Page MenuHomePhabricator
Create Task
Maniphest T330490

Next steps for Puppet 7
Open, MediumPublic
Actions

Description

T184564: Plan Puppet 5 upgrade | Not yet

The Puppet maintainers in Debian have done amazing work and Bookworm will introduce a current stack:

Based on a discussion with John and myself the plan to move towards Puppet 7 would leads towards installing the new setup in parallel:

  • We already have a pair of puppetdb servers running on Bookworm on new hardware (puppetdb1003/puppetdb2003). With this there's also general compability of our Puppet tree with current facter and puppet-agent (there will be a need for more fine-tuning and some uses cases used by other roles, but the general support is present)
  • There's new hardware (puppetmaster[12]004/[12]005) meant to replace the old puppetmaster[12]00[12] servers. We can install puppetmaster[12]005 with Bookworm as the new puppetserver 7 frontends and puppetmaster[12]004 as the new puppetserver backends,
  • Create a separate Ganeti VM for puppetboard and serve is under a distinct URL like puppetboard7.wikimedia.org
  • Modify puppet-merge on puppetmaster[12]001 to sync every puppet change also towards puppetmaster[12]00[45]
  • Configure an additional/separate puppetdb 7 backend in Cumin
  • Modify the agent configuration to use a separate puppet7 CNAME (and create it)
  • Write a cookbook to remove a host from the Puppet 5 masters, add them for the Puppet 7 masters and modify agent config to use the puppet7 CNAME
  • Modify PCC to also compile every patch with Puppet 7 in parallel

Once there is two setups in parallel we can:

  • Use the cookbook to move the sretest* servers (and some other hosts like idp-test and some other canaries towards Puppet 7 (Buster/Bullseye/Bookworm on the agent side), test and fix up all issues
  • Use the cookbook to move ulsfo towards the Puppet 7 setup (and observe/fix for some time)
  • Use the cookbook to move all the remaining servers to Puppet 7
  • Migrate config-master over to puppetmaster1005
  • Reimage puppetmaster[12]003 with Bookworm
  • Decom puppetmaster[12]00[12] and the old puppetboard VM

Blockers To an upgrade

puppet forge core type

when puppet version 6 was released a bunch of core resource types where removed from the puppet code base and spun of as external forge modules. We should be aware of any resource we are using which fall into this catagory and either migrate to a different module/type or add the core modules to our code base when we upgrade

  • migrate all cron types to systemd::timer::job
  • if still using nagios migrate to puppetlabs/nagios_core as nagios types are no longer core puppet
  • Check if which other native types need to be migrated

Benefits to explore (some of theses benefits have be realized by updating to the latest 5.5 branch)

