Page MenuHomePhabricator
Create Task
Maniphest T365798

Shutdown of Puppet 5 servers
Open, HighPublic
Actions

Description

This meta task tracks remaining steps which need to happen before we can retire the Puppet 5 servers

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
Move the puppetmaster puppetdb client class under puppet_compileroperations/puppetproduction+5 -19
Remove puppetmaster::ca_server and related classesoperations/puppetproduction+0 -45
Revert "Remove puppetmaster::gitclone and related classes"operations/puppetproduction+396 -0
Remove puppetmaster::gitclone and related classesoperations/puppetproduction+0 -387
Remove puppetmaster::web_frontend and related classesoperations/puppetproduction+0 -198
Remove puppetmaster::passenger and related filesoperations/puppetproduction+0 -114
Remove puppetmaster:ssloperations/puppetproduction+0 -62
Remove puppetmaster::rsync and related classesoperations/puppetproduction+0 -51
Remove puppetmaster::monitoring and related classesoperations/puppetproduction+0 -176
Remove puppetmaster::r10koperations/puppetproduction+0 -47
puppetdb: Drop firewall rule for access to Puppet 5 serversoperations/puppetproduction+0 -12
profile::puppet::agent: Remove support for Busteroperations/puppetproduction+41 -52
Remove now obsolete Cumin aliases for Buster and Puppet 5operations/puppetproduction+1 -2
sre.hosts.decommission: Hack to allow decommission of puppetmaster1001operations/cookbooksmaster+2 -2
Remove puppetmaster::frontend roleoperations/puppetproduction+0 -26
sre.puppet.sync-netbox-hiera: Remove support for Puppet 5operations/cookbooksmaster+1 -18
sre.ganeti.makevm: Stop passing the puppetversionoperations/cookbooksmaster+1 -3
pcc_update_facts: Rename variablesoperations/puppetproduction+14 -14
Remove puppetmaster2001 from active Puppet 5 serversoperations/puppetproduction+0 -3
Remove puppetmaster role from puppetmaster2001operations/puppetproduction+5 -1
Stop running the IP reputation dump on the Puppet 5 serversoperations/puppetproduction+1 -1
Remove ip_reputation_vendors from puppetmastersoperations/puppetproduction+0 -19
Remove ip_reputation_vendors from Puppet 5 serversoperations/puppetproduction+0 -16
Remove puppetmaster::updatenetbootoperations/puppetproduction+0 -21
Remove Puppet 5 volatile directory from backupsoperations/puppetproduction+0 -4
Copy yamllint into the puppetserver module and use itoperations/puppetproduction+10 -1
Remove remaining traces of profile::puppet::agent::force_puppet7operations/puppetproduction+0 -8
Move validatecloudvpsfqdn.py out of the puppetmaster moduleoperations/puppetproduction+2 -2
Rename enc_client and move under puppetserveroperations/puppetproduction+8 -8
Remove puppetmaster spec filesoperations/puppetproduction+0 -200
Remove profile::puppet::agent::force_puppet7 from traffic hostsoperations/puppetproduction+0 -17
Remove profile::puppet::agent::force_puppet7 from Data Platform rolesoperations/puppetproduction+2 -60
Remove profile::puppet::agent::force_puppet7 from search rolesoperations/puppetproduction+2 -29
Remove profile::puppet::agent::force_puppet7 for Cloud VPSoperations/puppetproduction+0 -8
Remove profile::puppet::agent::force_puppet7 from IF rolesoperations/puppetproduction+0 -66
Remove profile::puppet::agent::force_puppet7 from serviceops rolesoperations/puppetproduction+2 -41
Remove profile::puppet::agent::force_puppet7 from cloud rolesoperations/puppetproduction+0 -35
Remove profile::puppet::agent::force_puppet7 from observability rolesoperations/puppetproduction+0 -28
Remove profile::puppet::agent::force_puppet7 from collab rolesoperations/puppetproduction+1 -32
Remove profile::puppet::agent::force_puppet7 from ML rolesoperations/puppetproduction+1 -26
Remove profile::puppet::agent::force_puppet7 from DB hostsoperations/puppetproduction+0 -29
Remove profile::puppet::agent::force_puppet7 from Cassandra hostsoperations/puppetproduction+0 -7
Remove profile::puppet::agent::force_puppet7 from swift/ceph hostsoperations/puppetproduction+0 -9
Remove profile::puppet::agent::force_puppet7 from backup hostsoperations/puppetproduction+0 -18
Remove profile::puppet::agent::force_puppet7 from insetup rolesoperations/puppetproduction+0 -20
puppet: Remove the force_puppet7 parameteroperations/puppetproduction+0 -5
Remove Puppet 5 settings from late_command.shoperations/puppetproduction+31 -38
Rename puppetmaster::gitsync and move under puppetserveroperations/puppetproduction+5 -5
Rename stale_certs_exporter and move under puppetserveroperations/puppetproduction+2 -2
pontoon: Cleanup dead projectsoperations/puppetproduction+0 -80
Remove puppetmaster::scriptsoperations/puppetproduction+0 -74
