Page MenuHomePhabricator

Define single hiera key to identify WMCS-managed bare metal hosts
Open, MediumPublic

Description

Right now we set multiple hiera keys for each WMCS-managed bare metal server, i.e. in control.yaml:

  • profile::admin::groups: wmcs-roots
  • contactgroups: wmcs-team-email
  • cluster: wmcs
  • profile::contacts::role_contacts: ['WMCS']

These servers also usually have profile::base::cloud_production that is included from the role.

These settings are replicated in many different files, once for each different role. It would be nice if we had a single Hiera key or profile we can include and that will set all the other keys.

This will make sure we have a consistent behaviour for all WMCS-managed hosts:

  • members of wmcs-roots have root access
  • alerts are tagged with team=wmcs
  • they can be queried from cumin with something like P:cloud
  • they can be accessed from cloudcumins
  • etc.