Page MenuHomePhabricator

Rip out barbican puppet code
Closed, ResolvedPublic

Description

I installed barbican as a proof of concept in codfw1dev years ago. We /still/ need a proper secrets store, but at the moment this is just leftover cruft that occasionally alerts for no reason. It should be removed entirely.

Related Objects

StatusSubtypeAssignedTask
ResolvedAndrew
ResolvedAndrew

Event Timeline

to add a little commentary on what exists out there that references it...

on cloudcontrol2005-dev, 2006-dev, 2010-dev there appears to be a nighly cron
test -x /usr/sbin/anacron || { cd / && run-parts --report /etc/cron.daily;
that mails to root

Cron Daemon root@cloudcontrol2006-dev.codfw.wmnet via wikimedia.org
Thu, Jul 9, 11:29 PM (7 days ago)
to root

run-parts: /etc/cron.daily/barbican-common exited with return code 1

Change #1311853 had a related patch set uploaded (by Andrew Bogott; author: Andrew Bogott):

[operations/puppet@production] codfw1dev cloudcontrol: Don't install barbican

https://gerrit.wikimedia.org/r/1311853

Change #1311854 had a related patch set uploaded (by Andrew Bogott; author: Andrew Bogott):

[operations/puppet@production] Openstack: remove files and references to barbican

https://gerrit.wikimedia.org/r/1311854

Change #1311853 merged by Andrew Bogott:

[operations/puppet@production] codfw1dev cloudcontrol: Don't install barbican

https://gerrit.wikimedia.org/r/1311853

Change #1311854 merged by Andrew Bogott:

[operations/puppet@production] Openstack: remove files and references to barbican

https://gerrit.wikimedia.org/r/1311854