| | Status | Subtype | Assigned | Task |
|---|
| | Open | | None | T294906 Puppet Improvements 2021/2022 |
| | Open | | None | T294907 investigate puppet-lint-security-plugins |
| | Open | | None | T292965 Admin module should use systemd-sysuser for system accounts |
| | Open | | None | T291541 Hosts distribution across puppetmasters |
| | Open | | None | T291540 Puppetdb: not refreshed on config change? |
| | Open | | None | T289678 should we move $site global to a fact |
| | Open | | None | T285539 Easing pain points caused by divergence between cloudservices and production puppet usecases |
| | Open | | None | T161675 Re-think puppet management for deployment-prep |
| | Resolved | | Andrew | T243422 Horizon hiera UI: investigate data type handling |
| | Resolved | | jbond | T255787 Reconcile and/or understand differences between cloud-vps and prod hiera lookups |
| | Open | | None | T170370 Investigate use of Puppet "environments" for per-project Puppet manifests |
| | Resolved | | jbond | T248994 Add CI check to ensure defaults exist in cloud.yaml |
| | Open | | None | T226270 Reduce the effects of puppet breakage on VPS |
| | Open | | None | T227029 Prevent catalog breakage on cloud instances by decoupling core cloud puppetmaster from custom puppetmasters |
| | Resolved | | Andrew | T228443 Help people remember to merge labs/private git |
| | In Progress | | None | T289658 Audit puppet usage in cloud hosts |
| | Resolved | | dcaro | T289661 Refactor puppet:base module to reduce unneeded shared code paths |
| | In Progress | | None | T289665 Normalise hiera default values |
| | Resolved | | SLyngshede-WMF | T289666 Improve PCC support for cloud VPS environments |
| | Resolved | | jbond | T295062 Add support to run pcc on cloud and production hosts |
| | Open | | None | T289668 Add more rspec test to the puppet code |
| | Open | | None | T296327 Allow using WMCS hiera lookup order in Puppet rspec tests |
| | Open | | None | T285476 puppet-rspec has trouble testing custom facts |
| | Open | | None | T285425 Puppet does not undo manual "systemctl mask $unit" |
| | Resolved | | jbond | T284082 Add type validation to puppetmaster::standalone |
| | Open | | None | T280353 wmf-styleguide checks: unable to ignore violations inside roles |
| | Open | | None | T275387 using the include function can trigger false positives with puppet-lint-wmf_styleguide |
| | Open | | jbond | T265138 Work required to prepare for puppet 6 |
| | Open | | jbond | T195981 the package resource should mark packages as manually installed |
| | Open | | None | T236373 puppet master command will be removed in puppet 6 |
| | Declined | | None | T236481 Investigate using the rich_data option to support Binary and binary_file for binary data |
| | Resolved | | jbond | T265139 Update puppet infrastructure latest 5.5 version |
| | Open | | None | T265143 in puppet 6 some core types have been moved to external modules. check and confirm our exposure |
| | Resolved | | Dzahn | T209953 Use lookup() instead of hiera() in Puppet |
| | Open | | None | T273673 replace all puppet crons with systemd timers |
| | Resolved | | • Ladsgroup | T288175 Migrate wikibase-dispatch-changes crons to systemd timers |
| | Resolved | | Zabe | T288806 Move swift crons to systemd timers |
| | Resolved | | None | T210818 Move admin cron jobs to systemd timers |
| | Open | | None | T132324 Tracking and Reducing cron-spam to root@ |
| | Resolved | | elukey | T132322 kafkatee cronspam from oxygen |
| | Resolved | | elukey | T129344 varnishkafka logrotate cronspam |
| | Resolved | | faidon | T84050 Refactor RAID checks (check-raid) |
| | Open | | None | T83476 Icinga RAID check: monitor rebuild status |
