Page MenuHomePhabricator

Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7
Open, HighPublic

Description

We currently have separate acmechief installations for Puppet 5 and Puppet 7 (added via https://phabricator.wikimedia.org/T352242)

  • As such, the remaining Puppet 5 servers are configured to use acmechief1001 via the setting in hieradata/common.yaml
  • All the roles migrated to Puppet 7 (which is 90% at this time) have a role- or host-specific Hiera setting which points them to acmechief2002.

There are two remaining systems on Puppet 5 which are using an acme_chief::cert resource:

  • archiva1002
  • lists1001

Once those are on Puppet 7, we can:

  • Update hieradata/common.yaml to point to a Puppet 7 acmechief host
  • Remove the various role-specific overrides
  • Decom acmechief1001 and acmechief2001

Details

SubjectRepoBranchLines +/-
operations/puppetproduction+0 -8
operations/puppetproduction+0 -5
operations/puppetproduction+0 -6
operations/puppetproduction+0 -1
operations/puppetproduction+0 -4
operations/puppetproduction+0 -10
operations/puppetproduction+0 -8
operations/puppetproduction+0 -12
operations/puppetproduction+0 -4
operations/puppetproduction+0 -4
operations/puppetproduction+0 -9
operations/puppetproduction+0 -5
operations/puppetproduction+0 -10
operations/puppetproduction+0 -4
operations/puppetproduction+0 -10
operations/puppetproduction+0 -9
operations/puppetproduction+0 -13
operations/puppetproduction+0 -3
operations/puppetproduction+2 -2
operations/puppetproduction+0 -1
operations/puppetproduction+0 -5
operations/puppetproduction+0 -8
operations/puppetproduction+0 -19
operations/puppetproduction+0 -1
operations/puppetproduction+0 -1
operations/puppetproduction+0 -1
operations/puppetproduction+0 -1
operations/puppetproduction+0 -6
operations/puppetproduction+0 -8
operations/puppetproduction+0 -2
operations/puppetproduction+0 -1
operations/puppetproduction+0 -9
operations/puppetproduction+0 -1
operations/puppetproduction+0 -3
operations/puppetproduction+0 -1
operations/puppetproduction+1 -3
operations/puppetproduction+0 -2
operations/puppetproduction+0 -15
operations/cookbooksmaster+0 -3
operations/puppetproduction+2 -2
Show related patches Customize query in gerrit

Event Timeline

Change #1047443 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Default to use acmechief1002

https://gerrit.wikimedia.org/r/1047443

Change #1047444 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/cookbooks@master] No longer refer to setting the acmechief hosts

https://gerrit.wikimedia.org/r/1047444

Change #1047443 merged by Muehlenhoff:

[operations/puppet@production] Default to use acmechief1002

https://gerrit.wikimedia.org/r/1047443

Change #1047444 merged by Muehlenhoff:

[operations/cookbooks@master] No longer refer to setting the acmechief hosts

https://gerrit.wikimedia.org/r/1047444

Change #1049452 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for mariadb hosts

https://gerrit.wikimedia.org/r/1049452

Change #1049453 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for IDM/IDP

https://gerrit.wikimedia.org/r/1049453

Change #1049459 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for gitlab

https://gerrit.wikimedia.org/r/1049459

Change #1049461 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for dns/ncredir/durum/doh

https://gerrit.wikimedia.org/r/1049461

Change #1049452 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for mariadb hosts

https://gerrit.wikimedia.org/r/1049452

Change #1049466 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for apt hosts

https://gerrit.wikimedia.org/r/1049466

Change #1049469 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for various DE roles

https://gerrit.wikimedia.org/r/1049469

Change #1049466 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for apt hosts

https://gerrit.wikimedia.org/r/1049466

Change #1049459 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for gitlab

https://gerrit.wikimedia.org/r/1049459

Change #1049475 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for mirrors

https://gerrit.wikimedia.org/r/1049475

Change #1049475 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for mirrors

https://gerrit.wikimedia.org/r/1049475

Change #1049481 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for MX hosts

https://gerrit.wikimedia.org/r/1049481

Change #1049484 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for cloudlb/clouddumps/cloudservices-codfw1dev

https://gerrit.wikimedia.org/r/1049484

Change #1049484 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for cloudlb/clouddumps/cloudservices-codfw1dev

https://gerrit.wikimedia.org/r/1049484

Change #1049501 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for caches

https://gerrit.wikimedia.org/r/1049501

Change #1049502 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for icinga

https://gerrit.wikimedia.org/r/1049502

Change #1049504 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for netmon

https://gerrit.wikimedia.org/r/1049504

Change #1049505 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for orchestrator

https://gerrit.wikimedia.org/r/1049505

Change #1049504 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for netmon

https://gerrit.wikimedia.org/r/1049504

Change #1049511 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for ML hosts

https://gerrit.wikimedia.org/r/1049511

Change #1049512 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for cloudelastic

https://gerrit.wikimedia.org/r/1049512

Change #1049515 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for archiva

https://gerrit.wikimedia.org/r/1049515

Change #1049516 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for lists

https://gerrit.wikimedia.org/r/1049516

Change #1049517 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for

https://gerrit.wikimedia.org/r/1049517

Change #1049523 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for various IF roles

https://gerrit.wikimedia.org/r/1049523

Change #1049523 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for various IF roles

https://gerrit.wikimedia.org/r/1049523

Change #1049516 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for lists

https://gerrit.wikimedia.org/r/1049516

Change #1049501 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for caches

https://gerrit.wikimedia.org/r/1049501

Change #1049559 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for

https://gerrit.wikimedia.org/r/1049559

Change #1049511 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for ML hosts

https://gerrit.wikimedia.org/r/1049511

Change #1049592 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for remaining collab roles

https://gerrit.wikimedia.org/r/1049592

Change #1049592 merged by Dzahn:

[operations/puppet@production] Remove acmechief annotations for remaining collab roles

https://gerrit.wikimedia.org/r/1049592

Change #1049481 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for MX hosts

https://gerrit.wikimedia.org/r/1049481

Change #1049515 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for archiva

https://gerrit.wikimedia.org/r/1049515

Change #1049502 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for icinga

https://gerrit.wikimedia.org/r/1049502

Change #1049505 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for orchestrator

https://gerrit.wikimedia.org/r/1049505

Change #1049821 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for gerrit

https://gerrit.wikimedia.org/r/1049821

Change #1049559 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for remaining WMCS roles

https://gerrit.wikimedia.org/r/1049559

Change #1049517 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for wikikube

https://gerrit.wikimedia.org/r/1049517

Change #1049453 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for IDM/IDP

https://gerrit.wikimedia.org/r/1049453

Change #1049833 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for LDAP roles

https://gerrit.wikimedia.org/r/1049833

Change #1049512 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for cloudelastic

https://gerrit.wikimedia.org/r/1049512

Change #1049837 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Switch acmechief1001/2001 to insetup::buster

https://gerrit.wikimedia.org/r/1049837

Change #1049833 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for LDAP roles

https://gerrit.wikimedia.org/r/1049833

Change #1049850 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for remaining Collab roles

https://gerrit.wikimedia.org/r/1049850

Change #1049851 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for memcached/redis

https://gerrit.wikimedia.org/r/1049851

Change #1049854 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for remaining IF roles

https://gerrit.wikimedia.org/r/1049854

Change #1049859 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for swift/ceph

https://gerrit.wikimedia.org/r/1049859

Change #1049469 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for various DE roles

https://gerrit.wikimedia.org/r/1049469

Change #1049863 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for remaining o11y roles

https://gerrit.wikimedia.org/r/1049863

Change #1049864 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for Cassandra roles

https://gerrit.wikimedia.org/r/1049864

Change #1049869 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for remaining WMCS roles

https://gerrit.wikimedia.org/r/1049869

Change #1049871 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for backup roles

https://gerrit.wikimedia.org/r/1049871

Change #1049872 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for remaining Traffic roles

https://gerrit.wikimedia.org/r/1049872

Change #1049873 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for remaining Search roles

https://gerrit.wikimedia.org/r/1049873

Change #1049874 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for dumps roles

https://gerrit.wikimedia.org/r/1049874

Change #1049875 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for misc roles

https://gerrit.wikimedia.org/r/1049875

Change #1049851 merged by Effie Mouzeli:

[operations/puppet@production] Remove acmechief annotations for memcached/redis

https://gerrit.wikimedia.org/r/1049851

Change #1049874 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for dumps roles

https://gerrit.wikimedia.org/r/1049874

Change #1049872 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for remaining Traffic roles

https://gerrit.wikimedia.org/r/1049872

Change #1049869 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for remaining WMCS roles

https://gerrit.wikimedia.org/r/1049869

Change #1049854 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for remaining IF roles

https://gerrit.wikimedia.org/r/1049854

Change #1049875 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for misc roles

https://gerrit.wikimedia.org/r/1049875

Change #1049871 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for backup roles

https://gerrit.wikimedia.org/r/1049871

Change #1049461 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for dns/ncredir/durum/doh

https://gerrit.wikimedia.org/r/1049461

Change #1049850 merged by Muehlenhoff:

[operations/puppet@production] Remove acmechief annotations for remaining Collab roles

https://gerrit.wikimedia.org/r/1049850

Change #1049907 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for Druid/Kafka roles

https://gerrit.wikimedia.org/r/1049907

Change #1049908 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Remove acmechief annotations for Hadoop

https://gerrit.wikimedia.org/r/1049908