Configuration report 04/09-17/09.

Transcription

1 Configuration report 04/09-17/09

2 Peaceful and calm source:

3 hosts registered in Foreman!

4 Moved to dashboards.c.c for our internal monitoring toolset!

5 Completed tasks Trusted bag (aka tbag): New teigi::secret:sub_file Implements templating with built-in secrets handling support. In QA -- First namespace of environments protected: db_.* only writable by service-it-db-infrastructure. More can be added upon request. Not many people using snapshots or dyn environments for production, though. Improvements for ai-renamehost: Several fixes related to the host renaming itself in Foreman and the AIMS dereg. Thanks to those who reported the problems.

6 teigi::secret::sub_file $ cat it-puppet-module-mymodule/code/manifests/foo.pp... teigi::secret::sub_file {"/etc/subfile.ini": teigi_keys => ["asecret", "anothersecret"], template => "mymodule/subfile.ini.erb" } $ cat it-puppet-module-mymodule/code/templates/subfile.ini.erb My secrets are: %TEIGI asecret % and %TEIGI anothersecret %

7 Completed tasks Trusted bag (aka tbag): New teigi::secret:sub_file Implements templating with built-in secrets handling support. In QA -- First namespace of environments protected: db_.* only writable by service-it-db-infrastructure. More can be added upon request. Not many people using snapshots or dyn environments for production, though. Improvements for ai-renamehost: Several fixes related to the host renaming itself in Foreman and the AIMS dereg. Thanks to those who reported the problems.

8 Completed tasks Documentation: Misc bits and pieces added, great feedback collected :) CentOS7 and Puppet: Lots of misc fixes to several modules and packages. Functional aiadm7 and lxplus7 (still in testing, though) Missing bits: AI training: Upcoming session next Friday. 12 participants registered.

9 Things to keep an eye on New version of it-puppet-module-postgresql in QA: Proposed date to production: 22/09. Not backwards compatible. ai-installhost to disable all alarms by default: Patch being reviewed, in QA probably next week. Use --keepalarms to leave them untouched.

10 new/deleted modules/hostgroups + it-puppet-module-neutron + it-puppet-hostgroup-compass + it-puppet-hostgroup-sentry - it-puppet-hostgroup-vocmshammercloud - it-puppet-hostgroup-vocmscrab

11 Items in QA CRM-401 gridftp add an option to enable UDT for gridftp servers CRM-577 hardware Deploy blockdevice driver monitoring in QA for EL5 and EL6 CRM-611 site Update of site.pp to support 10-deep hostgroup CRM-613 sapp_puppetmaster Drop alarmed fact from sapp_puppetmaster CRM-658 postgresql Update Postgresql module > CRM-660 puppetdb Update Puppetdb module > CRM-664 haproxy > for puppetlabs-haproxy module CRM-665 abrt abrt: notify at the 'notify' event, not post-create & handle dupplicates CRM-666 abrt abrt: fix backtrace generation

12 Items in QA CRM-665 abrt abrt: notify at the 'notify' event, not post-create & handle dupplicates CRM-666 abrt abrt: fix backtrace generation CRM-667 teigi teigi:secret::sub_file type for template style teigi CRM-670 osrepos Correct cernonly-testing repo for CC7 CRM-671 rsyslog CC7 fixes for rsyslog CRM-672 afs cc7 afs support CRM-674 ipmi Disable at boot and stop service ipmiutil_wdt on module ipmi

13 Changes out of QA (off to prod) CRM-620 cernlib New cern_hwcontract function to extract contractid from hwdb cache CRM-624 landb Improve how the LANDB facts cache is used/generated CRM-627 lemon Changes in lemon module: Avoid breaking puppet runs on CentOS 7 CRM-631 openstack_clients Changed the regex used to generate the repo name in openstack_clients CRM-634 security Refactoring Security Module CRM-636 ai-tools ai-tools CRM-639 firewall Update firewall module from to CRM-640 base CC7 only create a directory for loading overrided facts into. CRM-641 sssd CC7 - sssd fix for operatingsystemrelease not being a float. CRM-642 snmp CC7 - snmp module fix for lsb release being broken up in 7.

14 Changes out of QA (off to prod) CRM-643 osrepos CC7 osrepos epel7-beta -> epel7 and epel7-testing CRM-644 abrt Abrt: ensure that all packages are installed CRM-645 cernlib cern_altidentity - Don't fail when user has no alternative identities CRM-646 security Security (CC7): use versioncmp for major release comparison CRM-647 security Security (CC7): add support for last execlog/netlog kernel modules CRM-648 lsf deploy dedicated repository for batch related software like LSF CRM-649 lemon-forwarder lemon-forwarder upgrade CRM-651 ai-tools ai-tools CRM-652 voms voms module: Use passfile to specify DB details in the configuration scripts CRM-661 osrepos Fix GPG key location on SLC repos defined for RHEL 5 and 6 systems CRM-662 voms voms module: Add COMPASS vo