| | Resolved | | faidon | T97998 Add RAID monitoring for HP servers |
| | Resolved | | herron | T141252 icinga hp raid check timeout on busy ms-be and db machines |
| | Resolved | | herron | T172921 Nrpe command_timeout and "Service Check Timed Out" errors |
| | Resolved | | Andrew | T122931 labtestcontrol2001 cronspam |
| | Resolved | | fgiunchedi | T78762 swift-dispersion-stats cronspam when disks are broken |
| | Declined | | None | T1249 Disable cron.standard checking for lost+found directories |
| | Open | | None | T84845 improve cron spam visibility |
| | Resolved | | jcrespo | T127638 Email spam from some MariaDB's logrotate |
| | Resolved | | None | T132346 cronspam from cpXXXX hosts related to varnishkafka non existent processes |
| | Resolved | | elukey | T132422 cronspam from labscontrol1001, labstore1001, labnet1002.eqiad.wmnet, labsdb1003.eqiad.wmnet |
| | Resolved | | None | T132423 daily cronspam from elastic100* hosts |
| | Resolved | | Dzahn | T132661 ytterbium, neon and strontium daily cronspam |
| | Resolved | | • ema | T132835 cronspam from cpXXXX hosts due to update-ocsp-all and zero_fetch |
| | Resolved | | MoritzMuehlenhoff | T132896 cronspam from argon - apache2 logrotate |
| | Resolved | PRODUCTION ERROR | Catrope | T137771 "Echo isn't enabled on this wiki" from Cron <www-data@terbium> /usr/local/bin/foreachwiki extensions/Echo/maintenance/processEchoEmailBatch.php >/dev/null |
| | Resolved | | None | T139943 netmon1001 daily logrotate cronspam |
| | Resolved | | elukey | T144797 graphite-web cronspam |
| | Duplicate | | None | T145360 Cronspam from terbium |
| | Resolved | | None | T145606 Remove cronspam from stat1002 to root@ |
| | Resolved | | None | T146464 hhvm root:adm owned log files cause failures for logrotate |
| | Resolved | | Dzahn | T147776 cronspam from cobalt after the Gerrit migration |
| | Resolved | | faidon | T149574 cronspam from labstores, labcontrol, labstestservices |
| | Duplicate | | None | T149681 Cron spam caused by ieee-data cron job |
| | Resolved | | fgiunchedi | T151149 Prometheus cronspam |
| | Declined | | None | T151304 tmpreaper possible race condition |
| | Declined | | None | T151314 logrotate failing with $FILE.1.gz: File exists |
| | Declined | | None | T151317 stat user crontab on stat hosts for old file removal |
| | Resolved | | None | T151746 fstrim: Operation not supported on Labs DBs |
| | Resolved | | elukey | T151748 Cron conflict for kafkatee logrotate on oxygen |
| | Open | | None | T153940 Logrotate fails for: "$FILE No such file or directory" |
| | Resolved | | None | T156151 Cronspam from mwlog* |
| | Resolved | | fgiunchedi | T157353 prometheus-vhtcpd-stats cronspamming if vhtcpd is not running yet |
| | Resolved | | Joe | T156232 confctl SubjectAltNameWarning after python-urllib3 upgrade |
| | Resolved | | BBlack | T159137 certspotter: Error retrieving STH from log |
| | Resolved | | fgiunchedi | T159437 swift-account-stats: Max retries exceeded with url: /auth/v1.0 |
| | Duplicate | | None | T159438 foreachwikiindblist regular cronspam |
| | Resolved | | elukey | T159532 labtestcontrol2001: cron-spam from invoke-rc.d atop _cron |
| | Declined | | faidon | T162327 certspotter on einsteinium has issues talking to external |
| | Resolved | | MoritzMuehlenhoff | T163555 Logrotate fails on mediawiki maintenance servers on jessie |
| | Resolved | | fgiunchedi | T166937 Broken /a/refinery-source/guard/run_all_guards.sh script on stat1002 |
| | Resolved | | colewhite | T167035 stretch acct monthly cron will spam when /var/log/wtmp.1 doesn't exist |
| | Resolved | PRODUCTION ERROR | jcrespo | T167961 Terbium cronjobs attempting to connect to labstestweb2001 |
| | Resolved | | • Gilles | T169249 /usr/local/bin/xenon-generate-svgs and flamegraph.pl cronspam |