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
facter: fix facter conf location, attempt 3operations/puppetproduction+3 -2
facter: fix facter conf locationoperations/puppetproduction+9 -2
puppet 7: fix facter.conf locationoperations/puppetproduction+34 -24
operations-puppet: re-bundle to grab the updates in the Gemfile for Puppet 7integration/configmaster+7 -1
ci: upgrade to puppet 7operations/puppetproduction+6 -12
puppetserver: add logstash reporteroperations/puppetproduction+1 -0
cumin: Add puppetserver aliasoperations/puppetproduction+1 -0
puppetmaster: add pupetserveres back to git privateoperations/puppetproduction+6 -2
puppetmaster::servers: remove puppetservers from puppetmaster::servers hashoperations/puppetproduction+3 -21
httpyaml: replace URI.escapeoperations/puppetproduction+2 -1
puppetserver: dont auto restart puppet serveroperations/puppetproduction+1 -0
puppetserver: Add a file to track when a service restart or reload isoperations/puppetproduction+8 -2
motd: Add motd indicating services which need restartingoperations/puppetproduction+16 -0
puppetserver: make notifying configurableoperations/puppetproduction+29 -8
puppetmaster: move source scripts under the puppetserver name spaceoperations/puppetproduction+60 -315
puppetmaster::puppetdb: add documentationoperations/puppetproduction+15 -5
merge_cli: Make the paths a parameter and add them to a config fileoperations/puppetproduction+78 -23
merge_cli: migrate puppetmasteres to module version of merge_clioperations/puppetproduction+30 -79
merge_cli: Make the paths a parameter and add them to a config fileoperations/puppetproduction+63 -26
puppetserver: Add support for providing hardcoded list of serversoperations/puppetproduction+25 -10
puppetserver: add pcc facts upload functionalityoperations/puppetproduction+347 -0
puppetserver: open up firewall rulesoperations/puppetproduction+7 -0
merge_cli: fix source pathsoperations/puppetproduction+2 -2
puppetserver: add merge_cli as a seperate moduleoperations/puppetproduction+58 -5
puppetserver: fix hook sourcesoperations/puppetproduction+2 -2
puppetserver: use sudo to run g10k from post-mergeoperations/puppetproduction+6 -1
puppetserver: Add private repo configurationsoperations/puppetproduction+125 -15
puppet7: re-add mailalias coreoperations/puppetproduction+2 K -0
puppetdb: allow puppetserver and puppetmasteres to talk to puppetdboperations/puppetproduction+133 -0
puppetdb: add abiliity to override the ca_contentoperations/puppetproduction+14 -0
puppetserver: switch new puppetserveres to use them selfoperations/puppetproduction+2 -0
puppetserver: support puppet agent5operations/puppetproduction+5 -1
puppetserver::g10k: Call g10k from the puppetserver classoperations/puppetproduction+50 -25
puppetserver: add hiera configoperations/puppetproduction+44 -0
puppetserver: add netboot section for puppetserveroperations/puppetproduction+1 -0
site.pp: Add definition for puppetserveroperations/puppetproduction+3 -9
site.pp: drop pupetmasters[12]005operations/puppetproduction+0 -10
puppetmaster: remove the min submissionoperations/puppetproduction+4 -1
trafficserver::backend: Add a cache config for puppetboard-nextoperations/puppetproduction+5 -0
conftool-data: also add service to conftooloperations/puppetproduction+1 -0
puppetboard-next: add a new name for the puppet7 migrationoperations/dnsmaster+3 -0
service::catalog: Add puppetboard-next service for puppet7 migrationoperations/puppetproduction+25 -0
puppetboard::bookworm: update discovery nameoperations/puppetproduction+1 -1
puppetmaster2004: enable subimt_onlyoperations/puppetproduction+2 -0
puppetmnaster::frontend: configure puppetmaster2004 as a canaryoperations/puppetproduction+3 -1
puppetdb: Add support for submit_only_server_urlsoperations/puppetproduction+19 -10
puppetmaster::common: fix lint errors and docsoperations/puppetproduction+7 -5
puppetserver: add puppetserver moduleoperations/puppetproduction+535 -1
puppet::agent: rename the enable_puppet7 flagoperations/puppetproduction+20 -18
core_modules: add core modulesoperations/puppetproduction+15 K -7
wmflib: updat ipresolv to work with puppet7operations/puppetproduction+129 -110
Show related patches Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenNoneT330490 Next steps for Puppet 7
 ResolvedjbondT321783 Setup an initial bookworm host pair with Puppetdb 7
 ResolvedjbondT334686 WMCS puppet-enc not working with puppetserver 7
 ResolvedjbondT338811 puppetdb7 cross pollination
 ResolvedjbondT341268 Puppetboard: configure client auth
 ResolvedjbondT341497 Cumin: update config to use new puppet7 infrastructure
 OpenNoneT341674 slow command processing when introducing lots of new hosts
 ResolvedjbondT339913 investigate using cfssl to provide a itermediate certificate for puppetserver
 OpenNoneT340543 Create dynamic CRL
 ResolvedjbondT340557 PKI: add the new puppet CA to the pki infrastructre
 InvalidNoneT340563 puppetdb; allow connections from puppetserver over ipv6
 ResolvedjbondT340635 puppet-merge: add new puppetserveres to puppet merge
 ResolvedjbondT340739 Create cookbook to migrate servers from the puppetmasters to puppetservers
 ResolvedMoritzMuehlenhoffT349619 Migrate roles to puppet7
 ResolvedjbondT350118 Investigate PKI errors
 ResolvedjbondT351181 syslog tls clients failing to connect to centrallog2002 post puppet7 migration
 ResolvedjbondT324623 Switch rsyslog from gtls to ossl
 ResolvedABran-WMFT352974 puppet7 on cumin breaks database connections
 DeclinedBTullisT354411 Revert dbstore migration from puppet7 to puppet5
 ResolvedLadsgroupT354719 Deploy grants for cumin1002
 ResolveddcaroT309789 [ceph] Upgrade hosts to bullseye
 ResolveddcaroT369026 [reimage,ceph] reimaging cloudcephosd hosts gets stuck in network configuration screen
 ResolvedAndrewT383817 partman vs cloudcephosd1012
 ResolvedNoneT396940 cloudcephosd1xxxx.private.eqiad.wikimedia.cloud
 ResolvedbkingT354959 Migrate Search Platform-owned hosts to Puppet 7
 ResolvedNoneT340741 expose_puppet_certs: Services will need to trust the new ca
 OpenNoneT341374 remove puppet::expose_agent_certs from puppetdb classes
 OpenNoneT341664 Migrate bacula to pki.discovery.wmnet
 OpenNoneT347565 Switch rsyslog to use the new PKI infrastructure
 ResolvedjbondT341053 Configure SRV records for new puppet infrastructure
 ResolvedjbondT341056 volatile: We need to configure the volatile endpoint on puppetserveres
 OpenjhathawayT341071 puppet7: drop instances of :undef in erb files
 OpenNoneT341095 Puppet7: Update documentation
ResolvedjbondT236373 update pcc with puppet 7 support
 DeclinedNoneT236481 Investigate using the rich_data option to support Binary and binary_file for binary data
 ResolvedjbondT341373 convert uses of query_resources
 OpenNoneT341448 Puppet Profiler
 ResolvedVolansT341496 spicerack: update spicerack to work with the newer puppet infrastructure
 ResolvedjbondT341717 Move config-master to dedicated VMs
 ResolvedjbondT343213 Site: codfw VM 1 for config-master
 ResolvedjbondT343212 Site: eqiad VM 1 for config-master
 ResolvedjbondT341721 Add conftool::master to puppetserver
 StalledNoneT342125 puppetserver monitoring
 OpenNoneT342253 puppet JMX mappings
 OpenNoneT393978 puppetserver: monitor compilation times
 OpenNoneT393979 puppetserver: monitor HTTP request latencies
 ResolvedjbondT342214 update systems to use new puppetdb instance
 ResolvedjhathawayT345067 reimage puppetmasters to puppetservers
 ResolvedVRiley-WMFT345080 Relabel: puppetmaster1006 to puppetserver1002
 ResolvedVRiley-WMFT347395 Relabel puppetmaster1004 to puppetserver1003
 ResolvedJhancock.wmT347396 Relabel puppetmaster2004 to puppetserver2002
 ResolvedjbondT345702 Ensure standalone puppet works with puppet7
 ResolvedjbondT345719 investigate timers on puppetservers
 ResolvedjbondT347285 decomission puppetdb[12]002
 ResolvedjbondT347286 decomission puppetboard[12]002
 ResolvedjbondT347390 Create backups for puppetservers
 ResolvedjbondT347410 update netbox sync to also sync to puppetservers
 InvalidNoneT348272 Fix outstanding puppet 7 issue
 ResolvedVolansT348319 Update reimage cookbooks to work with puppet7
 ResolvedVolansT353558 Re-images sometimes fail as the cert request goes to the wrong puppet master
 ResolvedjbondT349291 Fix outstanding puppet 7 issues
 ResolvedjbondT348883 re-write compile_redirects function
 DuplicateNoneT349620 update acme chief access
 ResolvedjbondT349915 find solution for acmechief in puppet7
 ResolvedjbondT349890 codfw: 1 VM request for acme-chief
 OpenNoneT351104 Issues which should be fixed by puppet7 upgrade
 StalledNoneT179099 puppetmaster hostcert and hostprivkey point to nonexistent files
 DuplicateNoneT192848 puppetmaster puppet.conf refers to noexistent files
 ResolvedMoritzMuehlenhoffT356991 Repurpose puppetmaster2003 as puppetserver2003
 ResolvedJhancock.wmT357096 Relabel puppetmaster2003
 ResolvedVRiley-WMFT357093 Decommission puppetmaster1002
 ResolvedMoritzMuehlenhoffT357750 Phase out cergen
 ResolvedBTullisT360412 Phase out cergen for Data Platform services
 ResolvedDzahnT360413 Phase out cergen for Collaboration Services services
 ResolvedDzahnT369796 Puppet CA certificate phabricator.discovery.wmnet is about to expire
 Resolvedandrea.denisseT360414 Phase out cergen for Observability services
 ResolvedBTullisT360439 Phase out cergen for Search Platform services
 ResolvedelukeyT356412 Consolidate TLS cert puppetry for ms and thanos swift frontends
 ResolvedCDobbinsT360506 Migrate purged away from cergen-issued certificate
 ResolvedMoritzMuehlenhoffT360636 Phase out cergen for ServiceOps services
 ResolvedMoritzMuehlenhoffT360778 Move maps/karthoterian to PKI/cfssl
 ResolvedJgreenT360779 Phase out cergen for Fundraising services
 ResolvedMoritzMuehlenhoffT364622 Review/cleanup content of /srv/git/private/modules/secret/secrets/ssl in the private repo
 ResolvedRequesthasharT417887 Archive the cergen repository
 ResolvedjhathawayT381538 Backport facter to bullseye
 ResolvedjhathawayT381639 Facter 4 upgrade removed 'mountpoints' fact, breaking cinderutils::ensure

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
jbond merged a task: T265138: Work required to prepare for puppet 7.Jul 3 2023, 3:39 PM
jbond added subscribers: RhinosF1, BTullis, Paladox and 5 others.
jbond closed subtask T340557: PKI: add the new puppet CA to the pki infrastructre as Resolved.Jul 4 2023, 10:58 AM
jbond changed the status of subtask T341053: Configure SRV records for new puppet infrastructure from Open to In Progress.Jul 4 2023, 11:00 AM
jbond added a project: Puppet-Infrastructure.Jul 4 2023, 11:28 AM
jbond added a subtask: T341071: puppet7: drop instances of :undef in erb files.Jul 4 2023, 1:52 PM
jbond closed subtask T340563: puppetdb; allow connections from puppetserver over ipv6 as Invalid.Jul 5 2023, 8:19 AM
gerritbot added a comment.Jul 5 2023, 12:25 PM

Change 935731 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetmaster::puppetdb: add documentation

https://gerrit.wikimedia.org/r/935731

gerritbot added a comment.Jul 5 2023, 12:40 PM

Change 935731 merged by Jbond:

[operations/puppet@production] puppetmaster::puppetdb: add documentation

https://gerrit.wikimedia.org/r/935731

Sethabathaba subscribed.Jul 6 2023, 6:32 PM
jbond closed subtask T321783: Setup an initial bookworm host pair with Puppetdb 7 as Resolved.Jul 7 2023, 3:33 PM
jbond added a subtask: T236373: update pcc with puppet 7 support.Jul 7 2023, 5:48 PM
gerritbot added a comment.Jul 11 2023, 9:20 AM

Change 937049 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetmaster: move source scripts under the puppetserver name space

https://gerrit.wikimedia.org/r/937049

gerritbot added a comment.Jul 11 2023, 9:23 AM

Change 937049 merged by Jbond:

[operations/puppet@production] puppetmaster: move source scripts under the puppetserver name space

https://gerrit.wikimedia.org/r/937049

jbond closed subtask T341053: Configure SRV records for new puppet infrastructure as Resolved.Jul 17 2023, 3:56 PM
jbond changed the status of subtask T342125: puppetserver monitoring from Open to In Progress.Jul 18 2023, 2:19 PM
gerritbot added a comment.Jul 19 2023, 10:11 AM

Change 939643 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: do not notify puppetserver service on changes

https://gerrit.wikimedia.org/r/939643

jbond changed the status of subtask T342214: update systems to use new puppetdb instance from Open to In Progress.Jul 19 2023, 10:29 AM
jbond changed the status of subtask T342125: puppetserver monitoring from In Progress to Stalled.
gerritbot added a comment.Jul 21 2023, 2:32 PM

Change 940366 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] motd: Add motd indicating services which need restarting

https://gerrit.wikimedia.org/r/940366

gerritbot added a comment.Jul 21 2023, 2:34 PM

Change 940365 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: Add a file to track when a service restart or reload is

https://gerrit.wikimedia.org/r/940365

gerritbot added a comment.Jul 27 2023, 4:08 PM

Change 939643 merged by Jbond:

[operations/puppet@production] puppetserver: make notifying configurable

https://gerrit.wikimedia.org/r/939643

gerritbot added a comment.Jul 27 2023, 4:08 PM

Change 940365 merged by Jbond:

[operations/puppet@production] puppetserver: Add a file to track when a service restart or reload is

https://gerrit.wikimedia.org/r/940365

gerritbot added a comment.Jul 27 2023, 4:08 PM

Change 940366 merged by Jbond:

[operations/puppet@production] motd: Add motd indicating services which need restarting

https://gerrit.wikimedia.org/r/940366

jbond changed the status of subtask T341056: volatile: We need to configure the volatile endpoint on puppetserveres from Open to In Progress.Aug 14 2023, 1:43 PM
gerritbot added a comment.Aug 17 2023, 2:12 PM

Change 949980 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: dont auto restart puppet server

https://gerrit.wikimedia.org/r/949980

gerritbot added a comment.Aug 17 2023, 2:12 PM

Change 949980 merged by Jbond:

[operations/puppet@production] puppetserver: dont auto restart puppet server

https://gerrit.wikimedia.org/r/949980

jbond closed subtask T341717: Move config-master to dedicated VMs as Resolved.Aug 22 2023, 9:11 AM
jbond closed subtask T341721: Add conftool::master to puppetserver as Resolved.
gerritbot added a comment.Aug 23 2023, 11:41 AM

Change 919291 merged by Jbond:

[operations/puppet@production] httpyaml: replace URI.escape

https://gerrit.wikimedia.org/r/919291

jbond changed the status of subtask T345067: reimage puppetmasters to puppetservers from Open to In Progress.Aug 29 2023, 11:24 AM
nshahquinn-wmf mentioned this in T345309: Wmfdata's presto.run fails with Urllib3 v2 or higher.Sep 1 2023, 5:34 PM
jbond closed subtask T342214: update systems to use new puppetdb instance as Resolved.Sep 4 2023, 11:16 AM
jbond closed subtask T338811: puppetdb7 cross pollination as Resolved.Sep 6 2023, 3:22 PM
jbond added a subtask: T345719: investigate timers on puppetservers.Sep 7 2023, 8:56 AM
gerritbot added a comment.Sep 7 2023, 1:50 PM

Change 955731 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetmaster::servers: remove puppetserveres from puppetmaster::servers hash

https://gerrit.wikimedia.org/r/955731

jbond closed subtask T345702: Ensure standalone puppet works with puppet7 as Resolved.Sep 8 2023, 10:17 AM
gerritbot added a comment.Sep 8 2023, 11:21 AM

Change 955731 merged by Jbond:

[operations/puppet@production] puppetmaster::servers: remove puppetservers from puppetmaster::servers hash

https://gerrit.wikimedia.org/r/955731

Lucas_Werkmeister_WMDE unsubscribed.Sep 8 2023, 11:32 AM
gerritbot added a comment.Sep 8 2023, 11:42 AM

Change 955911 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetmaster: add pupetserveres back to git private

https://gerrit.wikimedia.org/r/955911

gerritbot added a comment.Sep 8 2023, 11:54 AM

Change 955911 merged by Jbond:

[operations/puppet@production] puppetmaster: add pupetserveres back to git private

https://gerrit.wikimedia.org/r/955911

gerritbot added a comment.Sep 26 2023, 4:24 PM

Change 961153 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] cumin: Add puppetserver alias

https://gerrit.wikimedia.org/r/961153

gerritbot added a comment.Sep 26 2023, 4:33 PM

Change 961153 merged by Jbond:

[operations/puppet@production] cumin: Add puppetserver alias

https://gerrit.wikimedia.org/r/961153

jbond closed subtask T347410: update netbox sync to also sync to puppetservers as Resolved.Sep 27 2023, 10:20 AM
jbond closed subtask T345719: investigate timers on puppetservers as Resolved.Oct 2 2023, 1:20 PM
gerritbot added a comment.Oct 2 2023, 3:16 PM

Change 962638 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: add logstash reporter

https://gerrit.wikimedia.org/r/962638

gerritbot added a comment.Oct 2 2023, 3:18 PM

Change 962638 merged by Jbond:

[operations/puppet@production] puppetserver: add logstash reporter

https://gerrit.wikimedia.org/r/962638

jbond closed subtask T341373: convert uses of query_resources as Resolved.Oct 5 2023, 12:06 PM
jbond changed the status of subtask T347286: decomission puppetboard[12]002 from Open to In Progress.
jbond closed subtask T347286: decomission puppetboard[12]002 as Resolved.Oct 5 2023, 1:21 PM
jbond closed subtask T347285: decomission puppetdb[12]002 as Resolved.
jbond changed the status of subtask T348319: Update reimage cookbooks to work with puppet7 from Open to In Progress.Oct 6 2023, 12:18 PM
jbond removed a subtask: T348883: re-write compile_redirects function.Oct 19 2023, 11:53 AM
jbond changed the status of subtask T349291: Fix outstanding puppet 7 issues from Open to In Progress.
jbond changed the status of subtask T349915: find solution for acmechief in puppet7 from Open to In Progress.Oct 27 2023, 3:54 PM
Volans subscribed.Nov 6 2023, 2:32 PM

@jbond I think that the decommission cookbook needs some adjustment too, both because it checks some git checkout on the puppetmaster's CA and also because it does remove the certificate.

jbond closed subtask T236373: update pcc with puppet 7 support as Resolved.Nov 6 2023, 4:03 PM
jbond closed subtask T348272: Fix outstanding puppet 7 issue as Invalid.Nov 13 2023, 3:46 PM
jbond closed subtask T347390: Create backups for puppetservers as Resolved.Nov 13 2023, 4:05 PM
jbond closed subtask T340739: Create cookbook to migrate servers from the puppetmasters to puppetservers as Resolved.Nov 13 2023, 4:13 PM
jbond closed subtask T349291: Fix outstanding puppet 7 issues as Resolved.
jbond closed subtask T349915: find solution for acmechief in puppet7 as Resolved.
jbond changed the status of subtask T340741: expose_puppet_certs: Services will need to trust the new ca from Open to In Progress.Nov 13 2023, 4:24 PM
Volans closed subtask T348319: Update reimage cookbooks to work with puppet7 as Resolved.Nov 14 2023, 1:21 PM
jbond closed subtask T341056: volatile: We need to configure the volatile endpoint on puppetserveres as Resolved.Nov 14 2023, 2:46 PM
MoritzMuehlenhoff closed subtask T356991: Repurpose puppetmaster2003 as puppetserver2003 as Resolved.Feb 15 2024, 4:21 PM
MoritzMuehlenhoff closed subtask T357093: Decommission puppetmaster1002 as Resolved.Apr 3 2024, 9:12 AM
MoritzMuehlenhoff reopened subtask T357093: Decommission puppetmaster1002 as Open.Apr 3 2024, 9:16 AM
VRiley-WMF closed subtask T357093: Decommission puppetmaster1002 as Resolved.Apr 5 2024, 6:38 PM
Pppery edited projects, added Patch-Needs-Improvement; removed Patch-For-Review.May 21 2024, 6:12 PM
Volans closed subtask T341496: spicerack: update spicerack to work with the newer puppet infrastructure as Resolved.May 22 2024, 8:51 AM
CDanis mentioned this in T366563: "Warning: The current total number of facts: 2830 exceeds the number of facts limit: 2048".Jun 4 2024, 6:45 PM
elukey subscribed.Jul 2 2024, 9:06 AM
gerritbot added a comment.Sep 18 2024, 9:45 PM

Change #1073906 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] ci: upgrade to puppet 7

https://gerrit.wikimedia.org/r/1073906

gerritbot added a project: Patch-For-Review.Sep 18 2024, 9:45 PM
Restricted Application removed a project: Patch-Needs-Improvement. · View Herald TranscriptSep 18 2024, 9:45 PM
gerritbot added a comment.Sep 20 2024, 6:12 PM

Change #1073906 merged by JHathaway:

[operations/puppet@production] ci: upgrade to puppet 7

https://gerrit.wikimedia.org/r/1073906

gerritbot added a comment.Sep 20 2024, 7:45 PM

Change #1074534 had a related patch set uploaded (by JHathaway; author: JHathaway):

[integration/config@master] operations-puppet: re-bundle to grab the updates in the Gemfile for Puppet 7

https://gerrit.wikimedia.org/r/1074534

gerritbot added a comment.Sep 23 2024, 8:13 AM

Change #1074534 merged by jenkins-bot:

[integration/config@master] operations-puppet: re-bundle to grab the updates in the Gemfile for Puppet 7

https://gerrit.wikimedia.org/r/1074534

Stashbot added a comment.Sep 23 2024, 8:25 AM

Mentioned in SAL (#wikimedia-operations) [2024-09-23T08:25:49Z] <hashar> Updated CI job operations-puppet-tests-bullseye to image rebuild for Puppet 7 # T330490

gerritbot added a comment.Dec 3 2024, 5:49 PM

Change #1100161 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] puppet 7: fix facter.conf location

https://gerrit.wikimedia.org/r/1100161

gerritbot added a comment.Dec 4 2024, 4:35 PM

Change #1100161 merged by JHathaway:

[operations/puppet@production] puppet 7: fix facter.conf location

https://gerrit.wikimedia.org/r/1100161

gerritbot added a comment.Dec 4 2024, 4:55 PM

Change #1100490 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] facter: fix facter conf location

https://gerrit.wikimedia.org/r/1100490

gerritbot added a comment.Dec 4 2024, 5:03 PM

Change #1100490 merged by JHathaway:

[operations/puppet@production] facter: fix facter conf location

https://gerrit.wikimedia.org/r/1100490

gerritbot added a comment.Dec 5 2024, 8:51 PM

Change #1100861 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/puppet@production] facter: fix facter conf location, attempt 3

https://gerrit.wikimedia.org/r/1100861

gerritbot added a comment.Dec 5 2024, 8:58 PM

Change #1100861 merged by JHathaway:

[operations/puppet@production] facter: fix facter conf location, attempt 3

https://gerrit.wikimedia.org/r/1100861

jhathaway changed the status of subtask T381538: Backport facter to bullseye from Open to In Progress.Dec 11 2024, 5:33 PM
jhathaway closed subtask T381538: Backport facter to bullseye as Resolved.
MoritzMuehlenhoff closed subtask T345067: reimage puppetmasters to puppetservers as Resolved.Dec 16 2024, 12:17 PM
Aklapper changed the status of subtask T340741: expose_puppet_certs: Services will need to trust the new ca from In Progress to Open.Apr 11 2025, 10:14 PM
Krinkle mentioned this in T184564: Plan Puppet 5 upgrade.Oct 27 2025, 9:32 PM
Krinkle updated the task description. (Show Details)
MoritzMuehlenhoff closed subtask T357750: Phase out cergen as Resolved.Feb 20 2026, 9:12 AM
taavi closed subtask T340741: expose_puppet_certs: Services will need to trust the new ca as Resolved.Feb 20 2026, 10:00 AM
MoritzMuehlenhoff updated the task description. (Show Details)Feb 20 2026, 10:10 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits