Cloud VPS Project Tested: N/A
Site/Location:EQIAD
Number of systems: 1 VM
Service: Analytics test cluster
Networking Requirements: internal IP, Analytics VLAN
Processor Requirements: 2 VCPUS
Memory: 4GB
Disks: 150GB
Other Requirements: N/A
This is to replace an-tool1006, which is running Stretch, and we'd like to upgrade to Buster.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Add an-test-client1001 mac address | operations/puppet | production | +10 -0 | |
| Add an-test-client1001.eqiad.wmnet | operations/dns | master | +5 -0 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | None | T244211 Analytics Hardware for Fiscal Year 2019/2020 | |||
| Resolved | Ottomata | T243521 Hadoop Hardware Orders FY2019-2020 | |||
| Resolved | elukey | T255139 Create the new Hadoop test cluster | |||
| Resolved | elukey | T266064 Site: 1 VM request for Analytics test cluster |
Change 635379 had a related patch set uploaded (by Razzi; owner: Razzi):
[operations/dns@master] Add an-test-client1001.eqiad.wmnet
Change 635379 merged by Razzi:
[operations/dns@master] Add an-test-client1001.eqiad.wmnet
Change 635624 had a related patch set uploaded (by Razzi; owner: Razzi):
[operations/puppet@production] Add an-testl-client1001 mac address
Change 635624 merged by Razzi:
[operations/puppet@production] Add an-test-client1001 mac address
@elukey Getting closer, able to ssh in to an-test-client1001.eqiad.wmnet, however puppet agent is throwing an error:
razzi@an-test-client1001:~$ sudo -i puppet agent -tv Info: Using configured environment 'production' Info: Retrieving pluginfacts Info: Retrieving plugin Info: Retrieving locales Info: Loading facts Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Function Call, secret(): invalid secret kerberos/keytabs/an-test-client1001.eqiad.wmnet/analytics/analytics.keytab (file: /etc/puppet/modules/profile/manifests/kerberos/keytabs.pp, line: 40, column: 26) on node an-test-client1001.eqiad.wmnet
@razzi yes this is expected, in the hiera config we have
# Kerberos config
profile::kerberos::keytabs::keytabs_metadata:
- role: 'analytics'
owner: 'analytics'
group: 'analytics'
filename: 'analytics.keytab'But we haven't created the keytab and uploaded it to the puppet private repo, so the agent fails. We can do it together when you are online :)