e5bb2ac | Faidon Liambotis | 29 May 2017, 21:24:04 UTC | labstore: avoid the hardcoding of eth0/eth1 Instead of hardcoding eth0 and eth1 in a bunch of places, use $monitor_iface (for eth0) and $data_iface (eth1) as parameters to role::labs::nfs::secondary and pass them to included classes as needed. We could use $facts['interface_primary'] for $monitor_iface (instead of eth0), but since we have to hardcode the value for $data_iface, that would be of limited value. Change-Id: I761da8f8d2e07e596c2d81a69d48543dc88ece2a | 08 June 2017, 23:23:04 UTC |
96c5de1 | Faidon Liambotis | 07 June 2017, 13:26:33 UTC | labstore: use /sbin/tc, not $PATH/tc As this script may (but probably shouldn't!) run interactively and users may have a $PATH that has a directory in which a different tc is present. It also makes this consistent with the rest of the script that uses /sbin/ip etc. Change-Id: I4e680469b3c6cd4cdf990cbf26e1664fcd0e5cb8 | 08 June 2017, 23:23:04 UTC |
02f679e | Faidon Liambotis | 29 May 2017, 21:07:51 UTC | labstore: use the interface_primary fact, not eth0 Don't hardcode eth0 in the traffic shaping script , but use the interface_primary fact instead. Change-Id: Ie34376044316acdf85fc26e3633c80a37f1c315c | 08 June 2017, 23:20:54 UTC |
7ceadc6 | RobH | 08 June 2017, 23:09:52 UTC | updating recipe for 80% of lvm also adding in auto confirmation like other recipes have to match Change-Id: I52b6810c68a23b1b52797d2f8a19af8228eb91fd | 08 June 2017, 23:11:39 UTC |
88d9ffb | Faidon Liambotis | 29 May 2017, 21:04:18 UTC | labstore: remove TC=$(which tc) There is some point in doing TC=/sbin/tc and then using $TC (that is, to avoid using the invoking user's $PATH), but little point in doing TC=$(which tc). Remove that and refer to "tc" directly, as it's cleaner. Change-Id: Iec93b4c3f7def911da8e5160f5a9a167907f8e04 | 08 June 2017, 22:55:48 UTC |
bab94ee | RobH | 08 June 2017, 22:42:50 UTC | adding in dumpsdata00[12] install params setting dhcp and partitioning scheme system has hw raid, not sw raid Bug:T165173 Change-Id: I2312edd55fdef3fb869c4d9207e2e31d07a5fbb4 | 08 June 2017, 22:42:50 UTC |
7edc4f3 | Daniel Zahn | 26 May 2017, 23:21:35 UTC | phabricator: move hiera lookups to parameters Change-Id: If2b2e5b2c3895d55fd56859915b5be53b2338054 | 08 June 2017, 22:17:24 UTC |
a1a97c5 | Eric Evans | 08 June 2017, 19:44:36 UTC | Use Cassandra version that corresponds to what is being tested We are now testing 3.11.0 (not 3.7.3-instaclustr); This will allow us to reenable Puppet and clear the warnings. Bug: T160570 Change-Id: I2cc594d7a1a814c99c5212ee74f89ccaba2aa410 | 08 June 2017, 21:22:16 UTC |
fdc66fa | RobH | 08 June 2017, 20:01:57 UTC | setting kubestage100[12] install params dhcp lease file and partitioning update Bug:T166264 Change-Id: I63a5828a5bee7754fd9f51acb671016ef5a066f7 | 08 June 2017, 20:01:57 UTC |
8904a80 | RobH | 08 June 2017, 19:47:36 UTC | reverting this patchset, as its introduced some errors into our dhcp system and caused it to fail. This reverts commit 63e830682944f7c86209a7e40436faee562907d4. Change-Id: I17a4ce52f2c9607af0a6319a1d101e2d399d8d5f | 08 June 2017, 19:50:32 UTC |
92cebd0 | cmjohnson | 08 June 2017, 19:37:19 UTC | Fixing a typo in dhcpd file Change-Id: I4ca2f0d4a918134a763bd0b5611843a3995db75b | 08 June 2017, 19:38:49 UTC |
db48ede | RobH | 08 June 2017, 19:27:33 UTC | Revert "setting install params for kubestage100[12]" dhcp is broken, either from my chage, or the change immediately before it, this will test that out. This reverts commit 029646ab73ceff7b9836c64bef4b4e529fb8abc6. Change-Id: Ic169c99499806b41bc78fddec387c6c26a113107 | 08 June 2017, 19:28:46 UTC |
2fe2163 | andrewbogott | 07 June 2017, 10:03:57 UTC | Designate api: Increase max query limit Change-Id: I7f471c5e6b518af8bfaa05c6f998a2e778429f75 | 08 June 2017, 19:19:13 UTC |
029646a | RobH | 08 June 2017, 19:15:33 UTC | setting install params for kubestage100[12] updating for dhcpd and partitioning Bug:T166264 Change-Id: I1e5f7007a9ebdae6fd1e2e13131d49f7be85eed9 | 08 June 2017, 19:15:33 UTC |
63e8306 | cmjohnson | 08 June 2017, 17:40:03 UTC | Adding mac addresses to dhcpd file for several systems, wtp1025-1046, stat1005-1006, ganeti1005-1008, labvirt1015-1018, dumpsdata1001-1002, kubestage1001-1002, analytics1069 task #'s T165173 T165366 T166264 T165531 T165368 T165520 T162216 T166076 Change-Id: I79ca09f2b8f4557cbd3be00333481b3b7d9bd15d | 08 June 2017, 17:50:59 UTC |
6db58e2 | andrewbogott | 07 June 2017, 08:09:22 UTC | designate.conf: Replace identity_uri setting We turn out to need this. Also, make sure the hostname for keystone is the actual keystone host and not the designate host. Change-Id: Ia96cccdc5716b024505fe8aa8dc6af6e2dc2a34d | 07 June 2017, 08:16:34 UTC |
1d673ee | Aaron Schulz | 17 May 2017, 18:46:45 UTC | Set cron script to dump MediaWiki DB lag times into statsd This reverts commit c41a3b18d93194f5ca20e3e524128122e723e952. Bug: T149210 Change-Id: I09653ad3a1cb45509dfec59b2a30ee43ad9342d4 | 08 June 2017, 16:09:51 UTC |
eb78780 | Arzhel Younsi | 08 June 2017, 14:59:07 UTC | Rancid improvements - Move to GIT - Move to SSH KEY auth - Ignore noisy lines - Hide SNMP community string - Replace : with ; in router.db (v3 change) To be merged after: - Rancid upgraded to 3.x - Rancid stopped - Rancid versioning folder converted to GIT Todo after merge: - Arm ssh key - Test Bug: T167288 Change-Id: I326f6874c08252617de18a1e5235fd86a186d1c8 | 08 June 2017, 15:39:36 UTC |
8ab75f0 | Faidon Liambotis | 07 June 2017, 20:37:23 UTC | rubocop: add smokeping.fcgi to exclusion list Not a Ruby script, misdetected by newer versions of RuboCop. Not a problem in our current version but it's not harmful either. Change-Id: Ife7efc07ee24446c360c501f7832799ec2e9272c | 08 June 2017, 14:30:13 UTC |
12f3ff4 | Faidon Liambotis | 08 June 2017, 14:13:07 UTC | Revert swapsize_mb/memorysize_mb unstringification Commit I93b536a23edfbc12a13bf81c285be088fef8ae56 incorrectly removed swapsize_mb/memorysize_mb "to_i"s. Turns out this was misguided, as they are strings indeed, and this caused puppet compilation errors on Tools. Bug: T167412 Change-Id: I5ba7c3c1da66ead8585df0f7c5db6b7203e5e2ab | 08 June 2017, 14:17:47 UTC |
c8e6893 | Ori Livneh | 09 June 2014, 04:11:33 UTC | mediawiki: puppet compiler for Tim's redirects DSL This is a mostly-boring adaptation of Tim's refreshDomainRedirects to Ruby. There are some flourishes of Ruby syntax where I really couldn't help myself. When fed redirects.dat as input, the output matches Tim's script in all but comment header. compile_redirects.rb can be used as a Puppet parser function and as a standalone CLI script. For now, use it as a drop-in replacement for refreshDomainRedirects. Change-Id: Id33afbca2a1ba921654cc955d7cc4e5462a61f37 | 08 June 2017, 13:53:21 UTC |
d3dc610 | Alexandros Kosiaris | 08 June 2017, 09:12:13 UTC | puppetmaster: Set stringify_facts = false Per puppet's documentation stringify_facts = false needs to be set in puppetmasters as well as agents. Specify that in both frontends/backends Change-Id: Ie5d91db410f7aa321d7ec3f67d1924bf3ded1ba4 | 08 June 2017, 13:46:56 UTC |
37b83e8 | Faidon Liambotis | 29 May 2017, 12:11:42 UTC | Remove to_i/Integer from now unstringified facts Now that we have non-stringified facts, processorcount/physicalcorecount etc. are now guaranteed to be integers and don't need to be wrapped with Integer() or converted with to_i. Bug: T166372 Change-Id: I93b536a23edfbc12a13bf81c285be088fef8ae56 | 08 June 2017, 13:45:49 UTC |
3b1faf8 | Faidon Liambotis | 08 June 2017, 12:25:50 UTC | Update nginx submodule to include lint/rubocop fixes Change-Id: I929f1770b2b27552d721198c9f5112d198c4cb78 | 08 June 2017, 12:25:50 UTC |
210f846 | Faidon Liambotis | 08 June 2017, 12:18:35 UTC | Fix another couple instances of RuboCop warnings modules/nagios_common/spec/classes/contacts_spec.rb:4:1: C: Extra empty line detected at block body beginning. modules/nagios_common/spec/classes/contacts_spec.rb:103:1: C: Extra empty line detected at block body end. Change-Id: I3a192a4ce53e575c03a7b3b1e2ef8c3fdeafaea8 | 08 June 2017, 12:18:35 UTC |
4a6bda0 | Faidon Liambotis | 07 June 2017, 20:33:33 UTC | check_puppetrun: fix rubocop warnings Change-Id: Ief274d54ed1277946605debd00e09a79cd7a4ce6 | 08 June 2017, 09:44:07 UTC |
a056de0 | Faidon Liambotis | 07 June 2017, 19:42:17 UTC | Fix whitespace-related Rubocop warnings across the tree Fix: - Extra empty line detected at block body beginning. - Extra blank line detected. - Inconsistent indentation detected. - Operator => should be surrounded by a single space. ...across all Ruby files in the tree. Noop. Change-Id: I8bff4a836f98ce82a4f855333ce77d44287279ea | 08 June 2017, 09:43:49 UTC |
aee079f | Antoine Musso | 10 January 2017, 15:07:37 UTC | nagios_common: basic spec for contacts.cfg Partially cover the fix in 0e144abf44 Change-Id: I6e7402133fb43f06be6ae2742615a046249aa318 | 08 June 2017, 09:37:08 UTC |
81a3503 | Antoine Musso | 06 June 2017, 07:41:54 UTC | beta: profile::cassandra::allow_analytics: false deployment-aqs{01,02,03} fail puppet with: Could not find data item profile::cassandra::allow_analytics in any Hiera data file The setting has been introduced in 6da30838ab. It is solely in the hiera 'role' hierarchy, however it is not looked up on deployment-prep. Change-Id: Ia134b06da6200e4a25da4e8fe5676bdf9f3550b0 | 08 June 2017, 09:15:34 UTC |
14eda87 | elukey | 08 June 2017, 08:57:17 UTC | Bump Debian Jessie zookeeper version to 3.4.5+dfsg-2+deb8u2 This workaround is needed to upgrade zookeper but it is likely to be changed in the near future for a more maintainable solution that doesn't require to state a specific version in puppet. Change-Id: I1cf8ea083d4df0baaf5895bf90840a442679c2da | 08 June 2017, 09:02:09 UTC |
47f6382 | Emanuele Rocca | 08 June 2017, 08:43:34 UTC | check_ipmi_temp: do not require /etc/modules-load.d/ File['/etc/modules-load.d/'] is only defined on Trusty given that on Jessie the directory is provided by systemd and doesn't need to be created via Puppet. Get rid of the dependency on File['/etc/modules-load.d/'] to avoid puppetfails. Change-Id: Ife6b3dab20a772c421281b7f9ea1450a1de84826 | 08 June 2017, 08:43:34 UTC |
0c3fb24 | Emanuele Rocca | 07 June 2017, 14:15:35 UTC | check_ipmi_temp: load ipmi_devintf If /dev/ipmi0 is not available, multiple IPMI software can communicate inband to the BMC simultaneously, subsequently racing with each other. Ultimately, this can lead to communication problems. In FreeIPMI, this is most commonly seen through "internal IPMI error" or "driver busy" messages. Ensure that the ipmi_devintf kernel module is loaded and /dev/ipmi0 created. Bug: T125205 Bug: T167121 Ref: http://www.gnu.org/software/freeipmi/freeipmi-faq.html#Why-am-I-seeing-so-many-_0027internal-IPMI-error_0027-or-_0027driver-busy_0027-messages_003f Change-Id: I41b2c0a71b27cadf37c79bf2fda893d33d75f1cd | 08 June 2017, 08:31:31 UTC |
e8f3c09 | elukey | 08 June 2017, 07:36:56 UTC | Remove webrequest_maps topic from Camus configuration The cache maps cluster has been deprecated and Camus configuration needs to be updated accordingly. Camus is the tool that Analytics uses to pull data from Kafka and store it to HDFS for later refinement/processing. Change-Id: I9384578e96625385467d112ab255331b8a538257 | 08 June 2017, 07:38:26 UTC |
10c84a5 | Brandon Black | 07 June 2017, 22:31:56 UTC | site.pp: commentary for ex-cache_maps hosts Bug: T164608 Change-Id: I8327956056f4ad78ca5dc5e55dbb425e37119fa0 | 07 June 2017, 22:31:58 UTC |
bd2b0c1 | Brandon Black | 07 June 2017, 21:39:21 UTC | cache_maps: remove other misc refs Bug: T164608 Change-Id: I4f70fcaaf0e59af750cc35eb0e210749c03c0be2 | 07 June 2017, 21:39:57 UTC |
6404e32 | Brandon Black | 07 June 2017, 21:28:19 UTC | cache_maps: remove ipsec defs on kafka nodes Bug: T164608 Change-Id: Ic03feb53326be861f4938520bfecd89f50ce8767 | 07 June 2017, 21:28:19 UTC |
a4ed78d | Brandon Black | 07 June 2017, 15:45:58 UTC | lvs_service_ips: remove old maps IPs Bug: T164608 Change-Id: I9ac743cbb74975c82a2e109b9dcd01613ec4a796 | 07 June 2017, 21:18:23 UTC |
a17b8db | Brandon Black | 09 May 2017, 14:16:53 UTC | maps->upload: delete maps-specific things If previous commit is a success, we can then merge this to clean up the old cache_maps cluster from puppet and turn the cache_maps machines into spares (for now). Bug: T164608 Change-Id: Ic6f1863540b9e14a62b0199767560a3b92c41f78 | 07 June 2017, 21:03:53 UTC |
3cd2bc8 | Daniel Zahn | 07 June 2017, 17:49:58 UTC | admins: add Goran Milovanovic to analytics-privatedata-users Add existing user goransm to the analytics-privatedata-users group. Reasoning as per ticket: to be able run HiveQL against wmf.webrequests and similar (e.g. pageviews) from the stat100* machines." NDA with Legal has been confirmed. Bug: T167116 Change-Id: Id8de19ca091b31337d4be4c801ba59a971f146e4 | 07 June 2017, 20:27:24 UTC |
fc89526 | andrewbogott | 07 June 2017, 02:06:20 UTC | Keystone paste: typo fix Change-Id: I808f7134fe32a9bf96fe9f2af77b68d0d81735f2 | 07 June 2017, 02:06:33 UTC |
bb3004b | andrewbogott | 07 June 2017, 01:54:38 UTC | Keystone: add keystone-paste.ini upstream files. A subsequent patch is going to change these; this patch is just to get the standard upstream files in place so the change is obvious. Bug: T165211 Change-Id: I4cb78e7880c2c85d3d2097d193882482ad989bc5 | 07 June 2017, 02:00:22 UTC |
0eba682 | andrewbogott | 07 June 2017, 01:25:08 UTC | Designate: further cleanup of keystone_authtoken config Since I just standardized/updated this for glance, might as well keep designate on the same page. Bug: T165211 Change-Id: Ia17fae0492aab61b3dbcdbafd376e25c8aa39ce9 | 07 June 2017, 20:00:17 UTC |
e791fe5 | Faidon Liambotis | 07 June 2017, 13:51:07 UTC | Switch stretch to predictable network interface names Switch new stretch installs to predictable network interface names that were previously explicitly disabled over stretch's default. This is accomplished by removing net.ifnames=0 from stretch's d-i. This does not touch jessie or trusty systems, at least for now. For jessie systems we could easily enable it by passing net.ifnames=1 to explicitly enable them on them, as systemd supported it even on jessie's version (215), but it may be too confusing for now. This reverts commits: - bb7ac548c6581aa4dcb7afc663d86bf2dadfdacf - 2913b7cea8180fccee3b2ed0b098ba7d8294ada5 Bug: T158429 Change-Id: I07593cde127237f5090180386922c7e290fc0968 | 07 June 2017, 18:49:54 UTC |
91b1089 | andrewbogott | 07 June 2017, 00:59:00 UTC | Glance config: replace <%= @keystoneconfig["ldap_user_dn"] %> with 'novaadmin' We don't want the full ldap name here, and apparently there's no tradition (as yet) of storing 'novaadmin' in hiera. Change-Id: I16d2cb0f8ff06b05c8516d69f63d4184b865d5ce | 07 June 2017, 00:59:53 UTC |
92ab982 | Bryan Davis | 24 May 2017, 18:02:38 UTC | WMCS: add access for bryan davis - wmcs-roots to labstore* - wmcs-admin (new) to labsdb* replicas Bug: T166310 Change-Id: I59c44ea0abdd9ad02ad65cb9080410c6f759ff3b | 07 June 2017, 18:05:50 UTC |
4f08cce | andrewbogott | 07 June 2017, 00:36:02 UTC | Glance: Update our keystone_authtoken section There was a lot of cruft here from previous implementations; also we were using the authtoken when we should use login/password instead. Some day we may want to have a service project and a glance_admin user but for now this patch continues the tradition of just using novaadmin every damn place. Bug: T165211 Change-Id: I652d1e65d1196a10301f0b4384936b20faf33df2 | 07 June 2017, 00:48:21 UTC |
1e6524f | andrewbogott | 07 June 2017, 00:44:08 UTC | Glance: Remove a glance config file I'm tired of maintaining this and it's a duplicate of the liberty version anyway. Change-Id: I5f117a41996cb4cdc3657a60543c4b8cf8be0948 | 07 June 2017, 00:45:06 UTC |
4f9145b | elukey | 07 June 2017, 17:38:03 UTC | Fix cassandra's jmx_prometheus_javaagent config path for deployment-prep Bug: T167222 Change-Id: I280dc541aa8bce3810ad7098101435c92286aa21 | 07 June 2017, 17:39:54 UTC |
019ef36 | Alexandros Kosiaris | 07 June 2017, 14:28:50 UTC | puppet-compiler: Do the rsync using sudo We don't need to create the temporary catalogs directory using sudo, but we do want to use it for the rsync process otherwise it fails Change-Id: I929808106a048c5cae3d363c745a310a010ae15d | 07 June 2017, 17:19:58 UTC |
b58f12d | elukey | 07 June 2017, 16:44:17 UTC | Fix cassandra's jmx_prometheus_javaagent jar path for deployment-prep Bug: T167222 Change-Id: I31a7d04c74c5599e3f25866a6e0073067d567f66 | 07 June 2017, 16:44:17 UTC |
e2865b5 | Faidon Liambotis | 07 June 2017, 15:01:24 UTC | labs_bootstrapvz: don't install HW RAID tools These aren't needed in VMs, as they don't have any hardware RAID. These packages used to be installed by Puppet but they're not anymore and for over a year now. Change-Id: Icfb4d134c38b94af9ce65aade7814a284e567247 | 07 June 2017, 15:09:07 UTC |
650a064 | Faidon Liambotis | 07 June 2017, 14:13:29 UTC | labs bootstrapvz/vmbuilder: avoid hardcoding eth0 grep domain-name against /var/lib/dhcp/dhclient.*.leases instead of dhclient.eth0.leases, in order to avoid hardcoding eth0. Since they don't have another network interface (and even less so one with dhclient running), this should be a no-op. Change-Id: If7219cdb6c9cc24fb856a2f37ad4dbd2c61e318f | 07 June 2017, 14:20:57 UTC |
39de552 | Faidon Liambotis | 07 June 2017, 13:47:48 UTC | autoinstall: avoid hardcoding eth0 Extract the primary interface by looking at the default gateway instead, and use that in the single place we were hardcoding eth0. We may soon not use ethN interfaces, and this was already broken in a handful of cases over the years where the primary one was e.g eth2. The only downside of this is that errors like plugging in the wrong NIC of a server won't become installation failures and thus may never be caught. Bug: T164444 Change-Id: If377da20cbe7a0ea35c2e2a16659847154a6a2ae | 07 June 2017, 14:07:34 UTC |
5fce2d6 | Filippo Giunchedi | 07 June 2017, 13:57:32 UTC | grafana: unhardcode eth0 from server-board Consider all network interfaces found by default. Change-Id: I87faf29937aa5f28053270d7695de8ed76372eb3 | 07 June 2017, 14:01:36 UTC |
f766d82 | andrewbogott | 06 June 2017, 20:28:16 UTC | designate.conf: Update the keystone_authtoken section This wasn't used previously, but I want to use it for a wmf_sink thing. Might as well get accurate values in here. Change-Id: Ie3c849b085ae79ce3ba4ba9917fe04912326891c | 07 June 2017, 13:48:26 UTC |
6d2205f | Alexandros Kosiaris | 07 June 2017, 13:34:39 UTC | Fix 2 issues in compiler-update-facts Fix the for loop to refer to the $factsdir correctly Don't use set -x Change-Id: Id435546dddba98cfc46474a5c9db546c4d24d011 | 07 June 2017, 13:35:32 UTC |
84f0177 | Emanuele Rocca | 07 June 2017, 07:12:34 UTC | VCL: basic support to return HTTP 429, apply it to UA:wikiScrape/0.0.0 Add basic VCL support to return HTTP 429 in cache_text VCL. Return 429 for "User-Agent: wikiScrape/0.0.0" Change-Id: I9edc318528d5557d58533546b2dcd4b77e1d96c0 | 07 June 2017, 13:21:44 UTC |
df64720 | Alexandros Kosiaris | 02 June 2017, 11:13:39 UTC | Refactor facts exporting to better cleanup facts Change the way the facts are exported on every puppetmaster by ignoring any yaml fact file older than 7 days. While at it, stop pushing the node objects as they are not really useful, it's just the facts we care for, not the node objects. Gather all the facts from all the puppetmasters in a single place and then copy them to the destination Drop the call to sudo in rsync and chown and force the entire script to run under root, since this script anyway requires root privileges to run for multiple reasons Fix some indentations issues as well Change-Id: Ie95b96345294330fa7b8fb4926e26e7088c38877 | 07 June 2017, 13:15:38 UTC |
c471d88 | Emanuele Rocca | 07 June 2017, 12:43:51 UTC | base::kernel: create /etc/modules-load.d on Trusty systems Trusty systems do not create /etc/modules-load.d/ but the kmod upstart job parses it. Ensure the directory exists on Trusty. Change-Id: I8dd4478de35c0eb222ea2459236fddfba51be5d2 | 07 June 2017, 12:59:49 UTC |
efca51c | Jaime Crespo | 07 June 2017, 12:52:09 UTC | mariadb: Remove old codfw db hosts from candidates for reimage db2041,38,37,35 have been already reimaged, prevent from being again. Change-Id: Ibb708ef328ab1a97175552f4f0c7fedc8b5d17f1 | 07 June 2017, 12:52:09 UTC |
8b6fa85 | elukey | 07 June 2017, 12:24:30 UTC | Test new zookeeper version on conf2002 The zookeeper client role needs to pick up a zookeeper_version value to avoid conflicts/overrides with the Cloudera repos. This commit is only temporary to allow proper testing on conf2002. Change-Id: Ibb0f246c08d3f95e5ad2540d8fdd37e6a2178e72 | 07 June 2017, 12:24:30 UTC |
d0adc4c | Arzhel Younsi | 07 June 2017, 11:16:17 UTC | LibreNMS: enable 2FA Bug: T164911 Change-Id: I781ffcb429119bb51da270ac43d402899f337a7a | 07 June 2017, 11:16:17 UTC |
526714c | Filippo Giunchedi | 07 June 2017, 09:59:49 UTC | install_server: s/ubuntu/debian/ for stretch ms-be2* machines Change-Id: I79fdbd449912c8b1abde78f3ca5b2c09eeb1562c | 07 June 2017, 10:01:19 UTC |
141e4e1 | Filippo Giunchedi | 07 June 2017, 09:07:21 UTC | install_server: move ms-be2* trusty hosts to stretch Bug: T162609 Change-Id: I186aa29e5f000a6e223d8da5e82aca5a465efe20 | 07 June 2017, 09:16:39 UTC |
e36dda0 | Guillaume Lederrey | 07 June 2017, 08:51:22 UTC | Upgrade kibana to v5.3.3 Bug: T167266 Change-Id: Id104c54cc3df5a1babcc15a764589f635544f740 | 07 June 2017, 09:12:42 UTC |
1920cb0 | Filippo Giunchedi | 07 June 2017, 08:56:07 UTC | swift: mask object reconstructor on >= jessie Bug: T162609 Change-Id: I596f3ce0047539d56e97cf0a8a0e4a64b4a78a85 | 07 June 2017, 08:56:07 UTC |
8841966 | elukey | 06 June 2017, 16:42:44 UTC | Delete unused role/common/analytics/hadoop configs Change-Id: I7a6f44e9bb9936fc563dd5439a93cd09f102be18 | 07 June 2017, 06:58:09 UTC |
489fe75 | Bryan Davis | 30 May 2017, 19:07:56 UTC | flake8: upgrade to 3.3.0 Upgrade to the latest stable version of flake8. This version has some new checks that have been fixed in earlier patches. It also supports multiline 'ignore' and 'exclude' statements in the tox.ini file which are now used to connect comments with exclusions. Change-Id: Ifff8ab1cedf5b0f4362f7c3efe697489bcc67aa3 | 06 June 2017, 21:46:07 UTC |
cf6042a | Federico Leva | 05 June 2017, 20:39:14 UTC | [Planet Wikimedia] Add blog.wikimedia.gr to Greek Planet Change-Id: Id8d9f6084c970e3f18f4b443ce2aec5a8fe83687 | 06 June 2017, 21:30:06 UTC |
8e6aa4d | Paladox | 02 May 2017, 20:40:56 UTC | Jenkins: Add noncanon to jenkins proxy site Per docs at https://wiki.jenkins-ci.org/display/JENKINS/Running+Jenkins+behind+Apache https://phabricator.wikimedia.org/T155840#3229233 I've used nocanon on my test jenkins instance. Change-Id: I92980d658c196dd2d24264cfe3fa449c4d6c9b62 | 06 June 2017, 21:12:17 UTC |
b3560ac | Antoine Musso | 23 May 2017, 07:53:27 UTC | contint: skip hhvm experimental pin on Trusty Apt::Pin['hhvm-from-experimental'] is only defined on Jessie, hence on Trusty that would end up failling. More realisticly, we have to remove HHVM entirely from Trusty nodes. Bug: T165462 Change-Id: Iaae6dc5a1a4d4218017169f3069a40a79807533e | 06 June 2017, 21:06:42 UTC |
cbf058b | Antoine Musso | 06 June 2017, 12:35:06 UTC | contint: remove HHVM from Trusty permanent instances HHVM is still installed on the Trusty permanent slaves. It is outdated and all jobs requiring HHVM are using Jessie nodepool instances. Stop installing HHVM on Trusty permanent slaves. Change-Id: I7886c3767ac24f21f7b588e13edd7407c9fe6580 | 06 June 2017, 20:59:54 UTC |
d16f94d | Paladox | 30 May 2017, 19:51:24 UTC | contint: Only install java 7 on trusty and jessie stretch does not have the package java 7. Bug: T166611 Change-Id: If58499a2a9ab88a614232cfbde4f35256c749407 | 06 June 2017, 20:45:28 UTC |
a1a0edd | andrewbogott | 06 June 2017, 17:54:42 UTC | diskspace.py: Add one more special-case flavor size. Change-Id: I46effb8deb895ddddb03a4ec9985ec31d2e46c91 | 06 June 2017, 17:56:04 UTC |
534c556 | Moritz Muehlenhoff | 06 June 2017, 16:42:41 UTC | Extend account expiry date for pnorman Also change contact address, now managed by Reading. Change-Id: I3d41ac51ab53d0e87e72798b344e6a0b5838401d | 06 June 2017, 16:42:41 UTC |
e9fe011 | elukey | 06 June 2017, 15:29:01 UTC | Set profile::base::check_raid_policy to 'WriteBack' for hadoop workers Bug: T166140 Change-Id: Id47f7c50eec1b7bd9de178d54d74a5bb76c9c1c7 | 06 June 2017, 16:21:58 UTC |
47bed2f | Giuseppe Lavagetto | 06 June 2017, 15:57:05 UTC | role::graphite::alerts: add transformNull to some alerts All the mediawiki session/centralauth alerts only expect data points when there's a problem, so a null datapoint is actually good news. Use transformNull(metric, 0) to account for this. Change-Id: I0e678b676ff87936c972af5603674c583a502c17 | 06 June 2017, 16:00:30 UTC |
9364ad8 | Guillaume Lederrey | 06 June 2017, 11:46:59 UTC | elasticsearch - raise logging of actions to INFO There is no reason to have a logger in DEBUG in production (unless we are actively trying to debug a problem). Bug: T167091 Change-Id: Ic704ab09066841c326a222e604b48fcf08b65f67 | 06 June 2017, 15:51:42 UTC |
94388ef | Francisco Dans | 01 June 2017, 16:33:23 UTC | Add exception for events tagged as coming from MW Will let events tagged as `is_mediawiki` go through to mysql Bug: T67508 Change-Id: I11778eac51e60fcca5ab39ebe5af0e9be14a524e | 06 June 2017, 15:32:10 UTC |
0a606b0 | Filippo Giunchedi | 06 June 2017, 14:44:00 UTC | swift: create swift user home In production the swift user already exists post-provisioning because of T123918, also create/chown its home Bug: T162609 Change-Id: I8eb1344db2e32386741d71a4f3cf0f38fbbeaebc | 06 June 2017, 15:00:00 UTC |
593b6ea | andrewbogott | 06 June 2017, 14:16:13 UTC | diskspace.py: Catch stray instances that nova and filesystem disagree about Change-Id: I2a49a3617b15751c351cb34117d68f4cc8e6e42a | 06 June 2017, 14:33:37 UTC |
b0bddc2 | Filippo Giunchedi | 06 June 2017, 12:56:49 UTC | hieradata: fix missing yaml extension Change-Id: I6d3c0200c232536a902716e894686e770ee35ca7 | 06 June 2017, 13:51:22 UTC |
f928aa5 | andrewbogott | 02 June 2017, 19:25:55 UTC | novastats: Add 'diskspace.py' script This script checks du and df on all labvirt hosts, and then calculates our maximum space commitment by querying nova. Bug: T163796 Change-Id: Iabac89f5cda3d344ac351f51bef8e9acb84d9c4f | 06 June 2017, 13:49:24 UTC |
440ce5b | Filippo Giunchedi | 06 June 2017, 12:56:49 UTC | install_server: ms-be2013 / 16 / 17 to stretch Hosts in row A Bug: T162609 Change-Id: Id488037c2616016dc3861dc47a06aac3375a8d08 | 06 June 2017, 13:28:26 UTC |
c2d1641 | Tyler Cipriani | 05 June 2017, 19:22:48 UTC | Scap: Bump version to 3.5.8-1 Bug: T127762 Change-Id: I1ea0bc432909167c65a2a04dd87b7bc71a51829b | 06 June 2017, 12:43:58 UTC |
6dfa495 | elukey | 06 June 2017, 12:27:12 UTC | Disable role::analytics_cluster::refinery::job::guard The script is currently not working properly and generating periodical spam. Bug: T166937 Change-Id: Ib795eeba0b69d61bdbb3560087652b19fa6b3fd4 | 06 June 2017, 12:28:13 UTC |
75a7bf8 | Alexandros Kosiaris | 06 June 2017, 11:11:03 UTC | servermon: Deploy with scap3 Deploy servermon using scap3 reusing librenms' scap3 configuration Bug: T129152 Change-Id: Id7f46ac5ee9793283add0245a541c6e8dccefbb5 | 06 June 2017, 11:25:52 UTC |
c2ab014 | Giuseppe Lavagetto | 06 June 2017, 11:07:15 UTC | role::mediawiki::scaler: use more sensible intervals for checks In order to reduce the number of false positives, it is more advisable to perform more checks before alarming than having a huge retry interval. So do the following: - raise the check interval to 5 minutes; we really don't need more granularity than that on this alarm - set the retry interval to 5 minutes too. - set the check to go on 10 times before we actually raise an alert in hard state This should help reduce the number of false positives and avoid us head-scratching moments where we check a machine that has recovered since 20 minutes. Change-Id: Ib5b86e0b5a8ebadbb2f9fac7b87a2289af981524 | 06 June 2017, 11:07:15 UTC |
603a5b6 | Emanuele Rocca | 06 June 2017, 10:27:44 UTC | check_ipmi_temp: turn off sel checking Call check_ipmi_sensor with --nosel to turn off system event log checking. We do not want to get criticals on old events. Bug: T125205 Change-Id: Ia97fa0bf112a1d64e56ed7778108007500f4683f | 06 June 2017, 10:27:45 UTC |
0c95f53 | Tyler Cipriani | 18 May 2017, 08:32:05 UTC | Scap3: deploy jobrunner with scap3 Bug: T129148 Change-Id: I9b60db40222172da63f4e29cc64bbbf49567a960 | 06 June 2017, 09:03:33 UTC |
c795a00 | Alexandros Kosiaris | 08 March 2017, 13:46:17 UTC | network: Add kubernetes pod/service IPs We will probably want various services to be accessed by kubernetes pods. Hence add the IP ranges in network::subnets data for eqiad, codfw production as well as the staging cluster. Also add the kubernetes service IPs. These are actually mostly informational as no traffic having a destination or source kubernetes service IP is ever expected to be on the physical wire, but it's probably useful to have those there as well. Change-Id: I4b6c1b2f5f06f10a1adac76221c5790061e438ef | 06 June 2017, 08:22:57 UTC |
8f16c4b | Nuria Ruiz | 05 June 2017, 21:23:27 UTC | Correct pageview_hourly loading scheme on pivot home Bug:T167068 Change-Id: I4fd6f60344c27bda086f937b85d793036e300e62 | 06 June 2017, 08:14:49 UTC |
d0ea43b | Faidon Liambotis | 17 May 2017, 11:16:09 UTC | Do not confine LLDP fact to physical/non-VMs It's actually useful to establish the VM->host relationship and there is no reason why it should be confined anyway. However, only set the (automatic) monitoring parent for the physical hosts (resulting in no changed behavior for those). The rationale behind this is that we want to alert for each individual VM when the Ganeti hosts running them die, as: a) just a host DOWN alert for the VM node is too inconspicuous, b) it's usually the case that VMs can be relocated to other nodes. Change-Id: I8203558efc05e5fb88bff619f3b893d16de6db62 | 06 June 2017, 08:04:07 UTC |
f8c7814 | Timo Tijhof | 25 May 2017, 20:13:09 UTC | dynamicproxy: Centralise error page template and use it This was originally based on the Varnish errorpage, but I'm starting with dynamicproxy first because it's a simple case where the file is just on disk. Later patches will re-use some of this inside the VCL use cases. This change also affects toollabs proxy, since it uses dynamicproxy. Defining 'mediawiki::errorpage' to abstract default parameters and simplify usage in multiple places. Bug: T113114 Change-Id: Id8576df7ca03823256ce824f31dd99e3466ae226 | 05 June 2017, 21:18:30 UTC |
4ad1c8d | Andrew Bogott | 05 June 2017, 20:39:55 UTC | Revert "dynamicproxy: Centralise error page template and use it" This reverts commit f3a1e04bb5a1cebf80ac93676afcde84c8cfb2df. Change-Id: I7a1e92fe019d22f38b50f4a56a39db1ee42ff19a | 05 June 2017, 20:43:52 UTC |
6640d21 | Andrew Bogott | 05 June 2017, 20:39:40 UTC | Revert "dynamic proxy errorpage: s/title/pagetitle/" This reverts commit 581fbf6981d537c31935e8da6c336bff385a4433. Change-Id: I95a3dcdc2f875784a53436d0e71013c3b331ab94 | 05 June 2017, 20:39:40 UTC |
581fbf6 | andrewbogott | 05 June 2017, 20:26:23 UTC | dynamic proxy errorpage: s/title/pagetitle/ Change-Id: I9540d64503e9723d54227b7447bb2a22fba84689 | 05 June 2017, 20:29:53 UTC |
f3a1e04 | Timo Tijhof | 25 May 2017, 20:13:09 UTC | dynamicproxy: Centralise error page template and use it This was originally based on the Varnish errorpage, but I'm starting with dynamicproxy first because it's a simple case where the file is just on disk. Later patches will re-use some of this inside the VCL use cases. This change also affects toollabs proxy, since it uses dynamicproxy. Defining 'mediawiki::errorpage' to abstract default parameters and simplify usage in multiple places. Bug: T113114 Change-Id: I764d00c7b40ad0931590f04ed2f76ecbd84b33ba | 05 June 2017, 20:01:12 UTC |
2246a55 | Bryan Davis | 30 May 2017, 19:03:15 UTC | flake8 fixes for E305 Fix "E305 expected 2 blank lines after class or function definition" warnings in preparation for flake8 upgrade in tox tests. Change-Id: I75425fc791f8745e02f5663aa0c73a6f057ecf2e | 05 June 2017, 19:48:29 UTC |
50cdac9 | Daniel Zahn | 03 June 2017, 00:21:09 UTC | planet: remove "ja" and "ca" (empty), add link to new "el" Change-Id: Idda7f0213e0778ecbbc7af494a698b34c13d2d98 | 05 June 2017, 19:10:28 UTC |