Only select Puppet version based on the Debian releaseoperations/puppetproduction+2 -6
Remove now obsolete spec test for Puppet 5 facts uploadoperations/puppetproduction+0 -11
Remove puppetmaster::backend role and related Hiera settingsoperations/puppetproduction+1 -126
puppetdb: Remove access for puppetmaster1003operations/puppetproduction+0 -1
Remove puppetmaster::backend role from puppetmaster1003operations/puppetproduction+1 -1
Remove puppetmaster1003 from active Puppet 5 serversoperations/puppetproduction+0 -1
Remove puppetmaster2002 from allowed hostsoperations/puppetproduction+0 -1
Remove puppetmaster::backend role from puppetmaster2002operations/puppetproduction+1 -1
Remove puppetmaster2002operations/puppetproduction+0 -1
Stop using puppetmaster2002 for Blackbox smoke testsoperations/puppetproduction+1 -1
Remove one additional obsolete Puppet 5 for Cloud VPS classoperations/puppetproduction+0 -23
Remove obsolete WMCS Puppet 5 master classes no longer used/neededoperations/puppetproduction+0 -24
Remove obsolete puppetmaster::certmanager classoperations/puppetproduction+1 -28
Copy puppet git hooks to puppetserver moduleoperations/puppetproduction+21 -0
Puppetserver: Update hooksoperations/puppetproduction+3 -3
Move Puppet CA monitoring out of the puppetmaster moduleoperations/puppetproduction+5 -8
puppetdb: Move JVM config out of the puppetmaster moduleoperations/puppetproduction+1 -1
Remove puppet checkout on pybaltestoperations/puppetproduction+0 -6
pontoon: Remove more puppet 5 leftoversoperations/puppetproduction+0 -11
Move puppetdb.tuning.conf templateoperations/puppetproduction+1 -3
Move update-netboot-image.sh to the puppetserver moduleoperations/puppetproduction+2 -4
swift::proxy: Limit access to swift ring sync to Puppet 7 serversoperations/puppetproduction+1 -2
Remove mcrouter CA setupoperations/puppetproduction+0 -390
thanos: Limit access to swift ring sync to Puppet 7 serversoperations/puppetproduction+1 -2
Stop syncing swift rings on Puppet 5 frontendsoperations/puppetproduction+0 -4
Remove Pontoon support for Puppet 5 puppet mastersoperations/puppetproduction+0 -500
puppetserver::git::private: Use wrapper from puppetserver moduleoperations/puppetproduction+1 -3
Show related patches Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenNoneT330490 Next steps for Puppet 7
 OpenNoneT335765 Migrate all CI jobs from buster to bullseye or later and drop buster testing support
 OpenNoneT365798 Shutdown of Puppet 5 servers
 OpenMoritzMuehlenhoffT357750 Phase out cergen
 ResolvedBTullisT360412 Phase out cergen for Data Platform services
 ResolvedDzahnT360413 Phase out cergen for Collaboration Services services
 ResolvedDzahnT369796 Puppet CA certificate phabricator.discovery.wmnet is about to expire
 Resolvedandrea.denisseT360414 Phase out cergen for Observability services
 ResolvedBTullisT360439 Phase out cergen for Search Platform services
 ResolvedelukeyT356412 Consolidate TLS cert puppetry for ms and thanos swift frontends
 ResolvedCDobbinsT360506 Migrate purged away from cergen-issued certificate
 ResolvedMoritzMuehlenhoffT360636 Phase out cergen for ServiceOps services
 ResolvedMoritzMuehlenhoffT360778 Move maps/karthoterian to PKI/cfssl
 ResolvedJgreenT360779 Phase out cergen for Fundraising services
 ResolvedMoritzMuehlenhoffT364622 Review/cleanup content of /srv/git/private/modules/secret/secrets/ssl in the private repo
 ResolvedMoritzMuehlenhoffT349619 Migrate roles to puppet7
 ResolvedjbondT350118 Investigate PKI errors
 ResolvedjbondT351181 syslog tls clients failing to connect to centrallog2002 post puppet7 migration
 ResolvedjbondT324623 Switch rsyslog from gtls to ossl
 ResolvedABran-WMFT352974 puppet7 on cumin breaks database connections
 DeclinedBTullisT354411 Revert dbstore migration from puppet7 to puppet5
 ResolvedLadsgroupT354719 Deploy grants for cumin1002
 ResolveddcaroT309789 [ceph] Upgrade hosts to bullseye
 ResolveddcaroT369026 [reimage,ceph] reimaging cloudcephosd hosts gets stuck in network configuration screen
 ResolvedAndrewT383817 partman vs cloudcephosd1012
 ResolvedNoneT396940 cloudcephosd1xxxx.private.eqiad.wikimedia.cloud
 ResolvedbkingT354959 Migrate Search Platform-owned hosts to Puppet 7
 ResolvedMoritzMuehlenhoffT365799 Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7
 ResolvedMoritzMuehlenhoffT367399 Default to the Puppet 7 PCC CI test, make it voting and eventually remove the Puppet 5 one
 ResolvedelukeyT368023 Move the private Puppet repository to puppetserver1001
 ResolvedelukeyT371252 conftool and pyparsing requirements
 ResolvedRequestJhancock.wmT412783 decommission puppetmaster2002
 OpenNoneT415255 Remove Puppet 5 CA cert from wmf-certificates cert bundle

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
gerritbot added a comment.Jan 12 2026, 8:59 AM

Change #1224687 merged by Muehlenhoff:

[operations/puppet@production] Rename stale_certs_exporter and move under puppetserver

https://gerrit.wikimedia.org/r/1224687

gerritbot added a comment.Jan 12 2026, 9:01 AM

Change #1224689 merged by Muehlenhoff:

[operations/puppet@production] Rename puppetmaster::gitsync and move under puppetserver

https://gerrit.wikimedia.org/r/1224689

gerritbot added a comment.Jan 12 2026, 10:00 AM

Change #1224722 merged by Muehlenhoff:

[operations/puppet@production] Remove Puppet 5 settings from late_command.sh

https://gerrit.wikimedia.org/r/1224722

gerritbot added a comment.Jan 12 2026, 10:26 AM

Change #1224605 merged by Muehlenhoff:

[operations/puppet@production] puppet: Remove the force_puppet7 parameter

https://gerrit.wikimedia.org/r/1224605

gerritbot added a comment.Jan 12 2026, 10:33 AM

Change #1225502 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from insetup roles

https://gerrit.wikimedia.org/r/1225502

gerritbot added a comment.Jan 12 2026, 10:57 AM

Change #1225502 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from insetup roles

https://gerrit.wikimedia.org/r/1225502

gerritbot added a comment.Jan 12 2026, 11:16 AM

Change #1225519 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from backup hosts

https://gerrit.wikimedia.org/r/1225519

gerritbot added a comment.Jan 12 2026, 11:19 AM

Change #1225522 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from swift/ceph hosts

https://gerrit.wikimedia.org/r/1225522

gerritbot added a comment.Jan 12 2026, 11:38 AM

Change #1225524 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from traffic hosts

https://gerrit.wikimedia.org/r/1225524

gerritbot added a comment.Jan 12 2026, 11:40 AM

Change #1225525 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from Cassandra hosts

https://gerrit.wikimedia.org/r/1225525

Stashbot added a comment.Jan 12 2026, 12:17 PM

Mentioned in SAL (#wikimedia-operations) [2026-01-12T12:17:30Z] <moritzm> revoked legacy default-staging-certificate certificate T365798

Stashbot added a comment.Jan 12 2026, 12:19 PM

Mentioned in SAL (#wikimedia-operations) [2026-01-12T12:19:16Z] <moritzm> revoked legacy ganeti02.svc.esams certificate T365798

Stashbot added a comment.Jan 12 2026, 12:26 PM

Mentioned in SAL (#wikimedia-operations) [2026-01-12T12:26:37Z] <moritzm> revoked legacy linkrecommendation discovery certificate T365798

gerritbot added a comment.Jan 12 2026, 12:43 PM

Change #1225519 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from backup hosts

https://gerrit.wikimedia.org/r/1225519

gerritbot added a comment.Jan 12 2026, 12:58 PM

Change #1225522 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from swift/ceph hosts

https://gerrit.wikimedia.org/r/1225522

gerritbot added a comment.Jan 12 2026, 2:40 PM

Change #1225576 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from DB hosts

https://gerrit.wikimedia.org/r/1225576

gerritbot added a comment.Jan 13 2026, 8:36 AM

Change #1225525 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from Cassandra hosts

https://gerrit.wikimedia.org/r/1225525

gerritbot added a comment.Jan 13 2026, 9:29 AM

Change #1225576 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from DB hosts

https://gerrit.wikimedia.org/r/1225576

gerritbot added a comment.Jan 13 2026, 9:37 AM

Change #1226175 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from collab roles

https://gerrit.wikimedia.org/r/1226175

gerritbot added a comment.Jan 13 2026, 9:39 AM

Change #1226176 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from ML roles

https://gerrit.wikimedia.org/r/1226176

gerritbot added a comment.Jan 13 2026, 9:57 AM

Change #1226178 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from observability roles

https://gerrit.wikimedia.org/r/1226178

Stashbot added a comment.Jan 13 2026, 10:06 AM

Mentioned in SAL (#wikimedia-operations) [2026-01-13T10:06:50Z] <moritzm> revoked legacy similar-users discovery certificate T365798

gerritbot added a comment.Jan 13 2026, 12:38 PM

Change #1226176 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from ML roles

https://gerrit.wikimedia.org/r/1226176

gerritbot added a comment.Jan 13 2026, 1:32 PM

Change #1226175 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from collab roles

https://gerrit.wikimedia.org/r/1226175

Stashbot added a comment.Jan 13 2026, 3:11 PM

Mentioned in SAL (#wikimedia-operations) [2026-01-13T15:11:31Z] <moritzm> revoked legacy restbase discovery certificate T365798

gerritbot added a comment.Jan 15 2026, 8:44 AM

Change #1226178 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from observability roles

https://gerrit.wikimedia.org/r/1226178

gerritbot added a comment.Jan 15 2026, 8:56 AM

Change #1227261 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from serviceops roles

https://gerrit.wikimedia.org/r/1227261

gerritbot added a comment.Jan 15 2026, 9:12 AM

Change #1227264 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from cloud roles

https://gerrit.wikimedia.org/r/1227264

gerritbot added a comment.Jan 15 2026, 9:24 AM

Change #1227270 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from search roles

https://gerrit.wikimedia.org/r/1227270

gerritbot added a comment.Jan 15 2026, 10:20 AM

Change #1227264 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from cloud roles

https://gerrit.wikimedia.org/r/1227264

gerritbot added a comment.Jan 15 2026, 10:26 AM

Change #1227261 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from serviceops roles

https://gerrit.wikimedia.org/r/1227261

gerritbot added a comment.Jan 15 2026, 11:13 AM

Change #1227292 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from IF roles

https://gerrit.wikimedia.org/r/1227292

gerritbot added a comment.Jan 15 2026, 11:26 AM

Change #1227292 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from IF roles

https://gerrit.wikimedia.org/r/1227292

gerritbot added a comment.Jan 15 2026, 12:33 PM

Change #1227313 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from Data Platform roles

https://gerrit.wikimedia.org/r/1227313

gerritbot added a comment.Jan 15 2026, 1:09 PM

Change #1227322 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 for Cloud VPS

https://gerrit.wikimedia.org/r/1227322

gerritbot added a comment.Jan 15 2026, 1:43 PM

Change #1227322 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 for Cloud VPS

https://gerrit.wikimedia.org/r/1227322

gerritbot added a comment.Jan 15 2026, 3:17 PM

Change #1227270 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from search roles

https://gerrit.wikimedia.org/r/1227270

gerritbot added a comment.Jan 15 2026, 3:21 PM

Change #1227313 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from Data Platform roles

https://gerrit.wikimedia.org/r/1227313

gerritbot added a comment.Jan 16 2026, 7:26 AM

Change #1225524 merged by Muehlenhoff:

[operations/puppet@production] Remove profile::puppet::agent::force_puppet7 from traffic hosts

https://gerrit.wikimedia.org/r/1225524

gerritbot added a comment.Jan 16 2026, 7:31 AM

Change #1227616 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove remaining traces of profile::puppet::agent::force_puppet7

https://gerrit.wikimedia.org/r/1227616

gerritbot added a comment.Jan 16 2026, 7:49 AM

Change #1227618 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Rename enc_client and move under puppetserver

https://gerrit.wikimedia.org/r/1227618

gerritbot added a comment.Jan 16 2026, 8:30 AM

Change #1227694 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Move validatecloudvpsfqdn.py out of the puppetmaster module

https://gerrit.wikimedia.org/r/1227694

gerritbot added a comment.Jan 16 2026, 8:46 AM

Change #1227698 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster spec files

https://gerrit.wikimedia.org/r/1227698

gerritbot added a comment.Jan 16 2026, 8:55 AM

Change #1227702 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Copy yamllint into the puppetserver module and use it

https://gerrit.wikimedia.org/r/1227702

gerritbot added a comment.Jan 16 2026, 10:14 AM

Change #1227734 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] pcc_update_facts: Rename variables

https://gerrit.wikimedia.org/r/1227734

gerritbot added a comment.Jan 19 2026, 7:51 AM

Change #1227698 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster spec files

https://gerrit.wikimedia.org/r/1227698

gerritbot added a comment.Jan 19 2026, 8:36 AM

Change #1227618 merged by Muehlenhoff:

[operations/puppet@production] Rename enc_client and move under puppetserver

https://gerrit.wikimedia.org/r/1227618

gerritbot added a comment.Jan 19 2026, 8:42 AM

Change #1227694 merged by Muehlenhoff:

[operations/puppet@production] Move validatecloudvpsfqdn.py out of the puppetmaster module

https://gerrit.wikimedia.org/r/1227694

gerritbot added a comment.Jan 19 2026, 8:59 AM

Change #1227616 merged by Muehlenhoff:

[operations/puppet@production] Remove remaining traces of profile::puppet::agent::force_puppet7

https://gerrit.wikimedia.org/r/1227616

gerritbot added a comment.Jan 19 2026, 10:37 AM

Change #1227702 merged by Muehlenhoff:

[operations/puppet@production] Copy yamllint into the puppetserver module and use it

https://gerrit.wikimedia.org/r/1227702

gerritbot added a comment.Tue, Jan 20, 12:11 PM

Change #1229107 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::updatenetboot

https://gerrit.wikimedia.org/r/1229107

gerritbot added a comment.Tue, Jan 20, 12:30 PM

Change #1229110 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove Puppet 5 volatile directory from backups

https://gerrit.wikimedia.org/r/1229110

gerritbot added a comment.Wed, Jan 21, 9:58 AM

Change #1229110 merged by Muehlenhoff:

[operations/puppet@production] Remove Puppet 5 volatile directory from backups

https://gerrit.wikimedia.org/r/1229110

gerritbot added a comment.Wed, Jan 21, 10:03 AM

Change #1229107 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::updatenetboot

https://gerrit.wikimedia.org/r/1229107

MoritzMuehlenhoff created subtask T415255: Remove Puppet 5 CA cert from wmf-certificates cert bundle.Thu, Jan 22, 12:11 PM
gerritbot added a comment.Thu, Jan 22, 1:32 PM

Change #1230331 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster role from puppetmaster2001

https://gerrit.wikimedia.org/r/1230331

gerritbot added a comment.Thu, Jan 22, 1:32 PM

Change #1230332 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster2001 from active Puppet 5 servers

https://gerrit.wikimedia.org/r/1230332

gerritbot added a comment.Fri, Jan 23, 12:05 PM

Change #1230912 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Stop running the IP reputation dump on the Puppet 5 servers

https://gerrit.wikimedia.org/r/1230912

gerritbot added a comment.Fri, Jan 23, 12:05 PM

Change #1230913 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove ip_reputation_vendors from Puppet 5 servers

https://gerrit.wikimedia.org/r/1230913

gerritbot added a comment.Fri, Jan 23, 12:18 PM

Change #1230914 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove ip_reputation_vendors from puppetmasters

https://gerrit.wikimedia.org/r/1230914

gerritbot added a comment.Fri, Jan 23, 12:19 PM

Change #1230913 abandoned by Muehlenhoff:

[operations/puppet@production] Remove ip_reputation_vendors from Puppet 5 servers

Reason:

dupe

https://gerrit.wikimedia.org/r/1230913

Stashbot added a comment.Wed, Feb 4, 12:53 PM

Mentioned in SAL (#wikimedia-operations) [2026-02-04T12:53:00Z] <moritzm> remove legacy eventstreams-internal discovery certificate T365798

Stashbot added a comment.Wed, Feb 4, 1:00 PM

Mentioned in SAL (#wikimedia-operations) [2026-02-04T13:00:21Z] <moritzm> remove legacy wdqs-internal discovery certificate T365798

Stashbot added a comment.Wed, Feb 4, 2:27 PM

Mentioned in SAL (#wikimedia-operations) [2026-02-04T14:27:52Z] <moritzm> remove legacy kibana discovery certificate T365798

gerritbot added a comment.Thu, Feb 5, 3:19 PM

Change #1230331 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster role from puppetmaster2001

https://gerrit.wikimedia.org/r/1230331

ops-monitoring-bot added a comment.Thu, Feb 5, 3:40 PM

cookbooks.sre.hosts.decommission executed by jmm@cumin2002 for hosts: puppetmaster2001.codfw.wmnet

  • puppetmaster2001.codfw.wmnet (PASS)
    • Downtimed host on Icinga/Alertmanager
    • Found physical host
    • Downtimed management interface on Alertmanager
    • Wiped all swraid, partition-table and filesystem signatures
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc)
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
gerritbot added a comment.Fri, Feb 6, 10:35 AM

Change #1230332 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster2001 from active Puppet 5 servers

https://gerrit.wikimedia.org/r/1230332

gerritbot added a comment.Mon, Feb 9, 4:17 PM

Change #1237942 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/cookbooks@master] sre.ganeti.makevm: Stop passing the puppetversion

https://gerrit.wikimedia.org/r/1237942

gerritbot added a comment.Tue, Feb 10, 9:17 AM

Change #1237942 merged by Muehlenhoff:

[operations/cookbooks@master] sre.ganeti.makevm: Stop passing the puppetversion

https://gerrit.wikimedia.org/r/1237942

gerritbot added a comment.Fri, Feb 13, 9:56 AM

Change #1239314 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/cookbooks@master] sre.hosts.decommission: Hack to allow decommission of puppetmaster1001

https://gerrit.wikimedia.org/r/1239314

ops-monitoring-bot added a comment.Mon, Feb 16, 11:01 AM

cookbooks.sre.hosts.decommission executed by jmm@cumin2002 for hosts: puppetmaster1001.eqiad.wmnet

  • puppetmaster1001.eqiad.wmnet (PASS)
    • Downtimed host on Icinga/Alertmanager
    • Found physical host
    • Downtimed management interface on Alertmanager
    • Wiped all swraid, partition-table and filesystem signatures
    • Powered off
    • [Netbox] Set status to Decommissioning, deleted all non-mgmt IPs, updated switch interfaces (disabled, removed vlans, etc)
    • Configured the linked switch interface(s)
    • Removed from DebMonitor
    • Removed from Puppet master and PuppetDB
  • COMMON_STEPS (FAIL)
    • Failed to run the sre.dns.netbox cookbook, run it manually

ERROR: some step on some host failed, check the bolded items above

gerritbot added a comment.Mon, Feb 16, 11:04 AM

Change #1239638 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/cookbooks@master] sre.puppet.sync-netbox-hiera: Remove support for Puppet 5

https://gerrit.wikimedia.org/r/1239638

gerritbot added a comment.Mon, Feb 16, 11:23 AM

Change #1239638 merged by Muehlenhoff:

[operations/cookbooks@master] sre.puppet.sync-netbox-hiera: Remove support for Puppet 5

https://gerrit.wikimedia.org/r/1239638

gerritbot added a comment.Mon, Feb 16, 11:46 AM

Change #1239647 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] puppetdb: Drop firewall rule for access to Puppet 5 servers

https://gerrit.wikimedia.org/r/1239647

gerritbot added a comment.Mon, Feb 16, 11:47 AM

Change #1239648 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove now obsolete Cumin aliases for Buster and Puppet 5

https://gerrit.wikimedia.org/r/1239648

gerritbot added a comment.Mon, Feb 16, 1:20 PM

Change #1239676 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::frontend role

https://gerrit.wikimedia.org/r/1239676

gerritbot added a comment.Mon, Feb 16, 2:20 PM

Change #1239676 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::frontend role

https://gerrit.wikimedia.org/r/1239676

gerritbot added a comment.Mon, Feb 16, 2:21 PM

Change #1239314 abandoned by Muehlenhoff:

[operations/cookbooks@master] sre.hosts.decommission: Hack to allow decommission of puppetmaster1001

https://gerrit.wikimedia.org/r/1239314

gerritbot added a comment.Mon, Feb 16, 5:19 PM

Change #1239749 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] profile::puppet::agent: Remove support for Buster

https://gerrit.wikimedia.org/r/1239749

gerritbot added a comment.Tue, Feb 17, 8:32 AM

Change #1239648 merged by Muehlenhoff:

[operations/puppet@production] Remove now obsolete Cumin aliases for Buster and Puppet 5

https://gerrit.wikimedia.org/r/1239648

gerritbot added a comment.Tue, Feb 17, 9:25 AM

Change #1239749 merged by Muehlenhoff:

[operations/puppet@production] profile::puppet::agent: Remove support for Buster

https://gerrit.wikimedia.org/r/1239749

gerritbot added a comment.Tue, Feb 17, 9:47 AM

Change #1239891 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::monitoring and related classes

https://gerrit.wikimedia.org/r/1239891

gerritbot added a comment.Tue, Feb 17, 10:09 AM

Change #1239895 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::gitclone and related classes

https://gerrit.wikimedia.org/r/1239895

gerritbot added a comment.Tue, Feb 17, 10:16 AM

Change #1239897 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::r10k

https://gerrit.wikimedia.org/r/1239897

gerritbot added a comment.Tue, Feb 17, 10:18 AM

Change #1239898 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::rsync and related classes

https://gerrit.wikimedia.org/r/1239898

gerritbot added a comment.Tue, Feb 17, 10:21 AM

Change #1239899 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::web_frontend and related classes

https://gerrit.wikimedia.org/r/1239899

gerritbot added a comment.Tue, Feb 17, 11:13 AM

Change #1239907 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::passenger and related files

https://gerrit.wikimedia.org/r/1239907

gerritbot added a comment.Tue, Feb 17, 11:18 AM

Change #1239908 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] This was only used with Puppet 5.

https://gerrit.wikimedia.org/r/1239908

MoritzMuehlenhoff closed subtask T364622: Review/cleanup content of /srv/git/private/modules/secret/secrets/ssl in the private repo as Resolved.Tue, Feb 17, 11:28 AM
gerritbot added a comment.Wed, Feb 18, 8:19 AM

Change #1239897 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::r10k

https://gerrit.wikimedia.org/r/1239897

gerritbot added a comment.Wed, Feb 18, 8:29 AM

Change #1239891 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::monitoring and related classes

https://gerrit.wikimedia.org/r/1239891

gerritbot added a comment.Wed, Feb 18, 8:47 AM

Change #1239898 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::rsync and related classes

https://gerrit.wikimedia.org/r/1239898

gerritbot added a comment.Wed, Feb 18, 8:56 AM

Change #1239908 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster:ssl

https://gerrit.wikimedia.org/r/1239908

gerritbot added a comment.Wed, Feb 18, 9:48 AM

Change #1239907 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::passenger and related files

https://gerrit.wikimedia.org/r/1239907

gerritbot added a comment.Wed, Feb 18, 10:26 AM

Change #1239899 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::web_frontend and related classes

https://gerrit.wikimedia.org/r/1239899

gerritbot added a comment.Wed, Feb 18, 10:52 AM

Change #1239895 merged by Muehlenhoff:

[operations/puppet@production] Remove puppetmaster::gitclone and related classes

https://gerrit.wikimedia.org/r/1239895

gerritbot added a comment.Wed, Feb 18, 11:04 AM

Change #1240242 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Revert "Remove puppetmaster::gitclone and related classes"

https://gerrit.wikimedia.org/r/1240242

gerritbot added a comment.Wed, Feb 18, 11:14 AM

Change #1240242 merged by Muehlenhoff:

[operations/puppet@production] Revert "Remove puppetmaster::gitclone and related classes"

https://gerrit.wikimedia.org/r/1240242

gerritbot added a comment.Wed, Feb 18, 12:53 PM

Change #1240268 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove puppetmaster::ca_server and related classes

https://gerrit.wikimedia.org/r/1240268

gerritbot added a comment.Wed, Feb 18, 1:20 PM

Change #1240278 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Move the puppetmaster puppetdb client class under puppet_compiler

https://gerrit.wikimedia.org/r/1240278

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits