Page MenuHomePhabricator
Create Task
Maniphest T330490

Next steps for Puppet 7
Open, MediumPublic
Actions

Description

The Puppet maintainers in Debian have done amazing work and Bookworm will introduce a current stack:

Based on a discussion with John and myself the plan to move towards Puppet 7 would leads towards installing the new setup in parallel:

  • We already have a pair of puppetdb servers running on Bookworm on new hardware (puppetdb1003/puppetdb2003). With this there's also general compability of our Puppet tree with current facter and puppet-agent (there will be a need for more fine-tuning and some uses cases used by other roles, but the general support is present)
  • There's new hardware (puppetmaster[12]004/[12]005) meant to replace the old puppetmaster[12]00[12] servers. We can install puppetmaster[12]005 with Bookworm as the new puppetserver 7 frontends and puppetmaster[12]004 as the new puppetserver backends,
  • Create a separate Ganeti VM for puppetboard and serve is under a distinct URL like puppetboard7.wikimedia.org
  • Modify puppet-merge on puppetmaster[12]001 to sync every puppet change also towards puppetmaster[12]00[45]
  • Configure an additional/separate puppetdb 7 backend in Cumin
  • Modify the agent configuration to use a separate puppet7 CNAME (and create it)
  • Write a cookbook to remove a host from the Puppet 5 masters, add them for the Puppet 7 masters and modify agent config to use the puppet7 CNAME
  • Modify PCC to also compile every patch with Puppet 7 in parallel

Once there is two setups in parallel we can:

  • Use the cookbook to move the sretest* servers (and some other hosts like idp-test and some other canaries towards Puppet 7 (Buster/Bullseye/Bookworm on the agent side), test and fix up all issues
  • Use the cookbook to move ulsfo towards the Puppet 7 setup (and observe/fix for some time)
  • Use the cookbook to move all the remaining servers to Puppet 7
  • Migrate config-master over to puppetmaster1005
  • Reimage puppetmaster[12]003 with Bookworm
  • Decom puppetmaster[12]00[12] and the old puppetboard VM

Blockers To an upgrade

puppet forge core type

when puppet version 6 was released a bunch of core resource types where removed from the puppet code base and spun of as external forge modules. We should be aware of any resource we are using which fall into this catagory and either migrate to a different module/type or add the core modules to our code base when we upgrade

  • migrate all cron types to systemd::timer::job
  • if still using nagios migrate to puppetlabs/nagios_core as nagios types are no longer core puppet
  • Check if which other native types need to be migrated

Benefits to explore (some of theses benefits have be realized by updating to the latest 5.5 branch)

Details

SubjectRepoBranchLines +/-
puppetserver: add logstash reporteroperations/puppetproduction+1 -0
cumin: Add puppetserver aliasoperations/puppetproduction+1 -0
puppetmaster: add pupetserveres back to git privateoperations/puppetproduction+6 -2
puppetmaster::servers: remove puppetservers from puppetmaster::servers hashoperations/puppetproduction+3 -21
httpyaml: replace URI.escapeoperations/puppetproduction+2 -1
puppetserver: dont auto restart puppet serveroperations/puppetproduction+1 -0
puppetserver: Add a file to track when a service restart or reload isoperations/puppetproduction+8 -2
motd: Add motd indicating services which need restartingoperations/puppetproduction+16 -0
puppetserver: make notifying configurableoperations/puppetproduction+29 -8
puppetmaster: move source scripts under the puppetserver name spaceoperations/puppetproduction+60 -315
puppetmaster::puppetdb: add documentationoperations/puppetproduction+15 -5
merge_cli: Make the paths a parameter and add them to a config fileoperations/puppetproduction+78 -23
merge_cli: migrate puppetmasteres to module version of merge_clioperations/puppetproduction+30 -79
merge_cli: Make the paths a parameter and add them to a config fileoperations/puppetproduction+63 -26
puppetserver: Add support for providing hardcoded list of serversoperations/puppetproduction+25 -10
puppetserver: add pcc facts upload functionalityoperations/puppetproduction+347 -0
puppetserver: open up firewall rulesoperations/puppetproduction+7 -0
merge_cli: fix source pathsoperations/puppetproduction+2 -2
puppetserver: add merge_cli as a seperate moduleoperations/puppetproduction+58 -5
puppetserver: fix hook sourcesoperations/puppetproduction+2 -2
puppetserver: use sudo to run g10k from post-mergeoperations/puppetproduction+6 -1
puppetserver: Add private repo configurationsoperations/puppetproduction+125 -15
puppet7: re-add mailalias coreoperations/puppetproduction+2 K -0
puppetdb: allow puppetserver and puppetmasteres to talk to puppetdboperations/puppetproduction+133 -0
puppetdb: add abiliity to override the ca_contentoperations/puppetproduction+14 -0
puppetserver: switch new puppetserveres to use them selfoperations/puppetproduction+2 -0
puppetserver: support puppet agent5operations/puppetproduction+5 -1
puppetserver::g10k: Call g10k from the puppetserver classoperations/puppetproduction+50 -25
puppetserver: add hiera configoperations/puppetproduction+44 -0
puppetserver: add netboot section for puppetserveroperations/puppetproduction+1 -0
site.pp: Add definition for puppetserveroperations/puppetproduction+3 -9
site.pp: drop pupetmasters[12]005operations/puppetproduction+0 -10
puppetmaster: remove the min submissionoperations/puppetproduction+4 -1
trafficserver::backend: Add a cache config for puppetboard-nextoperations/puppetproduction+5 -0
conftool-data: also add service to conftooloperations/puppetproduction+1 -0
puppetboard-next: add a new name for the puppet7 migrationoperations/dnsmaster+3 -0
service::catalog: Add puppetboard-next service for puppet7 migrationoperations/puppetproduction+25 -0
puppetboard::bookworm: update discovery nameoperations/puppetproduction+1 -1
puppetmaster2004: enable subimt_onlyoperations/puppetproduction+2 -0
puppetmnaster::frontend: configure puppetmaster2004 as a canaryoperations/puppetproduction+3 -1
puppetdb: Add support for submit_only_server_urlsoperations/puppetproduction+19 -10
puppetmaster::common: fix lint errors and docsoperations/puppetproduction+7 -5
puppetserver: add puppetserver moduleoperations/puppetproduction+535 -1
puppet::agent: rename the enable_puppet7 flagoperations/puppetproduction+20 -18
core_modules: add core modulesoperations/puppetproduction+15 K -7
wmflib: updat ipresolv to work with puppet7operations/puppetproduction+129 -110
Show related patches Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenNoneT330490 Next steps for Puppet 7
 ResolvedjbondT321783 Setup an initial bookworm host pair with Puppetdb 7
 ResolvedjbondT334686 WMCS puppet-enc not working with puppetserver 7
 ResolvedjbondT338811 puppetdb7 cross pollination
 ResolvedjbondT341268 Puppetboard: configure client auth
 ResolvedjbondT341497 Cumin: update config to use new puppet7 infrastructure
 OpenNoneT341674 slow command processing when introducing lots of new hosts
 ResolvedjbondT339913 investigate using cfssl to provide a itermediate certificate for puppetserver
 OpenNoneT340543 Create dynamic CRL
 ResolvedjbondT340557 PKI: add the new puppet CA to the pki infrastructre
 InvalidNoneT340563 puppetdb; allow connections from puppetserver over ipv6
 ResolvedjbondT340635 puppet-merge: add new puppetserveres to puppet merge
 ResolvedjbondT340739 Create cookbook to migrate servers from the puppetmasters to puppetservers
 In ProgressNoneT349619 Migrate roles to puppet7
 ResolvedjbondT350118 Investigate PKI errors
 ResolvedjbondT351181 syslog tls clients failing to connect to centrallog2002 post puppet7 migration
 ResolvedjbondT324623 Switch rsyslog from gtls to ossl
 OpenNoneT351710 ossl rsyslog errors post-migration
 ResolvedfgiunchediT352968 Stop sending swift access logs to centrallog for non state-changing requests
 OpenNoneT351624 Probes for centrallog hosts fail to validate with "x509: issuer name does not match subject from issuing certificate"
 OpenNoneT351643 Warning re: excessive directory entries on prometheus with puppet7
 ResolvedABran-WMFT352974 puppet7 on cumin breaks database connections
 DeclinedBTullisT354411 Revert dbstore migration from puppet7 to puppet5
 ResolvedLadsgroupT354719 Deploy grants for cumin1002
 In ProgressdcaroT309789 [ceph] Upgrade hosts to bullseye
 ResolvedbkingT354959 Migrate Search Platform-owned hosts to Puppet 7
 In ProgressNoneT340741 expose_puppet_certs: Services will need to trust the new ca
 OpenNoneT341374 remove puppet::expose_agent_certs from puppetdb classes
 OpenNoneT341664 Migrate bacula to pki.discovery.wmnet
 OpenNoneT347565 Switch rsyslog to use the new PKI infrastructure
 ResolvedjbondT341053 Configure SRV records for new puppet infrastructure
 ResolvedjbondT341056 volatile: We need to configure the volatile endpoint on puppetserveres
 OpenNoneT341071 puppet7: drop instances of :undef in erb files
 OpenNoneT341095 Puppet7: Update documentation
ResolvedjbondT236373 update pcc with puppet 7 support
 DeclinedNoneT236481 Investigate using the rich_data option to support Binary and binary_file for binary data
 ResolvedjbondT341373 convert uses of query_resources
 OpenNoneT341448 Puppet Profiler
 OpenNoneT341496 spicerack: update spicerack to work with the newer puppet infrastructure
 ResolvedjbondT341717 Move config-master to dedicated VMs
 ResolvedjbondT343213 Site: codfw VM 1 for config-master
 ResolvedjbondT343212 Site: eqiad VM 1 for config-master
 ResolvedjbondT341721 Add conftool::master to puppetserver
 StalledNoneT342125 puppetserver monitoring
 In ProgressNoneT342253 puppet JMX mappings
 ResolvedjbondT342214 update systems to use new puppetdb instance
 In ProgressjhathawayT345067 reimage puppetmasteres to puppetserveres
 ResolvedVRiley-WMFT345080 Relabel: puppetmaster1006 to puppetserver1002
 ResolvedVRiley-WMFT347395 Relabel puppetmaster1004 to puppetserver1003
 ResolvedJhancock.wmT347396 Relabel puppetmaster2004 to puppetserver2002
 ResolvedjbondT345702 Ensure standalone puppet works with puppet7
 ResolvedjbondT345719 investigate timers on puppetservers
 ResolvedjbondT347285 decomission puppetdb[12]002
 ResolvedjbondT347286 decomission puppetboard[12]002
 ResolvedjbondT347390 Create backups for puppetservers
 ResolvedjbondT347410 update netbox sync to also sync to puppetservers
 InvalidNoneT348272 Fix outstanding puppet 7 issue
 ResolvedVolansT348319 Update reimage cookbooks to work with puppet7
 ResolvedVolansT353558 Re-images sometimes fail as the cert request goes to the wrong puppet master
 ResolvedjbondT349291 Fix outstanding puppet 7 issues
 ResolvedjbondT348883 re-write compile_redirects function
 DuplicateNoneT349620 update acme chief access
 ResolvedjbondT349915 find solution for acmechief in puppet7
 ResolvedjbondT349890 codfw: 1 VM request for acme-chief
 OpenNoneT351104 Issues which should be fixed by puppet7 upgrade
 StalledNoneT179099 puppetmaster hostcert and hostprivkey point to nonexistent files
 DuplicateNoneT192848 puppetmaster puppet.conf refers to noexistent files
 ResolvedMoritzMuehlenhoffT356991 Repurpose puppetmaster2003 as puppetserver2003
 ResolvedJhancock.wmT357096 Relabel puppetmaster2003
 ResolvedVRiley-WMFT357093 Decommission puppetmaster1002
 OpenMoritzMuehlenhoffT357750 Phase out cergen
 ResolvedBTullisT360412 Phase out cergen for Data Platform services
 ResolvedDzahnT360413 Phase out cergen for Collaboration Services services
 In Progressandrea.denisseT360414 Phase out cergen for Observability services
 OpenNoneT356386 Move o11y all services to discovery.wmnet
 OpenBTullisT360439 Phase out cergen for Search Platform services
 OpenNoneT356412 Consolidate TLS cert puppetry for ms and thanos swift frontends
 OpenNoneT360506 Migrate purged away from cergen-issued certificate
 OpenNoneT360636 Phase out cergen for ServiceOps services
 OpenjijikiT360778 Move maps/karthoterian to PKI/cfssl
 OpenNoneT360779 Phase out cergen for Fundraising services

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
gerritbot added a comment.Jun 20 2023, 2:16 PM

Change 928628 merged by Jbond:

[operations/puppet@production] puppetserver: Add private repo configurations

https://gerrit.wikimedia.org/r/928628

gerritbot added a comment.Jun 20 2023, 5:35 PM

Change 931659 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: use sudo to run g10k from post-merge

https://gerrit.wikimedia.org/r/931659

gerritbot added a comment.Jun 20 2023, 5:38 PM

Change 931659 merged by Jbond:

[operations/puppet@production] puppetserver: use sudo to run g10k from post-merge

https://gerrit.wikimedia.org/r/931659

gerritbot added a comment.Jun 20 2023, 5:47 PM

Change 931661 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: fix hook sources

https://gerrit.wikimedia.org/r/931661

gerritbot added a comment.Jun 20 2023, 5:47 PM

Change 931661 merged by Jbond:

[operations/puppet@production] puppetserver: fix hook sources

https://gerrit.wikimedia.org/r/931661

gerritbot added a comment.Jun 20 2023, 6:15 PM

Change 931673 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: add merge_cli

https://gerrit.wikimedia.org/r/931673

gerritbot added a comment.Jun 20 2023, 6:46 PM

Change 931673 merged by Jbond:

[operations/puppet@production] puppetserver: add merge_cli as a seperate module

https://gerrit.wikimedia.org/r/931673

gerritbot added a comment.Jun 20 2023, 6:51 PM

Change 931681 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] merge_cli: fix source paths

https://gerrit.wikimedia.org/r/931681

gerritbot added a comment.Jun 20 2023, 6:52 PM

Change 931681 merged by Jbond:

[operations/puppet@production] merge_cli: fix source paths

https://gerrit.wikimedia.org/r/931681

gerritbot added a comment.Jun 27 2023, 12:22 PM

Change 933440 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: open up firewall rules

https://gerrit.wikimedia.org/r/933440

gerritbot added a comment.Jun 27 2023, 1:07 PM

Change 933457 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: add pcc facts upload functionality

https://gerrit.wikimedia.org/r/933457

gerritbot added a comment.Jun 27 2023, 1:22 PM

Change 933440 merged by Jbond:

[operations/puppet@production] puppetserver: open up firewall rules

https://gerrit.wikimedia.org/r/933440

gerritbot added a comment.Jun 27 2023, 1:22 PM

Change 933457 merged by Jbond:

[operations/puppet@production] puppetserver: add pcc facts upload functionality

https://gerrit.wikimedia.org/r/933457

gerritbot added a comment.Jun 27 2023, 1:37 PM

Change 933459 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: Add support for providing hardcoded list of servers

https://gerrit.wikimedia.org/r/933459

gerritbot added a comment.Jun 27 2023, 1:56 PM

Change 933459 merged by Jbond:

[operations/puppet@production] puppetserver: Add support for providing hardcoded list of servers

https://gerrit.wikimedia.org/r/933459

gerritbot added a comment.Jun 27 2023, 2:56 PM

Change 933485 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] merge_cli: Make the paths a parameter and add them to a config file

https://gerrit.wikimedia.org/r/933485

gerritbot added a comment.Jun 27 2023, 3:08 PM

Change 933485 merged by Jbond:

[operations/puppet@production] merge_cli: Make the paths a parameter and add them to a config file

https://gerrit.wikimedia.org/r/933485

gerritbot added a comment.Jun 27 2023, 3:37 PM

Change 933422 had a related patch set uploaded (by Jbond; author: Jbond):

[operations/puppet@production] merge_cli: Make the paths a parameter and add them to a config file

https://gerrit.wikimedia.org/r/933422

gerritbot added a comment.Jun 27 2023, 6:25 PM

Change 933608 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetdb: Add ability to configure secondary proxies

https://gerrit.wikimedia.org/r/933608

gerritbot added a comment.Jun 28 2023, 11:25 AM

Change 933887 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] merge_cli: migrate puppetmasteres to module version of merge_cli

https://gerrit.wikimedia.org/r/933887

gerritbot added a comment.Jun 28 2023, 11:59 AM

Change 933887 merged by Jbond:

[operations/puppet@production] merge_cli: migrate puppetmasteres to module version of merge_cli

https://gerrit.wikimedia.org/r/933887

gerritbot added a comment.Jun 28 2023, 12:14 PM

Change 933422 merged by Jbond:

[operations/puppet@production] merge_cli: Make the paths a parameter and add them to a config file

https://gerrit.wikimedia.org/r/933422

jbond closed subtask T339913: investigate using cfssl to provide a itermediate certificate for puppetserver as Resolved.Jun 28 2023, 12:46 PM
jbond closed subtask T340635: puppet-merge: add new puppetserveres to puppet merge as Resolved.Jun 29 2023, 11:00 AM
jbond changed the status of subtask T340557: PKI: add the new puppet CA to the pki infrastructre from Open to In Progress.
jbond closed subtask T340557: PKI: add the new puppet CA to the pki infrastructre as Resolved.Jun 29 2023, 11:48 AM
jbond reopened subtask T340557: PKI: add the new puppet CA to the pki infrastructre as Open.Jun 29 2023, 4:19 PM
jbond updated the task description. (Show Details)Jul 3 2023, 3:38 PM
jbond merged a task: T265138: Work required to prepare for puppet 7.
jbond added subscribers: RhinosF1, BTullis, Paladox and 5 others.
jbond closed subtask T340557: PKI: add the new puppet CA to the pki infrastructre as Resolved.Jul 4 2023, 10:58 AM
jbond changed the status of subtask T341053: Configure SRV records for new puppet infrastructure from Open to In Progress.Jul 4 2023, 11:00 AM
jbond added a project: Puppet-Infrastructure.Jul 4 2023, 11:28 AM
jbond added a subtask: T341071: puppet7: drop instances of :undef in erb files.Jul 4 2023, 1:52 PM
jbond closed subtask T340563: puppetdb; allow connections from puppetserver over ipv6 as Invalid.Jul 5 2023, 8:19 AM
gerritbot added a comment.Jul 5 2023, 12:25 PM

Change 935731 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetmaster::puppetdb: add documentation

https://gerrit.wikimedia.org/r/935731

gerritbot added a comment.Jul 5 2023, 12:40 PM

Change 935731 merged by Jbond:

[operations/puppet@production] puppetmaster::puppetdb: add documentation

https://gerrit.wikimedia.org/r/935731

Sethabathaba subscribed.Jul 6 2023, 6:32 PM
jbond closed subtask T321783: Setup an initial bookworm host pair with Puppetdb 7 as Resolved.Jul 7 2023, 3:33 PM
jbond added a subtask: T236373: update pcc with puppet 7 support.Jul 7 2023, 5:48 PM
gerritbot added a comment.Jul 11 2023, 9:20 AM

Change 937049 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetmaster: move source scripts under the puppetserver name space

https://gerrit.wikimedia.org/r/937049

gerritbot added a comment.Jul 11 2023, 9:23 AM

Change 937049 merged by Jbond:

[operations/puppet@production] puppetmaster: move source scripts under the puppetserver name space

https://gerrit.wikimedia.org/r/937049

jbond closed subtask T341053: Configure SRV records for new puppet infrastructure as Resolved.Jul 17 2023, 3:56 PM
jbond changed the status of subtask T342125: puppetserver monitoring from Open to In Progress.Jul 18 2023, 2:19 PM
gerritbot added a comment.Jul 19 2023, 10:11 AM

Change 939643 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: do not notify puppetserver service on changes

https://gerrit.wikimedia.org/r/939643

jbond changed the status of subtask T342214: update systems to use new puppetdb instance from Open to In Progress.Jul 19 2023, 10:29 AM
jbond changed the status of subtask T342125: puppetserver monitoring from In Progress to Stalled.
gerritbot added a comment.Jul 21 2023, 2:32 PM

Change 940366 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] motd: Add motd indicating services which need restarting

https://gerrit.wikimedia.org/r/940366

gerritbot added a comment.Jul 21 2023, 2:34 PM

Change 940365 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: Add a file to track when a service restart or reload is

https://gerrit.wikimedia.org/r/940365

gerritbot added a comment.Jul 27 2023, 4:08 PM

Change 939643 merged by Jbond:

[operations/puppet@production] puppetserver: make notifying configurable

https://gerrit.wikimedia.org/r/939643

gerritbot added a comment.Jul 27 2023, 4:08 PM

Change 940365 merged by Jbond:

[operations/puppet@production] puppetserver: Add a file to track when a service restart or reload is

https://gerrit.wikimedia.org/r/940365

gerritbot added a comment.Jul 27 2023, 4:08 PM

Change 940366 merged by Jbond:

[operations/puppet@production] motd: Add motd indicating services which need restarting

https://gerrit.wikimedia.org/r/940366

jbond changed the status of subtask T341056: volatile: We need to configure the volatile endpoint on puppetserveres from Open to In Progress.Aug 14 2023, 1:43 PM
gerritbot added a comment.Aug 17 2023, 2:12 PM

Change 949980 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: dont auto restart puppet server

https://gerrit.wikimedia.org/r/949980

gerritbot added a comment.Aug 17 2023, 2:12 PM

Change 949980 merged by Jbond:

[operations/puppet@production] puppetserver: dont auto restart puppet server

https://gerrit.wikimedia.org/r/949980

jbond closed subtask T341717: Move config-master to dedicated VMs as Resolved.Aug 22 2023, 9:11 AM
jbond closed subtask T341721: Add conftool::master to puppetserver as Resolved.
gerritbot added a comment.Aug 23 2023, 11:41 AM

Change 919291 merged by Jbond:

[operations/puppet@production] httpyaml: replace URI.escape

https://gerrit.wikimedia.org/r/919291

jbond changed the status of subtask T345067: reimage puppetmasteres to puppetserveres from Open to In Progress.Aug 29 2023, 11:24 AM
nshahquinn-wmf mentioned this in T345309: Wmfdata's presto.run fails with Urllib3 v2 or higher.Sep 1 2023, 5:34 PM
jbond closed subtask T342214: update systems to use new puppetdb instance as Resolved.Sep 4 2023, 11:16 AM
jbond closed subtask T338811: puppetdb7 cross pollination as Resolved.Sep 6 2023, 3:22 PM
jbond added a subtask: T345719: investigate timers on puppetservers.Sep 7 2023, 8:56 AM
gerritbot added a comment.Sep 7 2023, 1:50 PM

Change 955731 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetmaster::servers: remove puppetserveres from puppetmaster::servers hash

https://gerrit.wikimedia.org/r/955731

jbond closed subtask T345702: Ensure standalone puppet works with puppet7 as Resolved.Sep 8 2023, 10:17 AM
gerritbot added a comment.Sep 8 2023, 11:21 AM

Change 955731 merged by Jbond:

[operations/puppet@production] puppetmaster::servers: remove puppetservers from puppetmaster::servers hash

https://gerrit.wikimedia.org/r/955731

Lucas_Werkmeister_WMDE unsubscribed.Sep 8 2023, 11:32 AM
gerritbot added a comment.Sep 8 2023, 11:42 AM

Change 955911 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetmaster: add pupetserveres back to git private

https://gerrit.wikimedia.org/r/955911

gerritbot added a comment.Sep 8 2023, 11:54 AM

Change 955911 merged by Jbond:

[operations/puppet@production] puppetmaster: add pupetserveres back to git private

https://gerrit.wikimedia.org/r/955911

gerritbot added a comment.Sep 26 2023, 4:24 PM

Change 961153 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] cumin: Add puppetserver alias

https://gerrit.wikimedia.org/r/961153

gerritbot added a comment.Sep 26 2023, 4:33 PM

Change 961153 merged by Jbond:

[operations/puppet@production] cumin: Add puppetserver alias

https://gerrit.wikimedia.org/r/961153

jbond closed subtask T347410: update netbox sync to also sync to puppetservers as Resolved.Sep 27 2023, 10:20 AM
jbond closed subtask T345719: investigate timers on puppetservers as Resolved.Oct 2 2023, 1:20 PM
gerritbot added a comment.Oct 2 2023, 3:16 PM

Change 962638 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] puppetserver: add logstash reporter

https://gerrit.wikimedia.org/r/962638

gerritbot added a comment.Oct 2 2023, 3:18 PM

Change 962638 merged by Jbond:

[operations/puppet@production] puppetserver: add logstash reporter

https://gerrit.wikimedia.org/r/962638

jbond closed subtask T341373: convert uses of query_resources as Resolved.Oct 5 2023, 12:06 PM
jbond changed the status of subtask T347286: decomission puppetboard[12]002 from Open to In Progress.
jbond closed subtask T347286: decomission puppetboard[12]002 as Resolved.Oct 5 2023, 1:21 PM
jbond closed subtask T347285: decomission puppetdb[12]002 as Resolved.
jbond changed the status of subtask T348319: Update reimage cookbooks to work with puppet7 from Open to In Progress.Oct 6 2023, 12:18 PM
jbond removed a subtask: T348883: re-write compile_redirects function.Oct 19 2023, 11:53 AM
jbond changed the status of subtask T349291: Fix outstanding puppet 7 issues from Open to In Progress.
jbond changed the status of subtask T349915: find solution for acmechief in puppet7 from Open to In Progress.Oct 27 2023, 3:54 PM
Volans subscribed.Nov 6 2023, 2:32 PM

@jbond I think that the decommission cookbook needs some adjustment too, both because it checks some git checkout on the puppetmaster's CA and also because it does remove the certificate.

jbond closed subtask T236373: update pcc with puppet 7 support as Resolved.Nov 6 2023, 4:03 PM
jbond closed subtask T348272: Fix outstanding puppet 7 issue as Invalid.Nov 13 2023, 3:46 PM
jbond closed subtask T347390: Create backups for puppetservers as Resolved.Nov 13 2023, 4:05 PM
jbond closed subtask T340739: Create cookbook to migrate servers from the puppetmasters to puppetservers as Resolved.Nov 13 2023, 4:13 PM
jbond closed subtask T349291: Fix outstanding puppet 7 issues as Resolved.
jbond closed subtask T349915: find solution for acmechief in puppet7 as Resolved.
jbond changed the status of subtask T340741: expose_puppet_certs: Services will need to trust the new ca from Open to In Progress.Nov 13 2023, 4:24 PM
Volans closed subtask T348319: Update reimage cookbooks to work with puppet7 as Resolved.Nov 14 2023, 1:21 PM
jbond closed subtask T341056: volatile: We need to configure the volatile endpoint on puppetserveres as Resolved.Nov 14 2023, 2:46 PM
MoritzMuehlenhoff closed subtask T356991: Repurpose puppetmaster2003 as puppetserver2003 as Resolved.Feb 15 2024, 4:21 PM
MoritzMuehlenhoff closed subtask T357093: Decommission puppetmaster1002 as Resolved.Wed, Apr 3, 9:12 AM
MoritzMuehlenhoff reopened subtask T357093: Decommission puppetmaster1002 as Open.Wed, Apr 3, 9:16 AM
VRiley-WMF closed subtask T357093: Decommission puppetmaster1002 as Resolved.Fri, Apr 5, 6:38 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL