10:43 UTC |
e892d1e | Gilles Dubuc | 13 June 2017, 10:27:38 UTC | Deploy Thumbor to group0 wikis These are the group0 wikis with media files. Bug: T167782 Change-Id: Ia83b4ed1bd41ee650cc04c146d3550b3b650c998 | 13 June 2017, 11:50:43 UTC |
707f28b | Moritz Muehlenhoff | 12 June 2017, 14:28:03 UTC | Use ffmpeg from jessie-backports on jessie-based video scalers Previously a custom backport was uploaded to apt.wikimedia.org, but since it's now in jessie-wikimedia, let's use this instead. Bug: T145742 Change-Id: If05a824ff65c9febb4e934cb45c339534f45fdfb | 13 June 2017, 11:46:18 UTC |
5f70557 | Alexandros Kosiaris | 12 June 2017, 10:39:53 UTC | Introduce kubestagetcd100{1,2,3} and neon.eqiad.wmnet Add the kubernetes staging cluster's master as well as the 3 nodes for etcd Ship netboot configuration Ship DHCP configuration Add 2 roles for master and etcd in kubernetes staging Ship hiera data for the 2 new roles Bug: T162045 Change-Id: Iad90a10bd711827d5d4af1e22fa0c8b0f06a2a7a | 13 June 2017, 11:31:46 UTC |
2d890b3 | Gilles Dubuc | 13 June 2017, 10:14:37 UTC | Re-enable Thumbor thumbnail Swift storage This time without a prefix, to hit the same paths MediaWiki used to. Bug: T167783 Change-Id: Ib7e1ab2b00a5038a7611098656499cad0107b51a | 13 June 2017, 10:15:26 UTC |
900ad24 | Gilles Dubuc | 09 June 2017, 05:32:41 UTC | Disable Thumbor dual-serving and serve testwiki with Thumbor Bug: T167490 Change-Id: Ia943a020b360308fe1d11d8e7ee9ddf8fffc375d | 13 June 2017, 09:30:12 UTC |
7b3d5c2 | elukey | 19 May 2017, 10:47:33 UTC | role::zookeeper: refactor to multiple profiles The zookeeper_cluster_name variable has been moved from the top level hieradata/eqiad,codfw yaml files to each profile that uses it, namely most of the Analytics infrastructure. To avoid namespace clashing the Hadoop hiera variable has been renamed, waiting for a better solution when all the Hadoop code will be moved to profiles as well. Some old roles have been deleted in favor of a better reuse of the new profile classes. Bug: T114815 Change-Id: If511394ac4a80287dd44f0c89d9f29fcf9477ad1 | 13 June 2017, 09:23:16 UTC |
e8a6f76 | Daniel Zahn | 13 June 2017, 03:13:13 UTC | base/puppet: add "daemonize = no" to agent config This setting prevents puppet from daemonizing. Tested with a typo like "puppet agent 0tv" as described on T166371 it works and prevents it from running. So instead of adding the monitoring for this, i suggest to add this to the config and prevent it from happening in the first place. https://docs.puppet.com/puppet/latest/man/agent.html "Do not send the process into the background. (This is a Puppet setting, and can go in puppet.conf. Note the special 'no-' prefix for boolean settings on the command line.)" Bug: T166371 Change-Id: Ie3e3a02b193380cddd9d80465fee16d80fe7644f | 13 June 2017, 05:21:30 UTC |
0ff8a04 | Daniel Zahn | 13 June 2017, 03:52:18 UTC | wikistats: move dump dir out of define, duplicate declaration Change-Id: Icf3e9b1e306139043f3ac49b99b1592a96dd160f | 13 June 2017, 04:01:49 UTC |
81f690d | Daniel Zahn | 09 June 2017, 23:06:45 UTC | wikistats: add cron jobs for XML dumps Bug:T165879 Change-Id: I76c4390342ca8347229e2e781292a3f2f9f54369 | 13 June 2017, 03:29:46 UTC |
0638122 | Daniel Zahn | 12 June 2017, 21:10:22 UTC | rancid: drop "server" suffix, apply on netmon1002 Apply the rancid role on netmon1002, migrating from netmon1001. Drop the "::server" suffix from the role name. Later this will become a profile and be combined with the other monitoring tool profiles into a single "role netmon_server" or similar. Move the "::standard"-include into rancid role, remove from node level. Bug: T159756 Change-Id: Ic9d39690a79aa748ed594782a9198b722291a1f0 | 12 June 2017, 21:14:38 UTC |