| | Resolved | | • Gilles | T187397 Verify latest version of flamegraph.pl locally and submit bug report if needed |
| | Resolved | | fgiunchedi | T170932 prometheus-puppet-agent-stats cronspam on missing puppet stats |
| | Resolved | | None | T174959 swift-recon-cron on ms-be203[34]: [Errno 17] File exists: '/var/lock/swift-recon-object-cron' |
| | Duplicate | | None | T176840 nginx xmldumps duplicate logrotate config |
| | Resolved | | • chasemp | T183144 labcontrol1002 Error: unable to connect to node rabbit@labcontrol1002: nodedown |
| | Resolved | | jijiki | T150375 cronspam cleanup: Cron <www-data@terbium> /usr/local/bin/foreachwiki maintenance/cleanupUploadStash.php > /dev/null |
| | Resolved | | Joe | T185195 tmpreaper doesn't play along with PrivateTmp systemd units |
| | Resolved | | Andrew | T192339 labtestweb2001 should either be fully productionized or removed completely from production configuration |
| | Resolved | | jcrespo | T192340 Cron <www-data@terbium> /usr/local/bin/mwscriptwikiset extensions/FlaggedRevs/maintenance/updateStats.php flaggedrevs.dblist > /dev/null creates cron spam every 2 hours |
| | | | | Restricted Task |
| | Resolved | | mmodell | T196604 Phabricator replica functionality broken, needs port configuration |
| | Resolved | | None | T197564 cronspam for slow queries in PageAssessments |
| | Declined | | aaron | T216243 cron spam for slow queries on mwmaint /usr/local/bin/foreachwiki initSiteStats.php --update > /dev/null |
| | Resolved | | Marostegui | T216273 New cronspam from db clusters |
| | Resolved | | jbond | T217646 wmf-auto-restart occasionally errors on fuse mounts |
| | Resolved | | GTirloni | T218987 puppet_alert.py - "It has been 86400 seconds since last Puppet run.Sending nag emails." |
| | Resolved | | elukey | T219111 notebook1004: can't stat() fuse.fuse_dfs file system /mnt/hdfs |
| | Resolved | | MoritzMuehlenhoff | T219274 cronspam: cross-validate-accounts |
| | Resolved | | jbond | T222443 cron-spam: /usr/local/sbin/check-cumin-aliases |
| | Resolved | | fgiunchedi | T224399 exim paniclog on $HOST has non-zero size |
| | Resolved | | Volans | T224661 cron-spam to root@: lsof stderr generates large emails on boron from wmf-auto-restart |
| | Resolved | | ArielGlenn | T224727 Cron spam from phab1001 delete of temporary files |
| | Resolved | | aaron | T228465 TorBlock maintenance failures on labweb hosts |
| | Resolved | | JMeybohm | T237197 Kubernetes hosts raid check make facter fail |
| | Resolved | | • dpifke | T243762 Daily errors on webperf1002 & webperf2002 /usr/local/bin/arclamp-generate-svgs > /dev/null |
| | Duplicate | | None | T248671 ceph cron-spam emails |
| | Resolved | | colewhite | T252500 smart-data-dump --syslog producing errors and spamming root@ |
| | Resolved | | • chasemp | T254127 peek is incorrectly configured to run every minute every 1st of the month, creating large amounts of cronspam |
| | Open | | None | T257016 Fix paniclog alert to only sent mails once |
| | Resolved | | Andrew | T271518 cron spam from cloudcontrol2004-dev.wikimedia.org |
| | | | | Restricted Task |
| | Resolved | | fgiunchedi | T283951 Logrotate complains about world-writable permissions |
| | Open | | None | T286442 Trash cleanup cron spams on an-test hosts |
| | Resolved | | Jelto | T288324 WARNING: In GitLab 14.0 we will begin removing all configuration backups older than yourgitlab_rails['backup_keep_time'] setting (currently set to: 259200) |
| | Open | | Vgutierrez | T295770 Cronspam from acmechief-test1001 |
| | Open | | None | T311926 PROBLEM: Icinga on alert2001.wikimedia.org is CRITICAL |
| | Open | | None | T296661 Welcome Survey: move cron job to analytics-product system user |
| | Open | | Paladox | T165885 Create a cron to clean clientbucket every day or hour |
| | Open | | jbond | T273743 Identify and upstream useful functions from wmflib |
| | Duplicate | | None | T273753 Replace crons in puppet with systemd timer |
| | Resolved | BUG REPORT | jhathaway | T302423 Where to Put Community Modules? |
| | Resolved | | jbond | T302481 Where to put puppetlabs Core Modules |
| | Open | | None | T308639 Remove legacy functions |
| | Open | | None | T273637 Puppet host certs do not contain Subject Alt Name entries |
| | Resolved | | dcaro | T272559 Unused puppet resources audit, 2021 |
| | Resolved | | aborrero | T272566 cloud: review and cleanup unused puppet code |
| | Resolved | | dcaro | T297014 [puppet] review unused modules |
| | Open | | None | T271196 puppet new facts for php_version and python_version |
| | Resolved | | • taavi | T270073 Add check for ssh key type in admin module CI |
| | Open | | None | T268040 Review puppetmaster SSL configuration |
| | Open | | None | T260574 wmf-style lint detects variable expansion in variables as parameter declaration |
| | | | | Restricted Task |
| | Open | | None | T255667 puppetmaster - ignoring invalid UTF-8 byte sequences in data to be sent to PuppetDB |
| | Open | | None | T254480 Shell/Python/other scripts should not be generated by ERB files; dynamic parts should be a simple ERB config file |
| | Open | | None | T181967 Update puppet code to conform to puppet 4.x and later standards |
| | Open | | None | T181971 Disable hiera autolookups |
| | Open | | None | T247956 Ensure hiera only has profile:: qualified or global hiera keys |
| | Open | | None | T240941 Clean up SSL configuration |
| | Open | | None | T237424 stunnel-wrap all rsync::server usage |
| | | | | Restricted Task |
| | Open | | None | T238093 puppetmasters: update the puppet masters so they use them self for the puppet run |
| | Open | | jhathaway | T236954 Hieradata yaml style checking |
| | Open | | None | T235185 missing CRL |
| | Open | | None | T234207 Investigate improvements to how puppet manages network interfaces |
| | Resolved | | aborrero | T319524 Cloud VPS: neutron network: the ifupdown bridge setup can be fragile |
| | Resolved | | jbond | T229397 Puppet: get data (row, rack, site, and other information) from Netbox |
| | Resolved | | Volans | T262446 Import row information into Netbox for Ganeti instances |
| | Resolved | | ayounsi | T296452 Upgrade Netbox to 3.2 |
| | Stalled | | None | T234997 Make Netbox Active/Active |
| | Open | | None | T311385 Netbox and Redis |
| | Open | | None | T330084 Issues converting services from active/passive to active/active |
| | Open | | jbond | T310639 Add monitoring for the puppet-netbox repository |
| | Open | | jbond | T311304 document puppet/netbox/hiera interaction |
| | Open | | jbond | T329272 Netbox: use the netbox to also sync networks and network devices |
| | Open | | jbond | T329669 Netbox: use the netbox to also sync networks |
| | Open | | None | T221083 puppet fact: migrate away from the uniqueid fact |
| | Open | BUG REPORT | None | T219085 wmf_style check in puppet silently fails when it finds the addition of an error that was also already occurring in the same file |
| | Open | | None | T211027 puppet (systemd::service) attempts to start manually masked units |
| | Open | | None | T190665 Investigate using SRV records for puppet |
| | Open | | None | T184186 Fix unknown variables warning that occur with puppet 4.x |
| | Open | | None | T183565 Fix regex.yaml single-regex issue |
| | Open | | None | T169318 Use multiple puppetdbs on puppet masters |
| | Open | | None | T114209 Ensure that there are no firewall rules in modules |