Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Function lookup() did not find a value for the name 'profile::hcaptcha::proxy::ip_hash_salt' (file: /srv/puppet_code/environments/production/modules/profile/manifests/hcaptcha/proxy.pp, line: 4) on node deployment-urldownloader04.deployment-prep.eqiad1.wikimedia.cloud
Caused by https://gerrit.wikimedia.org/r/c/operations/puppet/+/1164432. https://gerrit.wikimedia.org/r/c/labs/private/+/1155221 adds a stub value but in a place where it will not be seen by Cloud VPS instances.
diff --git a/deployment-prep/deployment-urldownloader.yaml b/deployment-prep/deployment-urldownloader.yaml new file mode 100644 index 0000000..f7f1baa --- /dev/null +++ b/deployment-prep/deployment-urldownloader.yaml @@ -0,0 +1,7 @@ +profile::hcaptcha::hcaptcha_secret: s3cr3t +profile::hcaptcha::hcaptcha_sitekey: somesitekey +profile::hcaptcha::proxy::ip_hash_salt: nomnomnom +profile::hcaptcha::proxy::nginx_ipblinding_conf: "access_by_lua_block {\n ngx.say(\"\ + hello world\");\n}\n" +profile::hcaptcha::proxy::nginx_private_conf: proxy_set_header X-Clacks-Overhead "GNU + Terry Pratchett";
Jul 11 21:21:28 deployment-urldownloader04 systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server... Jul 11 21:21:28 deployment-urldownloader04 nginx[2304761]: 2025/07/11 21:21:28 [emerg] 2304761#2304761: unknown directive "access_by_lua_block" in /etc/nginx/sites-enabled/deployment-urldownloader04:19 Jul 11 21:21:28 deployment-urldownloader04 nginx[2304761]: nginx: configuration file /etc/nginx/nginx.conf test failed Jul 11 21:21:28 deployment-urldownloader04 systemd[1]: nginx.service: Control process exited, code=exited, status=1/FAILURE Jul 11 21:21:28 deployment-urldownloader04 systemd[1]: nginx.service: Failed with result 'exit-code'.
diff --git a/deployment-prep/deployment-urldownloader.yaml b/deployment-prep/deployment-urldownloader.yaml index f7f1baa..07cd461 100644 --- a/deployment-prep/deployment-urldownloader.yaml +++ b/deployment-prep/deployment-urldownloader.yaml @@ -1,7 +1,6 @@ profile::hcaptcha::hcaptcha_secret: s3cr3t profile::hcaptcha::hcaptcha_sitekey: somesitekey profile::hcaptcha::proxy::ip_hash_salt: nomnomnom -profile::hcaptcha::proxy::nginx_ipblinding_conf: "access_by_lua_block {\n ngx.say(\"\ - hello world\");\n}\n" +profile::hcaptcha::proxy::nginx_ipblinding_conf: null profile::hcaptcha::proxy::nginx_private_conf: proxy_set_header X-Clacks-Overhead "GNU Terry Pratchett";
Error: Could not retrieve catalog from remote server: Error 500 on SERVER: Server Error: Evaluation Error: Error while evaluating a Resource Statement, Evaluation Error: Error while evaluating a Function Call, Class[Profile::Hcaptcha::Proxy]: parameter 'nginx_ipblinding_conf' expects a String value, got Undef (file: /srv/puppet_code/environments/production/modules/role/manifests/url_downloader.pp, line: 9, column: 5) on node deployment-urldownloader04.deployment-prep.eqiad1.wikimedia.cloud
diff --git a/deployment-prep/deployment-urldownloader.yaml b/deployment-prep/deployment-urldownloader.yaml index 07cd461..a172d06 100644 --- a/deployment-prep/deployment-urldownloader.yaml +++ b/deployment-prep/deployment-urldownloader.yaml @@ -1,6 +1,6 @@ profile::hcaptcha::hcaptcha_secret: s3cr3t profile::hcaptcha::hcaptcha_sitekey: somesitekey profile::hcaptcha::proxy::ip_hash_salt: nomnomnom -profile::hcaptcha::proxy::nginx_ipblinding_conf: null +profile::hcaptcha::proxy::nginx_ipblinding_conf: '' profile::hcaptcha::proxy::nginx_private_conf: proxy_set_header X-Clacks-Overhead "GNU Terry Pratchett";
bd808@deployment-urldownloader04:~$ sudo -i puppet agent -tv Info: Using environment 'production' Info: Retrieving pluginfacts Info: Retrieving plugin Info: Loading facts Info: Caching catalog for deployment-urldownloader04.deployment-prep.eqiad1.wikimedia.cloud Info: Applying configuration version '(84f67c0cb6) gitpuppet - beta: Change beta.wmcloud.org stub redirect to new Meta-Wiki canonical' Notice: /Stage[main]/Profile::Hcaptcha::Proxy/Nginx::Site[deployment-urldownloader04]/File[/etc/nginx/sites-available/deployment-urldownloader04]/content: --- /etc/nginx/sites-available/deployment-urldownloader04 2025-07-11 21:20:47.030875298 +0000 +++ /tmp/puppet-file20250711-2305632-wmx14 2025-07-11 21:24:38.329302737 +0000 @@ -16,10 +16,7 @@ } location / { - access_by_lua_block { - ngx.say("hello world"); -} - + proxy_pass https://hcaptcha.com; proxy_ssl_server_name on; Notice: /Stage[main]/Profile::Hcaptcha::Proxy/Nginx::Site[deployment-urldownloader04]/File[/etc/nginx/sites-available/deployment-urldownloader04]/content: content changed '{sha256}d0f3f1216e70eee78bcb0e0b5fd34a392bc97347ef358b43ce9817088f0436a6' to '{sha256}b5a2f090b1137d0c3e985d9d59e137c0f71772e9968d55937ba22a6290e47c77' Info: /Stage[main]/Profile::Hcaptcha::Proxy/Nginx::Site[deployment-urldownloader04]/File[/etc/nginx/sites-available/deployment-urldownloader04]: Scheduling refresh of Exec[nginx-reload] Info: /Stage[main]/Profile::Hcaptcha::Proxy/Nginx::Site[deployment-urldownloader04]/File[/etc/nginx/sites-available/deployment-urldownloader04]: Scheduling refresh of Service[nginx] Info: Nginx::Site[deployment-urldownloader04]: Scheduling refresh of Service[nginx] Notice: /Stage[main]/Nginx/Exec[nginx-reload]: Triggered 'refresh' from 1 event Notice: /Stage[main]/Nginx/Service[nginx]/ensure: ensure changed 'stopped' to 'running' (corrective) Info: /Stage[main]/Nginx/Service[nginx]: Unscheduling refresh on Service[nginx] Notice: Applied catalog in 7.88 seconds