Page MenuHomePhabricator
Create Task
Maniphest T365798

Shutdown of Puppet 5 servers
Open, HighPublic
Actions

Description

This meta task tracks remaining steps which need to happen before we can retire the Puppet 5 servers

Details

Related Changes in Gerrit:
SubjectAuthorRepoBranchLines +/-
Remove puppetmaster::gitpuppetMuehlenhoffoperations/puppetproduction+0 -39
Remove obsolete Hiera fileMuehlenhoffoperations/puppetproduction+0 -3
Remove Puppet 5 support from SpicerackMuehlenhoffoperations/software/spicerackmaster+3 -421
Remove obsolete alertMuehlenhoffoperations/alertsmaster+0 -119
puppetserver: Use the hooks from Puppet 7Muehlenhoffoperations/puppetproduction+3 -3
Add separate puppetserver hooks for the private repoMuehlenhoffoperations/puppetproduction+15 -0
pcc_update_facts: Rename variablesMuehlenhoffoperations/puppetproduction+14 -14
Remove role::insetup::busterMuehlenhoffoperations/puppetproduction+0 -8
Revert "puppetdb: Drop firewall rule for access to Puppet 5 servers"David Carooperations/puppetproduction+12 -0
Reapply "Update two hooks to the variants from the puppetserver module"Muehlenhoffoperations/puppetproduction+2 -2
Remove various Hiera files only necessary for Puppet 5Muehlenhoffoperations/puppetproduction+0 -76
Remove create_ecdsa_certMuehlenhoffoperations/puppetproduction+0 -32
puppetdb: Allow access for cloud puppetserversMuehlenhoffoperations/puppetproduction+19 -8
puppetdb: Drop firewall rule for access to Puppet 5 serversMuehlenhoffoperations/puppetproduction+0 -12
puppetserver: Update two hooks to the variants from the puppetserver moduleMuehlenhoffoperations/puppetproduction+2 -2
Move the puppetmaster puppetdb client class under puppet_compilerMuehlenhoffoperations/puppetproduction+5 -13
Remove puppetmaster class and related classesMuehlenhoffoperations/puppetproduction+0 -762
Remove puppetmaster::base_repoMuehlenhoffoperations/puppetproduction+0 -28
Stop running the IP reputation dump on the Puppet 5 serversMuehlenhoffoperations/puppetproduction+1 -1
Add two git hooks from the puppetmaster module to the pupperserver moduleMuehlenhoffoperations/puppetproduction+32 -0
Remove puppetmaster::geoipMuehlenhoffoperations/puppetproduction+0 -98
Puppetserver: Update hooksMuehlenhoffoperations/puppetproduction+3 -3
Remove puppetmaster::ca_server and related classesMuehlenhoffoperations/puppetproduction+0 -41
Remove profile::puppetmaster::frontendMuehlenhoffoperations/puppetproduction+0 -148
Remove profile::puppetmaster::commonMuehlenhoffoperations/puppetproduction+0 -90
Revert "Remove puppetmaster::gitclone and related classes"Muehlenhoffoperations/puppetproduction+396 -0
Remove puppetmaster::gitclone and related classesMuehlenhoffoperations/puppetproduction+0 -387
Remove puppetmaster::web_frontend and related classesMuehlenhoffoperations/puppetproduction+0 -198
Remove puppetmaster::passenger and related filesMuehlenhoffoperations/puppetproduction+0 -114
Remove puppetmaster:sslMuehlenhoffoperations/puppetproduction+0 -62
Remove puppetmaster::rsync and related classesMuehlenhoffoperations/puppetproduction+0 -51
Remove puppetmaster::monitoring and related classesMuehlenhoffoperations/puppetproduction+0 -176
Remove puppetmaster::r10kMuehlenhoffoperations/puppetproduction+0 -47
profile::puppet::agent: Remove support for BusterMuehlenhoffoperations/puppetproduction+41 -52
Remove now obsolete Cumin aliases for Buster and Puppet 5Muehlenhoffoperations/puppetproduction+1 -2
sre.hosts.decommission: Hack to allow decommission of puppetmaster1001Muehlenhoffoperations/cookbooksmaster+2 -2
Remove puppetmaster::frontend roleMuehlenhoffoperations/puppetproduction+0 -26
sre.puppet.sync-netbox-hiera: Remove support for Puppet 5Muehlenhoffoperations/cookbooksmaster+1 -18
sre.ganeti.makevm: Stop passing the puppetversionMuehlenhoffoperations/cookbooksmaster+1 -3
Remove puppetmaster2001 from active Puppet 5 serversMuehlenhoffoperations/puppetproduction+0 -3
Remove puppetmaster role from puppetmaster2001Muehlenhoffoperations/puppetproduction+5 -1