a4b02d4 | Framawiki | 11 June 2017, 22:09:37 UTC | planet: cleanup en_config.erb Change-Id: I25960b5eb29ca5bfe432c25bf3aae0cc010c59bf | 12 June 2017, 20:21:48 UTC |
73e9682 | Daniel Zahn | 09 June 2017, 00:39:45 UTC | system::role: remove leading 'role::' to avoid role-role system::role already adds "role-" to the title but we have many cases where system::role is used with titles like "role::foo", and then we end up with "role-role::foo". In I43a208fdc616e4d3e all these are fixed but as suggested there by Alex, we are additionally adding this regsubst line to avoid getting them again in the future. Change-Id: I5ad03fb1322e88f7a404b022d6da83fbc70796da | 12 June 2017, 19:48:30 UTC |
c7c2e31 | pt1979 | 12 June 2017, 16:41:26 UTC | DHCP: Add MAC address for labtestpuppetmaster2001,labtestnet2002 and labtestneutron2002 Bug:T167157 Bug:T167159 Bug:T167160 Change-Id: I7ba4668418d2eb94215ea68e08d629242e3f16f2 | 12 June 2017, 19:36:03 UTC |
f1b0d17 | pt1979 | 12 June 2017, 18:01:32 UTC | Add partman entries for labtestpuppetmaster2001,labtestneutron2002 and labtestnet2002 Bug:T167157 Bug:T167159 Bug:T167160 Change-Id: Ice54add598e6cb10efb6c013c5b7287f433a1df5 | 12 June 2017, 18:48:50 UTC |
d0bbc87 | Daniel Zahn | 12 June 2017, 18:28:00 UTC | dnsrecursor: remove duplicate and absented system::role This showed up since I43a208fdc616e4d as a duplicate definition using the same resource title. There already is a system::role for this in the actual role class, this one in the module was already "ensure => absent" (why?) and it should not be in the module. So to fix the conflict, just removing it here. Change-Id: Ib5400b5d6f88a8414428b7399fbca2a76dfd8bc8 | 12 June 2017, 18:37:33 UTC |
fa7b47d | Daniel Zahn | 17 May 2017, 22:09:37 UTC | fix all the "role-role" in system::roles system::role uses "motd::script { "role-${title}":", which means the word "role" already gets added and we always end up with "role-role-foo" motd scripts. This is supposed to fix that and remove all the duplicate "role-role". All it should influence is the motd's. Done semi-automatically with find | grep | sed. Change-Id: I43a208fdc616e4d3e2ad0c1905252f7f19019b40 | 12 June 2017, 17:02:22 UTC |
1f6c6b8 | Alexandros Kosiaris | 09 June 2017, 12:57:50 UTC | compiler: Split fact collection from shipping/collation Minimize the effects of the race condition in compiler-update facts where facts collected for a puppetmaster later in the loop would override facts from puppetmasters earlier in the loop by splitting the shipping/collation from the collection. The race is clearly still there but has a way smaller chance of manifesting Change-Id: I252f22a402e5994c8e8e55888be27ed24f3e173e | 12 June 2017, 16:53:25 UTC |
6ed9c3c | joal | 12 June 2017, 16:31:06 UTC | pivot: rename unique devices daily endpoint The last_access_uniques dataset has been renamed to unique_devices_per_domain, in order to also support unique_devices_project_wide. This patch renames the pivot endpoint accordingly. Bug: T167043 Change-Id: I3dfb72791c92536a7e4c80536c7c4961836d54be | 12 June 2017, 16:31:06 UTC |
1dcd41f | joal | 12 June 2017, 16:09:46 UTC | pivot: rename unique devices daily endpoint The last_access_uniques dataset has been renamed to unique_devices_per_domain, in order to also support unique_devices_project_wide. This patch renames the pivot endpoint accordingly. Bug: T167043 Change-Id: If2b94f7989849b25d15d206e707aaa453e5acd60 | 12 June 2017, 16:16:37 UTC |
1fd05f1 | elukey | 12 June 2017, 07:51:42 UTC | hhvm: force rsyslog config to create log files with www-data perms The current configuration assigns to the hhvm logrotate's config the duty of creating the hhvm error log file with 644 www-data:www-data permissions. In all the situations in which rsyslog needs to push a log to /var/log/hhvm/error.log and the file is not there (most common case if after reimage) then it will use its default perms, namely root:adm. This causes problems when the file needs to be removed by logrotate after 90 days, like cronspam. Bug: T146464 Change-Id: I93d4b79bd10ef4eb60eacb879ed9e4bdaa22f08e | 12 June 2017, 14:22:06 UTC |
50c1983 | andrewbogott | 07 June 2017, 01:19:55 UTC | Remove references to keystone admin_token As best I can tell we don't use this anywhere and it's a mild security threat. Bug: T165211 Change-Id: Ibf030a5c7cf3d4e9ae6d319d41dd1d7fd0f0ed78 | 12 June 2017, 13:09:22 UTC |
262ff50 | Antoine Musso | 12 June 2017, 10:30:24 UTC | contint: install HHVM from main HHVM 3.18 caused segfault for luasandbox and other tests. That has bring CI down T165074 since it got added to the 'main' component. To work around it, we had 3.12 uploaded to 'experimental' and CI instructed to pin HHVM from there. HHVM 3.18 is fine now, so lets get CI nodes to install it from 'main' and remove the temporary puppet code entirely. Bug: T167493 Bug: T165074 Change-Id: I094909dccc69d43f03b69919ee9300713c6c1ea2 | 12 June 2017, 10:30:24 UTC |
35dbd78 | Riccardo Coccioli | 10 June 2017, 11:15:17 UTC | MariaDB: temporarily increase limit for space alarm - temporarily increase the limit for the critical space alarm from 95% to 96% to overcome the current usage on parsercache hosts. - it can be converted into a more proper hiera value and set it to different values for the different MariaDB clusters. Bug: T167567 Change-Id: Ib303b2fee815f3398854737f6d2745c84b7d2f64 | 10 June 2017, 12:03:07 UTC |
fbc6d4c | andrewbogott | 07 June 2017, 19:24:43 UTC | Openstack: Added 'dnsleaks.py' script. This hunts and (optionally) kills duplicate and leaked DNS entries. The battle to actually /prevent/ the leaks continues... Change-Id: Iaaf90e5e20fb35257cdfd9b10dd6f1a953f8e152 | 07 June 2017, 19:27:56 UTC |
1d88dd2 | andrewbogott | 07 June 2017, 17:07:22 UTC | designate.conf: Raise query a few more query limits. Change-Id: I2d85218aa366bb21a50f3ad9cea6378dffaaec23 | 07 June 2017, 17:07:40 UTC |
5cfe915 | RobH | 09 June 2017, 18:07:15 UTC | remove dumpsdata100[12] from netboot for testing paritioning woes, setting to go to manual partitioning for testing Change-Id: Iac7f414d1d8e677a2f0473ad66ca1f4dbc714c8f | 09 June 2017, 18:08:32 UTC |
2827f4b | Giuseppe Lavagetto | 09 June 2017, 14:57:51 UTC | cache: add monitoring of services at the SSL termination level As detailed in the bug, it's pretty unfortunate that we didn't monitor the responses for correctness at the edge layer but just at the application layer, thus depriving us of an important monitoring tool. Bug: T167048 Change-Id: Ie76a4cc9b930bf80fd1a3cac1e50ca69fcac9aa1 | 09 June 2017, 15:10:12 UTC |
71190fa | Emanuele Rocca | 09 June 2017, 11:11:23 UTC | VCL: rate limit wikiScrape with vsthrottle Bug: T163233 Change-Id: Ib7decc6d1f9ab77be009862bfb6861bfd3be173e | 09 June 2017, 14:46:05 UTC |
4b18563 | Andrew Otto | 09 June 2017, 13:59:44 UTC | Update camus config for eventbus topics Change-Id: I12601afe5ec1d753715d28011533c0c48c30c684 | 09 June 2017, 14:10:14 UTC |
ed5077f | Faidon Liambotis | 24 January 2017, 13:18:56 UTC | raid: remove unused aac, twe, zfs We don't use Adaptec AAC RAID, 3ware RAID or Solaris/ZFS anywhere in our fleet, so remove dead code from the check_raid check, the RAID module and the apt packages from our repository. Change-Id: Ibf68879ff5063a791cab461533f1c19a613f0143 | 09 June 2017, 08:52:07 UTC |
3d9ab2d | Arzhel Younsi | 09 June 2017, 05:55:32 UTC | LibreNMS add rancid integration Bug: T164911 Change-Id: I9033e9d2f8d60eea442c8dc6a26204c7b0426f81 | 09 June 2017, 05:55:32 UTC |
ff81f4d | Arzhel Younsi | 09 June 2017, 05:38:30 UTC | Rancid: set configs world readable Bug: T167288 Change-Id: I1a9fcbfcdeef265ee1906fb7b302d116f51e97be | 09 June 2017, 05:42:34 UTC |
b636dc8 | Madhumitha Viswanathan | 08 June 2017, 23:47:34 UTC | labstore: Fix data interface require clause Change-Id: Ie67e44b9f5d4f352c609cff96fd5815a3f118d4e | 08 June 2017, 23:47:34 UTC |
e5bb2ac | Faidon Liambotis | 29 May 2017, 21:24:04 UTC | labstore: avoid the hardcoding of eth0/eth1 Instead of hardcoding eth0 and eth1 in a bunch of places, use $monitor_iface (for eth0) and $data_iface (eth1) as parameters to role::labs::nfs::secondary and pass them to included classes as needed. We could use $facts['interface_primary'] for $monitor_iface (instead of eth0), but since we have to hardcode the value for $data_iface, that would be of limited value. Change-Id: I761da8f8d2e07e596c2d81a69d48543dc88ece2a | 08 June 2017, 23:23:04 UTC |
96c5de1 | Faidon Liambotis | 07 June 2017, 13:26:33 UTC | labstore: use /sbin/tc, not $PATH/tc As this script may (but probably shouldn't!) run interactively and users may have a $PATH that has a directory in which a different tc is present. It also makes this consistent with the rest of the script that uses /sbin/ip etc. Change-Id: I4e680469b3c6cd4cdf990cbf26e1664fcd0e5cb8 | 08 June 2017, 23:23:04 UTC |
02f679e | Faidon Liambotis | 29 May 2017, 21:07:51 UTC | labstore: use the interface_primary fact, not eth0 Don't hardcode eth0 in the traffic shaping script , but use the interface_primary fact instead. Change-Id: Ie34376044316acdf85fc26e3633c80a37f1c315c | 08 June 2017, 23:20:54 UTC |
7ceadc6 | RobH | 08 June 2017, 23:09:52 UTC | updating recipe for 80% of lvm also adding in auto confirmation like other recipes have to match Change-Id: I52b6810c68a23b1b52797d2f8a19af8228eb91fd | 08 June 2017, 23:11:39 UTC |
88d9ffb | Faidon Liambotis | 29 May 2017, 21:04:18 UTC | labstore: remove TC=$(which tc) There is some point in doing TC=/sbin/tc and then using $TC (that is, to avoid using the invoking user's $PATH), but little point in doing TC=$(which tc). Remove that and refer to "tc" directly, as it's cleaner. Change-Id: Iec93b4c3f7def911da8e5160f5a9a167907f8e04 | 08 June 2017, 22:55:48 UTC |
bab94ee | RobH | 08 June 2017, 22:42:50 UTC | adding in dumpsdata00[12] install params setting dhcp and partitioning scheme system has hw raid, not sw raid Bug:T165173 Change-Id: I2312edd55fdef3fb869c4d9207e2e31d07a5fbb4 | 08 June 2017, 22:42:50 UTC |
7edc4f3 | Daniel Zahn | 26 May 2017, 23:21:35 UTC | phabricator: move hiera lookups to parameters Change-Id: If2b2e5b2c3895d55fd56859915b5be53b2338054 | 08 June 2017, 22:17:24 UTC |
a1a97c5 | Eric Evans | 08 June 2017, 19:44:36 UTC | Use Cassandra version that corresponds to what is being tested We are now testing 3.11.0 (not 3.7.3-instaclustr); This will allow us to reenable Puppet and clear the warnings. Bug: T160570 Change-Id: I2cc594d7a1a814c99c5212ee74f89ccaba2aa410 | 08 June 2017, 21:22:16 UTC |
fdc66fa | RobH | 08 June 2017, 20:01:57 UTC | setting kubestage100[12] install params dhcp lease file and partitioning update Bug:T166264 Change-Id: I63a5828a5bee7754fd9f51acb671016ef5a066f7 | 08 June 2017, 20:01:57 UTC |
8904a80 | RobH | 08 June 2017, 19:47:36 UTC | reverting this patchset, as its introduced some errors into our dhcp system and caused it to fail. This reverts commit 63e830682944f7c86209a7e40436faee562907d4. Change-Id: I17a4ce52f2c9607af0a6319a1d101e2d399d8d5f | 08 June 2017, 19:50:32 UTC |
92cebd0 | cmjohnson | 08 June 2017, 19:37:19 UTC | Fixing a typo in dhcpd file Change-Id: I4ca2f0d4a918134a763bd0b5611843a3995db75b | 08 June 2017, 19:38:49 UTC |
db48ede | RobH | 08 June 2017, 19:27:33 UTC | Revert "setting install params for kubestage100[12]" dhcp is broken, either from my chage, or the change immediately before it, this will test that out. This reverts commit 029646ab73ceff7b9836c64bef4b4e529fb8abc6. Change-Id: Ic169c99499806b41bc78fddec387c6c26a113107 | 08 June 2017, 19:28:46 UTC |
2fe2163 | andrewbogott | 07 June 2017, 10:03:57 UTC | Designate api: Increase max query limit Change-Id: I7f471c5e6b518af8bfaa05c6f998a2e778429f75 | 08 June 2017, 19:19:13 UTC |
029646a | RobH | 08 June 2017, 19:15:33 UTC | setting install params for kubestage100[12] updating for dhcpd and partitioning Bug:T166264 Change-Id: I1e5f7007a9ebdae6fd1e2e13131d49f7be85eed9 | 08 June 2017, 19:15:33 UTC |
63e8306 | cmjohnson | 08 June 2017, 17:40:03 UTC | Adding mac addresses to dhcpd file for several systems, wtp1025-1046, stat1005-1006, ganeti1005-1008, labvirt1015-1018, dumpsdata1001-1002, kubestage1001-1002, analytics1069 task #'s T165173 T165366 T166264 T165531 T165368 T165520 T162216 T166076 Change-Id: I79ca09f2b8f4557cbd3be00333481b3b7d9bd15d | 08 June 2017, 17:50:59 UTC |
6db58e2 | andrewbogott | 07 June 2017, 08:09:22 UTC | designate.conf: Replace identity_uri setting We turn out to need this. Also, make sure the hostname for keystone is the actual keystone host and not the designate host. Change-Id: Ia96cccdc5716b024505fe8aa8dc6af6e2dc2a34d | 07 June 2017, 08:16:34 UTC |
1d673ee | Aaron Schulz | 17 May 2017, 18:46:45 UTC | Set cron script to dump MediaWiki DB lag times into statsd This reverts commit c41a3b18d93194f5ca20e3e524128122e723e952. Bug: T149210 Change-Id: I09653ad3a1cb45509dfec59b2a30ee43ad9342d4 | 08 June 2017, 16:09:51 UTC |
eb78780 | Arzhel Younsi | 08 June 2017, 14:59:07 UTC | Rancid improvements - Move to GIT - Move to SSH KEY auth - Ignore noisy lines - Hide SNMP community string - Replace : with ; in router.db (v3 change) To be merged after: - Rancid upgraded to 3.x - Rancid stopped - Rancid versioning folder converted to GIT Todo after merge: - Arm ssh key - Test Bug: T167288 Change-Id: I326f6874c08252617de18a1e5235fd86a186d1c8 | 08 June 2017, 15:39:36 UTC |
8ab75f0 | Faidon Liambotis | 07 June 2017, 20:37:23 UTC | rubocop: add smokeping.fcgi to exclusion list Not a Ruby script, misdetected by newer versions of RuboCop. Not a problem in our current version but it's not harmful either. Change-Id: Ife7efc07ee24446c360c501f7832799ec2e9272c | 08 June 2017, 14:30:13 UTC |
12f3ff4 | Faidon Liambotis | 08 June 2017, 14:13:07 UTC | Revert swapsize_mb/memorysize_mb unstringification Commit I93b536a23edfbc12a13bf81c285be088fef8ae56 incorrectly removed swapsize_mb/memorysize_mb "to_i"s. Turns out this was misguided, as they are strings indeed, and this caused puppet compilation errors on Tools. Bug: T167412 Change-Id: I5ba7c3c1da66ead8585df0f7c5db6b7203e5e2ab | 08 June 2017, 14:17:47 UTC |
c8e6893 | Ori Livneh | 09 June 2014, 04:11:33 UTC | mediawiki: puppet compiler for Tim's redirects DSL This is a mostly-boring adaptation of Tim's refreshDomainRedirects to Ruby. There are some flourishes of Ruby syntax where I really couldn't help myself. When fed redirects.dat as input, the output matches Tim's script in all but comment header. compile_redirects.rb can be used as a Puppet parser function and as a standalone CLI script. For now, use it as a drop-in replacement for refreshDomainRedirects. Change-Id: Id33afbca2a1ba921654cc955d7cc4e5462a61f37 | 08 June 2017, 13:53:21 UTC |
d3dc610 | Alexandros Kosiaris | 08 June 2017, 09:12:13 UTC | puppetmaster: Set stringify_facts = false Per puppet's documentation stringify_facts = false needs to be set in puppetmasters as well as agents. Specify that in both frontends/backends Change-Id: Ie5d91db410f7aa321d7ec3f67d1924bf3ded1ba4 | 08 June 2017, 13:46:56 UTC |
37b83e8 | Faidon Liambotis | 29 May 2017, 12:11:42 UTC | Remove to_i/Integer from now unstringified facts Now that we have non-stringified facts, processorcount/physicalcorecount etc. are now guaranteed to be integers and don't need to be wrapped with Integer() or converted with to_i. Bug: T166372 Change-Id: I93b536a23edfbc12a13bf81c285be088fef8ae56 | 08 June 2017, 13:45:49 UTC |
3b1faf8 | Faidon Liambotis | 08 June 2017, 12:25:50 UTC | Update nginx submodule to include lint/rubocop fixes Change-Id: I929f1770b2b27552d721198c9f5112d198c4cb78 | 08 June 2017, 12:25:50 UTC |
210f846 | Faidon Liambotis | 08 June 2017, 12:18:35 UTC | Fix another couple instances of RuboCop warnings modules/nagios_common/spec/classes/contacts_spec.rb:4:1: C: Extra empty line detected at block body beginning. modules/nagios_common/spec/classes/contacts_spec.rb:103:1: C: Extra empty line detected at block body end. Change-Id: I3a192a4ce53e575c03a7b3b1e2ef8c3fdeafaea8 | 08 June 2017, 12:18:35 UTC |
4a6bda0 | Faidon Liambotis | 07 June 2017, 20:33:33 UTC | check_puppetrun: fix rubocop warnings Change-Id: Ief274d54ed1277946605debd00e09a79cd7a4ce6 | 08 June 2017, 09:44:07 UTC |
a056de0 | Faidon Liambotis | 07 June 2017, 19:42:17 UTC | Fix whitespace-related Rubocop warnings across the tree Fix: - Extra empty line detected at block body beginning. - Extra blank line detected. - Inconsistent indentation detected. - Operator => should be surrounded by a single space. ...across all Ruby files in the tree. Noop. Change-Id: I8bff4a836f98ce82a4f855333ce77d44287279ea | 08 June 2017, 09:43:49 UTC |
aee079f | Antoine Musso | 10 January 2017, 15:07:37 UTC | nagios_common: basic spec for contacts.cfg Partially cover the fix in 0e144abf44 Change-Id: I6e7402133fb43f06be6ae2742615a046249aa318 | 08 June 2017, 09:37:08 UTC |
81a3503 | Antoine Musso | 06 June 2017, 07:41:54 UTC | beta: profile::cassandra::allow_analytics: false deployment-aqs{01,02,03} fail puppet with: Could not find data item profile::cassandra::allow_analytics in any Hiera data file The setting has been introduced in 6da30838ab. It is solely in the hiera 'role' hierarchy, however it is not looked up on deployment-prep. Change-Id: Ia134b06da6200e4a25da4e8fe5676bdf9f3550b0 | 08 June 2017, 09:15:34 UTC |
14eda87 | elukey | 08 June 2017, 08:57:17 UTC | Bump Debian Jessie zookeeper version to 3.4.5+dfsg-2+deb8u2 This workaround is needed to upgrade zookeper but it is likely to be changed in the near future for a more maintainable solution that doesn't require to state a specific version in puppet. Change-Id: I1cf8ea083d4df0baaf5895bf90840a442679c2da | 08 June 2017, 09:02:09 UTC |
47f6382 | Emanuele Rocca | 08 June 2017, 08:43:34 UTC | check_ipmi_temp: do not require /etc/modules-load.d/ File['/etc/modules-load.d/'] is only defined on Trusty given that on Jessie the directory is provided by systemd and doesn't need to be created via Puppet. Get rid of the dependency on File['/etc/modules-load.d/'] to avoid puppetfails. Change-Id: Ife6b3dab20a772c421281b7f9ea1450a1de84826 | 08 June 2017, 08:43:34 UTC |
0c3fb24 | Emanuele Rocca | 07 June 2017, 14:15:35 UTC | check_ipmi_temp: load ipmi_devintf If /dev/ipmi0 is not available, multiple IPMI software can communicate inband to the BMC simultaneously, subsequently racing with each other. Ultimately, this can lead to communication problems. In FreeIPMI, this is most commonly seen through "internal IPMI error" or "driver busy" messages. Ensure that the ipmi_devintf kernel module is loaded and /dev/ipmi0 created. Bug: T125205 Bug: T167121 Ref: http://www.gnu.org/software/freeipmi/freeipmi-faq.html#Why-am-I-seeing-so-many-_0027internal-IPMI-error_0027-or-_0027driver-busy_0027-messages_003f Change-Id: I41b2c0a71b27cadf37c79bf2fda893d33d75f1cd | 08 June 2017, 08:31:31 UTC |
e8f3c09 | elukey | 08 June 2017, 07:36:56 UTC | Remove webrequest_maps topic from Camus configuration The cache maps cluster has been deprecated and Camus configuration needs to be updated accordingly. Camus is the tool that Analytics uses to pull data from Kafka and store it to HDFS for later refinement/processing. Change-Id: I9384578e96625385467d112ab255331b8a538257 | 08 June 2017, 07:38:26 UTC |
10c84a5 | Brandon Black | 07 June 2017, 22:31:56 UTC | site.pp: commentary for ex-cache_maps hosts Bug: T164608 Change-Id: I8327956056f4ad78ca5dc5e55dbb425e37119fa0 | 07 June 2017, 22:31:58 UTC |
bd2b0c1 | Brandon Black | 07 June 2017, 21:39:21 UTC | cache_maps: remove other misc refs Bug: T164608 Change-Id: I4f70fcaaf0e59af750cc35eb0e210749c03c0be2 | 07 June 2017, 21:39:57 UTC |
6404e32 | Brandon Black | 07 June 2017, 21:28:19 UTC | cache_maps: remove ipsec defs on kafka nodes Bug: T164608 Change-Id: Ic03feb53326be861f4938520bfecd89f50ce8767 | 07 June 2017, 21:28:19 UTC |
a4ed78d | Brandon Black | 07 June 2017, 15:45:58 UTC | lvs_service_ips: remove old maps IPs Bug: T164608 Change-Id: I9ac743cbb74975c82a2e109b9dcd01613ec4a796 | 07 June 2017, 21:18:23 UTC |
a17b8db | Brandon Black | 09 May 2017, 14:16:53 UTC | maps->upload: delete maps-specific things If previous commit is a success, we can then merge this to clean up the old cache_maps cluster from puppet and turn the cache_maps machines into spares (for now). Bug: T164608 Change-Id: Ic6f1863540b9e14a62b0199767560a3b92c41f78 | 07 June 2017, 21:03:53 UTC |
3cd2bc8 | Daniel Zahn | 07 June 2017, 17:49:58 UTC | admins: add Goran Milovanovic to analytics-privatedata-users Add existing user goransm to the analytics-privatedata-users group. Reasoning as per ticket: to be able run HiveQL against wmf.webrequests and similar (e.g. pageviews) from the stat100* machines." NDA with Legal has been confirmed. Bug: T167116 Change-Id: Id8de19ca091b31337d4be4c801ba59a971f146e4 | 07 June 2017, 20:27:24 UTC |
fc89526 | andrewbogott | 07 June 2017, 02:06:20 UTC | Keystone paste: typo fix Change-Id: I808f7134fe32a9bf96fe9f2af77b68d0d81735f2 | 07 June 2017, 02:06:33 UTC |
bb3004b | andrewbogott | 07 June 2017, 01:54:38 UTC | Keystone: add keystone-paste.ini upstream files. A subsequent patch is going to change these; this patch is just to get the standard upstream files in place so the change is obvious. Bug: T165211 Change-Id: I4cb78e7880c2c85d3d2097d193882482ad989bc5 | 07 June 2017, 02:00:22 UTC |
0eba682 | andrewbogott | 07 June 2017, 01:25:08 UTC | Designate: further cleanup of keystone_authtoken config Since I just standardized/updated this for glance, might as well keep designate on the same page. Bug: T165211 Change-Id: Ia17fae0492aab61b3dbcdbafd376e25c8aa39ce9 | 07 June 2017, 20:00:17 UTC |
e791fe5 | Faidon Liambotis | 07 June 2017, 13:51:07 UTC | Switch stretch to predictable network interface names Switch new stretch installs to predictable network interface names that were previously explicitly disabled over stretch's default. This is accomplished by removing net.ifnames=0 from stretch's d-i. This does not touch jessie or trusty systems, at least for now. For jessie systems we could easily enable it by passing net.ifnames=1 to explicitly enable them on them, as systemd supported it even on jessie's version (215), but it may be too confusing for now. This reverts commits: - bb7ac548c6581aa4dcb7afc663d86bf2dadfdacf - 2913b7cea8180fccee3b2ed0b098ba7d8294ada5 Bug: T158429 Change-Id: I07593cde127237f5090180386922c7e290fc0968 | 07 June 2017, 18:49:54 UTC |
91b1089 | andrewbogott | 07 June 2017, 00:59:00 UTC | Glance config: replace <%= @keystoneconfig["ldap_user_dn"] %> with 'novaadmin' We don't want the full ldap name here, and apparently there's no tradition (as yet) of storing 'novaadmin' in hiera. Change-Id: I16d2cb0f8ff06b05c8516d69f63d4184b865d5ce | 07 June 2017, 00:59:53 UTC |
92ab982 | Bryan Davis | 24 May 2017, 18:02:38 UTC | WMCS: add access for bryan davis - wmcs-roots to labstore* - wmcs-admin (new) to labsdb* replicas Bug: T166310 Change-Id: I59c44ea0abdd9ad02ad65cb9080410c6f759ff3b | 07 June 2017, 18:05:50 UTC |
4f08cce | andrewbogott | 07 June 2017, 00:36:02 UTC | Glance: Update our keystone_authtoken section There was a lot of cruft here from previous implementations; also we were using the authtoken when we should use login/password instead. Some day we may want to have a service project and a glance_admin user but for now this patch continues the tradition of just using novaadmin every damn place. Bug: T165211 Change-Id: I652d1e65d1196a10301f0b4384936b20faf33df2 | 07 June 2017, 00:48:21 UTC |
1e6524f | andrewbogott | 07 June 2017, 00:44:08 UTC | Glance: Remove a glance config file I'm tired of maintaining this and it's a duplicate of the liberty version anyway. Change-Id: I5f117a41996cb4cdc3657a60543c4b8cf8be0948 | 07 June 2017, 00:45:06 UTC |
4f9145b | elukey | 07 June 2017, 17:38:03 UTC | Fix cassandra's jmx_prometheus_javaagent config path for deployment-prep Bug: T167222 Change-Id: I280dc541aa8bce3810ad7098101435c92286aa21 | 07 June 2017, 17:39:54 UTC |
019ef36 | Alexandros Kosiaris | 07 June 2017, 14:28:50 UTC | puppet-compiler: Do the rsync using sudo We don't need to create the temporary catalogs directory using sudo, but we do want to use it for the rsync process otherwise it fails Change-Id: I929808106a048c5cae3d363c745a310a010ae15d | 07 June 2017, 17:19:58 UTC |
b58f12d | elukey | 07 June 2017, 16:44:17 UTC | Fix cassandra's jmx_prometheus_javaagent jar path for deployment-prep Bug: T167222 Change-Id: I31a7d04c74c5599e3f25866a6e0073067d567f66 | 07 June 2017, 16:44:17 UTC |
e2865b5 | Faidon Liambotis | 07 June 2017, 15:01:24 UTC | labs_bootstrapvz: don't install HW RAID tools These aren't needed in VMs, as they don't have any hardware RAID. These packages used to be installed by Puppet but they're not anymore and for over a year now. Change-Id: Icfb4d134c38b94af9ce65aade7814a284e567247 | 07 June 2017, 15:09:07 UTC |
650a064 | Faidon Liambotis | 07 June 2017, 14:13:29 UTC | labs bootstrapvz/vmbuilder: avoid hardcoding eth0 grep domain-name against /var/lib/dhcp/dhclient.*.leases instead of dhclient.eth0.leases, in order to avoid hardcoding eth0. Since they don't have another network interface (and even less so one with dhclient running), this should be a no-op. Change-Id: If7219cdb6c9cc24fb856a2f37ad4dbd2c61e318f | 07 June 2017, 14:20:57 UTC |
39de552 | Faidon Liambotis | 07 June 2017, 13:47:48 UTC | autoinstall: avoid hardcoding eth0 Extract the primary interface by looking at the default gateway instead, and use that in the single place we were hardcoding eth0. We may soon not use ethN interfaces, and this was already broken in a handful of cases over the years where the primary one was e.g eth2. The only downside of this is that errors like plugging in the wrong NIC of a server won't become installation failures and thus may never be caught. Bug: T164444 Change-Id: If377da20cbe7a0ea35c2e2a16659847154a6a2ae | 07 June 2017, 14:07:34 UTC |