Page MenuHomePhabricator

Create 'titan' role and put new hosts in service
Closed, ResolvedPublic

Description

This task tracks putting in production titan role, and related hosts, and have them in rotation together with thanos-fe hosts as part of serving thanos-query.discovery.wmnet

Event Timeline

Change 938866 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] New role: titan

https://gerrit.wikimedia.org/r/938866

Change 938867 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] prometheus: create /etc/prometheus when needed

https://gerrit.wikimedia.org/r/938867

Change 938866 merged by Filippo Giunchedi:

[operations/puppet@production] New role: titan

https://gerrit.wikimedia.org/r/938866

Change 938867 merged by Filippo Giunchedi:

[operations/puppet@production] prometheus: create /etc/prometheus when needed

https://gerrit.wikimedia.org/r/938867

fgiunchedi moved this task from Doing to Up next on the User-fgiunchedi board.
• lmata triaged this task as Medium priority.Jul 18 2023, 5:28 PM
• lmata moved this task from Inbox to Prioritized on the Observability-Metrics board.
• lmata moved this task from Inbox to Up next on the SRE Observability (FY2023/2024-Q1) board.
• lmata subscribed.

Since this is part of core work would this be better fitted as "high" priority?

fgiunchedi raised the priority of this task from Medium to High.Jul 19 2023, 8:32 AM

Sure why not, {{done}}

Change 956782 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] site: apply role to titan hosts

https://gerrit.wikimedia.org/r/956782

Change 956782 merged by Filippo Giunchedi:

[operations/puppet@production] site: apply role to titan hosts

https://gerrit.wikimedia.org/r/956782

Change 956788 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] hieradata: add titan hosts to thanos frontends

https://gerrit.wikimedia.org/r/956788

Change 956788 merged by Filippo Giunchedi:

[operations/puppet@production] hieradata: add titan hosts to thanos frontends

https://gerrit.wikimedia.org/r/956788

Change 956800 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] conftool-data: add titan hosts to thanos

https://gerrit.wikimedia.org/r/956800

Change 956800 merged by Filippo Giunchedi:

[operations/puppet@production] conftool-data: add titan hosts to thanos

https://gerrit.wikimedia.org/r/956800

Mentioned in SAL (#wikimedia-operations) [2023-09-12T11:43:39Z] <godog> pool titan hosts alongside thanos-fe for thanos-query / thanos-web services - T341999

Mentioned in SAL (#wikimedia-operations) [2023-09-12T11:57:27Z] <godog> pool thanos[12]001 for thanos.w.o - T341999

Change 956840 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] cumin: add titan aliases

https://gerrit.wikimedia.org/r/956840

Change 956866 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] alerting_host: add titan to thanos-query hosts

https://gerrit.wikimedia.org/r/956866

Change 956867 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] titan: move pyrra off thanos role

https://gerrit.wikimedia.org/r/956867

Change 956866 merged by Filippo Giunchedi:

[operations/puppet@production] alerting_host: add titan to thanos-query hosts

https://gerrit.wikimedia.org/r/956866

Change 956840 merged by Filippo Giunchedi:

[operations/puppet@production] cumin: add titan aliases

https://gerrit.wikimedia.org/r/956840

fgiunchedi claimed this task.

New hosts are in service, resolving

Change 956867 merged by Filippo Giunchedi:

[operations/puppet@production] titan: move pyrra off thanos role

https://gerrit.wikimedia.org/r/956867

I was a little too hasty here, I forgot we need raid0 on these hosts to be able to store blocks to be compacted, will need to reimage the hosts

Change 956887 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):

[operations/puppet@production] install_server: use raid0 for titan

https://gerrit.wikimedia.org/r/956887

Change 956887 merged by Filippo Giunchedi:

[operations/puppet@production] install_server: use raid0 for titan

https://gerrit.wikimedia.org/r/956887

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan1001.eqiad.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan2001.codfw.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan1001.eqiad.wmnet with OS bookworm executed with errors:

  • titan1001 (FAIL)
    • Downtimed on Icinga/Alertmanager
    • Disabled Puppet
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • The reimage failed, see the cookbook logs for the details

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan1001.eqiad.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan1001.eqiad.wmnet with OS bookworm executed with errors:

  • titan1001 (FAIL)
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • The reimage failed, see the cookbook logs for the details

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan1001.eqiad.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan2001.codfw.wmnet with OS bookworm executed with errors:

  • titan2001 (FAIL)
    • Downtimed on Icinga/Alertmanager
    • Disabled Puppet
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • The reimage failed, see the cookbook logs for the details

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan2001.codfw.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan1001.eqiad.wmnet with OS bookworm completed:

  • titan1001 (WARN)
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • Host up (Debian installer)
    • Checked BIOS boot parameters are back to normal
    • Host up (new fresh bookworm OS)
    • Generated Puppet certificate
    • Signed new Puppet certificate
    • Run Puppet in NOOP mode to populate exported resources in PuppetDB
    • Found Nagios_host resource for this host in PuppetDB
    • Downtimed the new host on Icinga/Alertmanager
    • First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202309130825_filippo_2981305_titan1001.out
    • configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
    • Rebooted
    • Automatic Puppet run was successful
    • Forced a re-check of all Icinga services for the host
    • Icinga status is not optimal, downtime not removed
    • Updated Netbox data from PuppetDB
    • Cleared switch DHCP cache and MAC table for the host IP and MAC (row E/F)

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan2001.codfw.wmnet with OS bookworm completed:

  • titan2001 (PASS)
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • Host up (Debian installer)
    • Checked BIOS boot parameters are back to normal
    • Host up (new fresh bookworm OS)
    • Generated Puppet certificate
    • Signed new Puppet certificate
    • Run Puppet in NOOP mode to populate exported resources in PuppetDB
    • Found Nagios_host resource for this host in PuppetDB
    • Downtimed the new host on Icinga/Alertmanager
    • First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202309130833_filippo_3001079_titan2001.out
    • configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
    • Rebooted
    • Automatic Puppet run was successful
    • Forced a re-check of all Icinga services for the host
    • Icinga status is optimal
    • Icinga downtime removed
    • Updated Netbox data from PuppetDB

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan2002.codfw.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan1002.eqiad.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan2002.codfw.wmnet with OS bookworm executed with errors:

  • titan2002 (FAIL)
    • Downtimed on Icinga/Alertmanager
    • Disabled Puppet
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • The reimage failed, see the cookbook logs for the details

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan1002.eqiad.wmnet with OS bookworm executed with errors:

  • titan1002 (FAIL)
    • Downtimed on Icinga/Alertmanager
    • Disabled Puppet
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • The reimage failed, see the cookbook logs for the details

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan2002.codfw.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan1002.eqiad.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan2002.codfw.wmnet with OS bookworm executed with errors:

  • titan2002 (FAIL)
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • Host up (Debian installer)
    • Checked BIOS boot parameters are back to normal
    • Host up (new fresh bookworm OS)
    • Generated Puppet certificate
    • Signed new Puppet certificate
    • Run Puppet in NOOP mode to populate exported resources in PuppetDB
    • The reimage failed, see the cookbook logs for the details

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan2002.codfw.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan2002.codfw.wmnet with OS bookworm executed with errors:

  • titan2002 (FAIL)
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • The reimage failed, see the cookbook logs for the details

Cookbook cookbooks.sre.hosts.reimage was started by filippo@cumin1001 for host titan2002.codfw.wmnet with OS bookworm

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan1002.eqiad.wmnet with OS bookworm completed:

  • titan1002 (PASS)
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • Host up (Debian installer)
    • Checked BIOS boot parameters are back to normal
    • Host up (new fresh bookworm OS)
    • Generated Puppet certificate
    • Signed new Puppet certificate
    • Run Puppet in NOOP mode to populate exported resources in PuppetDB
    • Found Nagios_host resource for this host in PuppetDB
    • Downtimed the new host on Icinga/Alertmanager
    • First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202309131024_filippo_3151773_titan1002.out
    • configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
    • Rebooted
    • Automatic Puppet run was successful
    • Forced a re-check of all Icinga services for the host
    • Icinga status is optimal
    • Icinga downtime removed
    • Updated Netbox data from PuppetDB

Cookbook cookbooks.sre.hosts.reimage started by filippo@cumin1001 for host titan2002.codfw.wmnet with OS bookworm completed:

  • titan2002 (PASS)
    • Removed from Puppet and PuppetDB if present
    • Deleted any existing Puppet certificate
    • Removed from Debmonitor if present
    • Forced PXE for next reboot
    • Host rebooted via IPMI
    • Host up (Debian installer)
    • Checked BIOS boot parameters are back to normal
    • Host up (new fresh bookworm OS)
    • Generated Puppet certificate
    • Signed new Puppet certificate
    • Run Puppet in NOOP mode to populate exported resources in PuppetDB
    • Found Nagios_host resource for this host in PuppetDB
    • Downtimed the new host on Icinga/Alertmanager
    • First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202309131054_filippo_3167758_titan2002.out
    • configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
    • Rebooted
    • Automatic Puppet run was successful
    • Forced a re-check of all Icinga services for the host
    • Icinga status is optimal
    • Icinga downtime removed
    • Updated Netbox data from PuppetDB

Hosts reimaged with raid0, resolving