Remove ip_reputation_vendors from puppetmastersMuehlenhoffoperations/puppetproduction+0 -19
Remove ip_reputation_vendors from Puppet 5 serversMuehlenhoffoperations/puppetproduction+0 -16
Remove puppetmaster::updatenetbootMuehlenhoffoperations/puppetproduction+0 -21
Remove Puppet 5 volatile directory from backupsMuehlenhoffoperations/puppetproduction+0 -4
Copy yamllint into the puppetserver module and use itMuehlenhoffoperations/puppetproduction+10 -1
Remove remaining traces of profile::puppet::agent::force_puppet7Muehlenhoffoperations/puppetproduction+0 -8
Move validatecloudvpsfqdn.py out of the puppetmaster moduleMuehlenhoffoperations/puppetproduction+2 -2
Rename enc_client and move under puppetserverMuehlenhoffoperations/puppetproduction+8 -8
Remove puppetmaster spec filesMuehlenhoffoperations/puppetproduction+0 -200
Remove profile::puppet::agent::force_puppet7 from traffic hostsMuehlenhoffoperations/puppetproduction+0 -17
Remove profile::puppet::agent::force_puppet7 from Data Platform rolesMuehlenhoffoperations/puppetproduction+2 -60
Remove profile::puppet::agent::force_puppet7 from search rolesMuehlenhoffoperations/puppetproduction+2 -29
Remove profile::puppet::agent::force_puppet7 for Cloud VPSMuehlenhoffoperations/puppetproduction+0 -8
Remove profile::puppet::agent::force_puppet7 from IF rolesMuehlenhoffoperations/puppetproduction+0 -66
Remove profile::puppet::agent::force_puppet7 from serviceops rolesMuehlenhoffoperations/puppetproduction+2 -41
Remove profile::puppet::agent::force_puppet7 from cloud rolesMuehlenhoffoperations/puppetproduction+0 -35
Remove profile::puppet::agent::force_puppet7 from observability rolesMuehlenhoffoperations/puppetproduction+0 -28
Remove profile::puppet::agent::force_puppet7 from collab rolesMuehlenhoffoperations/puppetproduction+1 -32
Remove profile::puppet::agent::force_puppet7 from ML rolesMuehlenhoffoperations/puppetproduction+1 -26
Remove profile::puppet::agent::force_puppet7 from DB hostsMuehlenhoffoperations/puppetproduction+0 -29
Remove profile::puppet::agent::force_puppet7 from Cassandra hostsMuehlenhoffoperations/puppetproduction+0 -7
Remove profile::puppet::agent::force_puppet7 from swift/ceph hostsMuehlenhoffoperations/puppetproduction+0 -9
Remove profile::puppet::agent::force_puppet7 from backup hostsMuehlenhoffoperations/puppetproduction+0 -18
Remove profile::puppet::agent::force_puppet7 from insetup rolesMuehlenhoffoperations/puppetproduction+0 -20
puppet: Remove the force_puppet7 parameterMuehlenhoffoperations/puppetproduction+0 -5
Remove Puppet 5 settings from late_command.shMuehlenhoffoperations/puppetproduction+31 -38
Rename puppetmaster::gitsync and move under puppetserverMuehlenhoffoperations/puppetproduction+5 -5
Rename stale_certs_exporter and move under puppetserverMuehlenhoffoperations/puppetproduction+2 -2
pontoon: Cleanup dead projectsMuehlenhoffoperations/puppetproduction+0 -80
Remove puppetmaster::scriptsMuehlenhoffoperations/puppetproduction+0 -74
Only select Puppet version based on the Debian releaseMuehlenhoffoperations/puppetproduction+2 -6
Remove now obsolete spec test for Puppet 5 facts uploadMuehlenhoffoperations/puppetproduction+0 -11
Remove puppetmaster::backend role and related Hiera settingsMuehlenhoffoperations/puppetproduction+1 -126
puppetdb: Remove access for puppetmaster1003Muehlenhoffoperations/puppetproduction+0 -1
Remove puppetmaster::backend role from puppetmaster1003Muehlenhoffoperations/puppetproduction+1 -1
Remove puppetmaster1003 from active Puppet 5 serversMuehlenhoffoperations/puppetproduction+0 -1
Remove puppetmaster2002 from allowed hostsMuehlenhoffoperations/puppetproduction+0 -1
Remove puppetmaster::backend role from puppetmaster2002Muehlenhoffoperations/puppetproduction+1 -1
Remove puppetmaster2002Muehlenhoffoperations/puppetproduction+0 -1
Stop using puppetmaster2002 for Blackbox smoke testsMuehlenhoffoperations/puppetproduction+1 -1
Remove one additional obsolete Puppet 5 for Cloud VPS classMuehlenhoffoperations/puppetproduction+0 -23
Remove obsolete WMCS Puppet 5 master classes no longer used/neededMuehlenhoffoperations/puppetproduction+0 -24
Remove obsolete puppetmaster::certmanager classMuehlenhoffoperations/puppetproduction+1 -28
Copy puppet git hooks to puppetserver moduleMuehlenhoffoperations/puppetproduction+21 -0
Move Puppet CA monitoring out of the puppetmaster moduleMuehlenhoffoperations/puppetproduction+5 -8
puppetdb: Move JVM config out of the puppetmaster moduleMuehlenhoffoperations/puppetproduction+1 -1
Remove puppet checkout on pybaltestMuehlenhoffoperations/puppetproduction+0 -6
pontoon: Remove more puppet 5 leftoversMuehlenhoffoperations/puppetproduction+0 -11
Move puppetdb.tuning.conf templateMuehlenhoffoperations/puppetproduction+1 -3
Move update-netboot-image.sh to the puppetserver moduleMuehlenhoffoperations/puppetproduction+2 -4
swift::proxy: Limit access to swift ring sync to Puppet 7 serversMuehlenhoffoperations/puppetproduction+1 -2
Remove mcrouter CA setupMuehlenhoffoperations/puppetproduction+0 -390
thanos: Limit access to swift ring sync to Puppet 7 serversMuehlenhoffoperations/puppetproduction+1 -2
Stop syncing swift rings on Puppet 5 frontendsMuehlenhoffoperations/puppetproduction+0 -4
Remove Pontoon support for Puppet 5 puppet mastersMuehlenhoffoperations/puppetproduction+0 -500
puppetserver::git::private: Use wrapper from puppetserver moduleMuehlenhoffoperations/puppetproduction+1 -3
Show related patches Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenNoneT330490 Next steps for Puppet 7
 OpenNoneT365798 Shutdown of Puppet 5 servers
 ResolvedMoritzMuehlenhoffT357750 Phase out cergen
 ResolvedBTullisT360412 Phase out cergen for Data Platform services
 ResolvedDzahnT360413 Phase out cergen for Collaboration Services services
 ResolvedDzahnT369796 Puppet CA certificate phabricator.discovery.wmnet is about to expire
 Resolvedandrea.denisseT360414 Phase out cergen for Observability services
 ResolvedBTullisT360439 Phase out cergen for Search Platform services
 ResolvedelukeyT356412 Consolidate TLS cert puppetry for ms and thanos swift frontends
 ResolvedCDobbinsT360506 Migrate purged away from cergen-issued certificate
 ResolvedMoritzMuehlenhoffT360636 Phase out cergen for ServiceOps services
 ResolvedMoritzMuehlenhoffT360778 Move maps/karthoterian to PKI/cfssl
 ResolvedJgreenT360779 Phase out cergen for Fundraising services
 ResolvedMoritzMuehlenhoffT364622 Review/cleanup content of /srv/git/private/modules/secret/secrets/ssl in the private repo
 ResolvedRequesthasharT417887 Archive the cergen repository
 ResolvedMoritzMuehlenhoffT349619 Migrate roles to puppet7
 ResolvedjbondT350118 Investigate PKI errors
 ResolvedjbondT351181 syslog tls clients failing to connect to centrallog2002 post puppet7 migration
 ResolvedjbondT324623 Switch rsyslog from gtls to ossl
 ResolvedABran-WMFT352974 puppet7 on cumin breaks database connections
 DeclinedBTullisT354411 Revert dbstore migration from puppet7 to puppet5
 ResolvedLadsgroupT354719 Deploy grants for cumin1002
 ResolveddcaroT309789 [ceph] Upgrade hosts to bullseye
 ResolveddcaroT369026 [reimage,ceph] reimaging cloudcephosd hosts gets stuck in network configuration screen
 ResolvedAndrewT383817 partman vs cloudcephosd1012
 ResolvedNoneT396940 cloudcephosd1xxxx.private.eqiad.wikimedia.cloud
 ResolvedbkingT354959 Migrate Search Platform-owned hosts to Puppet 7
 ResolvedMoritzMuehlenhoffT365799 Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7
 ResolvedMoritzMuehlenhoffT367399 Default to the Puppet 7 PCC CI test, make it voting and eventually remove the Puppet 5 one
 ResolvedelukeyT368023 Move the private Puppet repository to puppetserver1001
 ResolvedelukeyT371252 conftool and pyparsing requirements
 ResolvedRequestJhancock.wmT412783 decommission puppetmaster2002
 OpenNoneT415255 Remove Puppet 5 CA cert from wmf-certificates cert bundle
 OpenNoneT418559 Remove Puppet 5 dependencies from PCC

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
gerritbot added a comment.Jan 19 2026, 8:42 AM

Change #1227694 merged by Muehlenhoff:

[operations/puppet@production] Move validatecloudvpsfqdn.py out of the puppetmaster module

https://gerrit.wikimedia.org/r/1227694

gerritbot added a comment.Jan 19 2026, 8:59 AM

Change #1227616 merged by Muehlenhoff:

[operations/puppet@production] Remove remaining traces of profile::puppet::agent::force_puppet7

https://gerrit.wikimedia.org/r/1227616

gerritbot added a comment.Jan 19 2026, 10:37 AM

Change #1227702 merged by Muehlenhoff:

[operations/puppet@production] Copy yamllint into the puppetserver module and use it

https://gerrit.wikimedia.org/r/1227702

gerritbot added a comment.Jan 20 2026, 12:11 PM

Change #1229107 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::updatenetboot

https://gerrit.wikimedia.org/r/1229107

gerritbot added a comment.Jan 20 2026, 12:30 PM

Change #1229110 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove Puppet 5 volatile directory from backups

https://gerrit.wikimedia.org/r/1229110

gerritbot added a comment.Jan 21 2026, 9:58 AM

Change #1229110 merged by Muehlenhoff:

[operations/puppet@production] Remove Puppet 5 volatile directory from backups

https://gerrit.wikimedia.org/r/1229110

gerritbot added a comment.Jan 21 2026, 10:03 AM

Change #1229107 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::updatenetboot

https://gerrit.wikimedia.org/r/1229107

MoritzMuehlenhoff created subtask T415255: Remove Puppet 5 CA cert from wmf-certificates cert bundle.Jan 22 2026, 12:11 PM
gerritbot added a comment.Jan 22 2026, 1:32 PM

Change #1230331 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster role from puppetmaster2001

https://gerrit.wikimedia.org/r/1230331

gerritbot added a comment.Jan 22 2026, 1:32 PM

Change #1230332 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster2001 from active Puppet 5 servers

https://gerrit.wikimedia.org/r/1230332

gerritbot added a comment.Jan 23 2026, 12:05 PM

Change #1230912 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Stop running the IP reputation dump on the Puppet 5 servers

https://gerrit.wikimedia.org/r/1230912

gerritbot added a comment.Jan 23 2026, 12:05 PM

Change #1230913 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove ip_reputation_vendors from Puppet 5 servers

https://gerrit.wikimedia.org/r/1230913

gerritbot added a comment.Jan 23 2026, 12:18 PM

Change #1230914 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove ip_reputation_vendors from puppetmasters

https://gerrit.wikimedia.org/r/1230914

gerritbot added a comment.Jan 23 2026, 12:19 PM

Change #1230913 abandoned by Muehlenhoff:

[operations/puppet@production] Remove ip_reputation_vendors from Puppet 5 servers

Reason:

dupe

https://gerrit.wikimedia.org/r/1230913

Stashbot added a comment.Feb 4 2026, 12:53 PM

Mentioned in SAL (#wikimedia-operations) [2026-02-04T12:53:00Z] <moritzm> remove legacy eventstreams-internal discovery certificate T365798

Stashbot added a comment.Feb 4 2026, 1:00 PM

Mentioned in SAL (#wikimedia-operations) [2026-02-04T13:00:21Z] <moritzm> remove legacy wdqs-internal discovery certificate T365798

Stashbot added a comment.Feb 4 2026, 2:27 PM

Mentioned in SAL (#wikimedia-operations) [2026-02-04T14:27:52Z] <moritzm> remove legacy kibana discovery certificate T365798

gerritbot added a comment.Feb 5 2026, 3:19 PM

Change #1230331 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster role from puppetmaster2001

https://gerrit.wikimedia.org/r/1230331

ops-monitoring-bot added a comment.Feb 5 2026, 3:40 PM

cookbooks.sre.hosts.decommission executed by jmm@cumin2002 for hosts: puppetmaster2001.codfw.wmnet

  • puppetmaster2001.codfw.wmnet (PASS)
    • Downtimed host on Icinga/Alertmanager
    • Found physical host
    • Downtimed management interface on Alertmanager
    • Wiped all swraid, partition-table and filesystem signatures
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc)
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
gerritbot added a comment.Feb 6 2026, 10:35 AM

Change #1230332 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster2001 from active Puppet 5 servers

https://gerrit.wikimedia.org/r/1230332

gerritbot added a comment.Feb 9 2026, 4:17 PM

Change #1237942 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/cookbooks@master] sre.ganeti.makevm: Stop passing the puppetversion

https://gerrit.wikimedia.org/r/1237942

gerritbot added a comment.Feb 10 2026, 9:17 AM

Change #1237942 merged by Muehlenhoff:

[operations/cookbooks@master] sre.ganeti.makevm: Stop passing the puppetversion

https://gerrit.wikimedia.org/r/1237942

gerritbot added a comment.Feb 13 2026, 9:56 AM

Change #1239314 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/cookbooks@master] sre.hosts.decommission: Hack to allow decommission of puppetmaster1001

https://gerrit.wikimedia.org/r/1239314

ops-monitoring-bot added a comment.Feb 16 2026, 11:01 AM

cookbooks.sre.hosts.decommission executed by jmm@cumin2002 for hosts: puppetmaster1001.eqiad.wmnet

  • puppetmaster1001.eqiad.wmnet (PASS)
    • Downtimed host on Icinga/Alertmanager
    • Found physical host
    • Downtimed management interface on Alertmanager
    • Wiped all swraid, partition-table and filesystem signatures
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc)
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • COMMON_STEPS (FAIL)
    • Failed to run the sre.dns.netbox cookbook, run it manually

ERROR: some step on some host failed, check the bolded items above

gerritbot added a comment.Feb 16 2026, 11:04 AM

Change #1239638 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/cookbooks@master] sre.puppet.sync-netbox-hiera: Remove support for Puppet 5

https://gerrit.wikimedia.org/r/1239638

gerritbot added a comment.Feb 16 2026, 11:23 AM

Change #1239638 merged by Muehlenhoff:

[operations/cookbooks@master] sre.puppet.sync-netbox-hiera: Remove support for Puppet 5

https://gerrit.wikimedia.org/r/1239638

gerritbot added a comment.Feb 16 2026, 11:46 AM

Change #1239647 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] puppetdb: Drop firewall rule for access to Puppet 5 servers

https://gerrit.wikimedia.org/r/1239647

gerritbot added a comment.Feb 16 2026, 11:47 AM

Change #1239648 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove now obsolete Cumin aliases for Buster and Puppet 5

https://gerrit.wikimedia.org/r/1239648

gerritbot added a comment.Feb 16 2026, 1:20 PM

Change #1239676 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::frontend role

https://gerrit.wikimedia.org/r/1239676

gerritbot added a comment.Feb 16 2026, 2:20 PM

Change #1239676 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::frontend role

https://gerrit.wikimedia.org/r/1239676

gerritbot added a comment.Feb 16 2026, 2:21 PM

Change #1239314 abandoned by Muehlenhoff:

[operations/cookbooks@master] sre.hosts.decommission: Hack to allow decommission of puppetmaster1001

https://gerrit.wikimedia.org/r/1239314

gerritbot added a comment.Feb 16 2026, 5:19 PM

Change #1239749 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] profile::puppet::agent: Remove support for Buster

https://gerrit.wikimedia.org/r/1239749

gerritbot added a comment.Feb 17 2026, 8:32 AM

Change #1239648 merged by Muehlenhoff:

