Page MenuHomePhabricator

Refactor puppet profiles to reduce hiera pollution
Closed, ResolvedPublic

Description

There are currently two places in puppet that have a lot of unnecessary configs (that could be replaced with sane defaults):

  • common.yaml - we should review common configs for the Hadoop clusters, adding good defaults to profile::hadoop::common etc..
  • The use_kerberos settings are redundant now, all clusters that we run have and will have kerberos enabled. We should remove what it is not needed and think about a solution for labs/cloud (like adding a conditional to kerberos::systemd_timer and exec for example).

Event Timeline

Change 641958 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] kerberos::exec: enable kerberos by default

https://gerrit.wikimedia.org/r/641958

fdans triaged this task as High priority.
fdans added a project: Analytics-Kanban.

Change 642446 had a related patch set uploaded (by Elukey; owner: Elukey):
[operations/puppet@production] Enable kerberos in kerberos::systemd_timer by default

https://gerrit.wikimedia.org/r/642446

Change 641958 merged by Elukey:
[operations/puppet@production] kerberos::exec: enable kerberos by default

https://gerrit.wikimedia.org/r/641958

Change 642446 merged by Elukey:
[operations/puppet@production] Enable kerberos in kerberos::systemd_timer by default

https://gerrit.wikimedia.org/r/642446

we decided that it was enough for this task moving to done!

elukey set Final Story Points to 8.