[operations/puppet@production] Remove now obsolete Cumin aliases for Buster and Puppet 5

https://gerrit.wikimedia.org/r/1239648

gerritbot added a comment.Feb 17 2026, 9:25 AM

Change #1239749 merged by Muehlenhoff:

[operations/puppet@production] profile::puppet::agent: Remove support for Buster

https://gerrit.wikimedia.org/r/1239749

gerritbot added a comment.Feb 17 2026, 9:47 AM

Change #1239891 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::monitoring and related classes

https://gerrit.wikimedia.org/r/1239891

gerritbot added a comment.Feb 17 2026, 10:09 AM

Change #1239895 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::gitclone and related classes

https://gerrit.wikimedia.org/r/1239895

gerritbot added a comment.Feb 17 2026, 10:16 AM

Change #1239897 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::r10k

https://gerrit.wikimedia.org/r/1239897

gerritbot added a comment.Feb 17 2026, 10:18 AM

Change #1239898 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::rsync and related classes

https://gerrit.wikimedia.org/r/1239898

gerritbot added a comment.Feb 17 2026, 10:21 AM

Change #1239899 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::web_frontend and related classes

https://gerrit.wikimedia.org/r/1239899

gerritbot added a comment.Feb 17 2026, 11:13 AM

Change #1239907 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::passenger and related files

https://gerrit.wikimedia.org/r/1239907

gerritbot added a comment.Feb 17 2026, 11:18 AM

Change #1239908 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] This was only used with Puppet 5.

https://gerrit.wikimedia.org/r/1239908

MoritzMuehlenhoff closed subtask T364622: Review/cleanup content of /srv/git/private/modules/secret/secrets/ssl in the private repo as Resolved.Feb 17 2026, 11:28 AM
gerritbot added a comment.Feb 18 2026, 8:19 AM

Change #1239897 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::r10k

https://gerrit.wikimedia.org/r/1239897

gerritbot added a comment.Feb 18 2026, 8:29 AM

Change #1239891 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::monitoring and related classes

https://gerrit.wikimedia.org/r/1239891

gerritbot added a comment.Feb 18 2026, 8:47 AM

Change #1239898 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::rsync and related classes

https://gerrit.wikimedia.org/r/1239898

gerritbot added a comment.Feb 18 2026, 8:56 AM

Change #1239908 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster:ssl

https://gerrit.wikimedia.org/r/1239908

gerritbot added a comment.Feb 18 2026, 9:48 AM

Change #1239907 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::passenger and related files

https://gerrit.wikimedia.org/r/1239907

gerritbot added a comment.Feb 18 2026, 10:26 AM

Change #1239899 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::web_frontend and related classes

https://gerrit.wikimedia.org/r/1239899

gerritbot added a comment.Feb 18 2026, 10:52 AM

Change #1239895 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::gitclone and related classes

https://gerrit.wikimedia.org/r/1239895

gerritbot added a comment.Feb 18 2026, 11:04 AM

Change #1240242 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Revert "Remove puppetmaster::gitclone and related classes"

https://gerrit.wikimedia.org/r/1240242

gerritbot added a comment.Feb 18 2026, 11:14 AM

Change #1240242 merged by Muehlenhoff:

[operations/puppet@production] Revert "Remove puppetmaster::gitclone and related classes"

https://gerrit.wikimedia.org/r/1240242

gerritbot added a comment.Feb 18 2026, 12:53 PM

Change #1240268 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::ca_server and related classes

https://gerrit.wikimedia.org/r/1240268

gerritbot added a comment.Feb 18 2026, 1:20 PM

Change #1240278 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Move the puppetmaster puppetdb client class under puppet_compiler

https://gerrit.wikimedia.org/r/1240278

gerritbot added a comment.Feb 18 2026, 2:26 PM

Change #1240288 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppetmaster::frontend

https://gerrit.wikimedia.org/r/1240288

gerritbot added a comment.Feb 18 2026, 3:30 PM

Change #1240317 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppetmaster::common

https://gerrit.wikimedia.org/r/1240317

gerritbot added a comment.Feb 19 2026, 9:12 AM

Change #1240317 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppetmaster::common

https://gerrit.wikimedia.org/r/1240317

gerritbot added a comment.Feb 19 2026, 9:18 AM

Change #1240288 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppetmaster::frontend

https://gerrit.wikimedia.org/r/1240288

gerritbot added a comment.Feb 19 2026, 10:20 AM

Change #1240268 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::ca_server and related classes

https://gerrit.wikimedia.org/r/1240268

gerritbot added a comment.Feb 19 2026, 12:03 PM

Change #1104627 merged by Muehlenhoff:

[operations/puppet@production] Puppetserver: Update hooks

https://gerrit.wikimedia.org/r/1104627

gerritbot added a comment.Feb 19 2026, 1:24 PM

Change #1240691 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add two git hooks from the puppetmaster module to the pupperserver module

https://gerrit.wikimedia.org/r/1240691

gerritbot added a comment.Feb 19 2026, 2:55 PM

Change #1240715 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::geoip

https://gerrit.wikimedia.org/r/1240715

gerritbot added a comment.Feb 19 2026, 3:13 PM

Change #1240715 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::geoip

https://gerrit.wikimedia.org/r/1240715

gerritbot added a comment.Feb 19 2026, 3:57 PM

Change #1240691 merged by Muehlenhoff:

[operations/puppet@production] Add two git hooks from the puppetmaster module to the pupperserver module

https://gerrit.wikimedia.org/r/1240691

gerritbot added a comment.Feb 19 2026, 6:45 PM

Change #1230912 abandoned by Muehlenhoff:

[operations/puppet@production] Stop running the IP reputation dump on the Puppet 5 servers

https://gerrit.wikimedia.org/r/1230912

gerritbot added a comment.Feb 20 2026, 8:17 AM

Change #1240853 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster class and related classes

https://gerrit.wikimedia.org/r/1240853

gerritbot added a comment.Feb 20 2026, 8:29 AM

Change #1240856 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::base_repo

https://gerrit.wikimedia.org/r/1240856

MoritzMuehlenhoff closed subtask T357750: Phase out cergen as Resolved.Feb 20 2026, 9:12 AM
gerritbot added a comment.Feb 20 2026, 10:05 AM

Change #1240877 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/spicerack@master] Remove Puppet 5 support from Spicerack

https://gerrit.wikimedia.org/r/1240877

gerritbot added a comment.Feb 20 2026, 12:13 PM

Change #1240924 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] puppetserver: Update two hooks to the variants from the puppetserver module

https://gerrit.wikimedia.org/r/1240924

gerritbot added a comment.Feb 23 2026, 7:48 AM

Change #1240856 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::base_repo

https://gerrit.wikimedia.org/r/1240856

gerritbot added a comment.Feb 23 2026, 8:04 AM

Change #1240853 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster class and related classes

https://gerrit.wikimedia.org/r/1240853

gerritbot added a comment.Feb 23 2026, 8:27 AM

Change #1240278 merged by Muehlenhoff:

[operations/puppet@production] Move the puppetmaster puppetdb client class under puppet_compiler

https://gerrit.wikimedia.org/r/1240278

gerritbot added a comment.Feb 24 2026, 11:28 AM

Change #1239647 merged by Muehlenhoff:

[operations/puppet@production] puppetdb: Drop firewall rule for access to Puppet 5 servers

https://gerrit.wikimedia.org/r/1239647

gerritbot added a comment.Feb 24 2026, 12:03 PM

Change #1243087 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove various Hiera files only necessary for Puppet 5

https://gerrit.wikimedia.org/r/1243087

gerritbot added a comment.Feb 24 2026, 12:06 PM

Change #1243090 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove create_ecdsa_cert

https://gerrit.wikimedia.org/r/1243090

gerritbot added a comment.Feb 24 2026, 12:24 PM

Change #1240924 merged by Muehlenhoff:

[operations/puppet@production] puppetserver: Update two hooks to the variants from the puppetserver module

https://gerrit.wikimedia.org/r/1240924

gerritbot added a comment.Feb 24 2026, 12:51 PM

Change #1243107 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Reapply "puppetserver: Update two hooks to the variants from the puppetserver module"

https://gerrit.wikimedia.org/r/1243107

gerritbot added a comment.Feb 24 2026, 12:54 PM

Change #1243106 had a related patch set uploaded (by David Caro; author: David Caro):

[operations/puppet@production] Revert "puppetdb: Drop firewall rule for access to Puppet 5 servers"

https://gerrit.wikimedia.org/r/1243106

gerritbot added a comment.Feb 24 2026, 1:02 PM

Change #1243113 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] puppetdb: Allow access for cloud puppetservers

https://gerrit.wikimedia.org/r/1243113

gerritbot added a comment.Feb 24 2026, 1:30 PM

Change #1243113 merged by Muehlenhoff:

[operations/puppet@production] puppetdb: Allow access for cloud puppetservers

https://gerrit.wikimedia.org/r/1243113

gerritbot added a comment.Feb 25 2026, 7:42 AM

Change #1243090 merged by Muehlenhoff:

[operations/puppet@production] Remove create_ecdsa_cert

https://gerrit.wikimedia.org/r/1243090

gerritbot added a comment.Feb 25 2026, 7:48 AM

Change #1243087 merged by Muehlenhoff:

[operations/puppet@production] Remove various Hiera files only necessary for Puppet 5

https://gerrit.wikimedia.org/r/1243087

gerritbot added a comment.Feb 25 2026, 8:33 AM

Change #1243107 merged by Muehlenhoff:

[operations/puppet@production] Reapply "Update two hooks to the variants from the puppetserver module"

https://gerrit.wikimedia.org/r/1243107

gerritbot added a comment.Feb 25 2026, 11:13 AM

Change #1243750 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove role::insetup::buster

https://gerrit.wikimedia.org/r/1243750

gerritbot added a comment.Feb 25 2026, 11:26 AM

Change #1243106 abandoned by David Caro:

[operations/puppet@production] Revert "puppetdb: Drop firewall rule for access to Puppet 5 servers"

Reason:

It was fixed a different (nicer) way

https://gerrit.wikimedia.org/r/1243106

gerritbot added a comment.Feb 25 2026, 11:38 AM

Change #1243750 merged by Muehlenhoff:

[operations/puppet@production] Remove role::insetup::buster

https://gerrit.wikimedia.org/r/1243750

gerritbot added a comment.Feb 27 2026, 7:59 AM

Change #1245253 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Re-add Hiera config files

https://gerrit.wikimedia.org/r/1245253

MoritzMuehlenhoff created subtask T418559: Remove Puppet 5 dependencies from PCC.Feb 27 2026, 8:16 AM
gerritbot added a comment.Mar 3 2026, 7:29 AM

Change #1227734 merged by Muehlenhoff:

[operations/puppet@production] pcc_update_facts: Rename variables

https://gerrit.wikimedia.org/r/1227734

gerritbot added a comment.Mar 4 2026, 11:43 AM

Change #1247976 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add separate puppetserver hooks for the private repo

https://gerrit.wikimedia.org/r/1247976

gerritbot added a comment.Mar 5 2026, 2:47 PM

Change #1247976 merged by Muehlenhoff:

[operations/puppet@production] Add separate puppetserver hooks for the private repo

https://gerrit.wikimedia.org/r/1247976

gerritbot added a comment.Mar 6 2026, 3:32 PM

Change #1248862 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] puppetserver: Use the hooks from Puppet 7

https://gerrit.wikimedia.org/r/1248862

hashar reopened subtask T367399: Default to the Puppet 7 PCC CI test, make it voting and eventually remove the Puppet 5 one as Open.Mar 24 2026, 12:54 PM
jhathaway closed subtask T367399: Default to the Puppet 7 PCC CI test, make it voting and eventually remove the Puppet 5 one as Resolved.Mar 25 2026, 9:20 PM
gerritbot added a comment.Mar 31 2026, 6:01 AM

Change #1265191 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/alerts@master] Remove obsolete alert

https://gerrit.wikimedia.org/r/1265191

gerritbot added a comment.Apr 17 2026, 8:21 AM

Change #1240877 merged by Muehlenhoff:

[operations/software/spicerack@master] Remove Puppet 5 support from Spicerack

https://gerrit.wikimedia.org/r/1240877

gerritbot added a comment.Apr 17 2026, 1:54 PM

Change #1273790 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::gitpuppet

https://gerrit.wikimedia.org/r/1273790

gerritbot added a comment.Apr 17 2026, 1:57 PM

Change #1273792 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove obsolete Hiera file

https://gerrit.wikimedia.org/r/1273792

gerritbot added a comment.Apr 30 2026, 10:49 AM

Change #1273792 merged by Muehlenhoff:

[operations/puppet@production] Remove obsolete Hiera file

https://gerrit.wikimedia.org/r/1273792

gerritbot added a comment.May 28 2026, 2:10 PM

Change #1273790 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::gitpuppet

https://gerrit.wikimedia.org/r/1273790

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits