Configuration report 04/09-17/09 ai-config-team@cern.ch
Peaceful and calm source: http://whiskyadvocate.com/
13.000 hosts registered in Foreman!
Moved to dashboards.c.c for our internal monitoring toolset!
Completed tasks Trusted bag (aka tbag): New teigi::secret:sub_file Implements templating with built-in secrets handling support. In QA -- https://its.cern.ch/jira/browse/crm-667 First namespace of environments protected: db_.* only writable by service-it-db-infrastructure. More can be added upon request. Not many people using snapshots or dyn environments for production, though. Improvements for ai-renamehost: Several fixes related to the host renaming itself in Foreman and the AIMS dereg. Thanks to those who reported the problems.
teigi::secret::sub_file $ cat it-puppet-module-mymodule/code/manifests/foo.pp... teigi::secret::sub_file {"/etc/subfile.ini": teigi_keys => ["asecret", "anothersecret"], template => "mymodule/subfile.ini.erb" } $ cat it-puppet-module-mymodule/code/templates/subfile.ini.erb My secrets are: %TEIGI asecret % and %TEIGI anothersecret %
Completed tasks Trusted bag (aka tbag): New teigi::secret:sub_file Implements templating with built-in secrets handling support. In QA -- https://its.cern.ch/jira/browse/crm-667 First namespace of environments protected: db_.* only writable by service-it-db-infrastructure. More can be added upon request. Not many people using snapshots or dyn environments for production, though. Improvements for ai-renamehost: Several fixes related to the host renaming itself in Foreman and the AIMS dereg. Thanks to those who reported the problems.
Completed tasks Documentation: http://cern.ch/config Misc bits and pieces added, great feedback collected :) CentOS7 and Puppet: Lots of misc fixes to several modules and packages. Functional aiadm7 and lxplus7 (still in testing, though) Missing bits: https://twiki.cern.ch/twiki/bin/view/agileinfrastructure/configcentos7 AI training: Upcoming session next Friday. 12 participants registered.
Things to keep an eye on New version of it-puppet-module-postgresql in QA: https://its.cern.ch/jira/browse/crm-658 Proposed date to production: 22/09. Not backwards compatible. ai-installhost to disable all alarms by default: Patch being reviewed, in QA probably next week. Use --keepalarms to leave them untouched. https://its.cern.ch/jira/browse/ai-3994
new/deleted modules/hostgroups + it-puppet-module-neutron + it-puppet-hostgroup-compass + it-puppet-hostgroup-sentry - it-puppet-hostgroup-vocmshammercloud - it-puppet-hostgroup-vocmscrab
Items in QA CRM-401 gridftp add an option to enable UDT for gridftp servers CRM-577 hardware Deploy blockdevice driver monitoring in QA for EL5 and EL6 CRM-611 site Update of site.pp to support 10-deep hostgroup CRM-613 sapp_puppetmaster Drop alarmed fact from sapp_puppetmaster CRM-658 postgresql Update Postgresql module 2.4.1-> 3.4.2 CRM-660 puppetdb Update Puppetdb module 1.6.0 -> 3.0.1 CRM-664 haproxy 0.0.2 -> 1.0.0 for puppetlabs-haproxy module CRM-665 abrt abrt: notify at the 'notify' event, not post-create & handle dupplicates CRM-666 abrt abrt: fix backtrace generation
Items in QA CRM-665 abrt abrt: notify at the 'notify' event, not post-create & handle dupplicates CRM-666 abrt abrt: fix backtrace generation CRM-667 teigi teigi:secret::sub_file type for template style teigi CRM-670 osrepos Correct cernonly-testing repo for CC7 CRM-671 rsyslog CC7 fixes for rsyslog CRM-672 afs cc7 afs support CRM-674 ipmi Disable at boot and stop service ipmiutil_wdt on module ipmi
Changes out of QA (off to prod) CRM-620 cernlib New cern_hwcontract function to extract contractid from hwdb cache CRM-624 landb Improve how the LANDB facts cache is used/generated CRM-627 lemon Changes in lemon module: Avoid breaking puppet runs on CentOS 7 CRM-631 openstack_clients Changed the regex used to generate the repo name in openstack_clients CRM-634 security Refactoring Security Module CRM-636 ai-tools ai-tools 8.3-1 CRM-639 firewall Update firewall module from 1.0.2 to 1.1.3 CRM-640 base CC7 only create a directory for loading overrided facts into. CRM-641 sssd CC7 - sssd fix for operatingsystemrelease not being a float. CRM-642 snmp CC7 - snmp module fix for lsb release being broken up in 7.
Changes out of QA (off to prod) CRM-643 osrepos CC7 osrepos epel7-beta -> epel7 and epel7-testing CRM-644 abrt Abrt: ensure that all packages are installed CRM-645 cernlib cern_altidentity - Don't fail when user has no alternative identities CRM-646 security Security (CC7): use versioncmp for major release comparison CRM-647 security Security (CC7): add support for last execlog/netlog kernel modules CRM-648 lsf deploy dedicated repository for batch related software like LSF CRM-649 lemon-forwarder lemon-forwarder upgrade CRM-651 ai-tools ai-tools 8.4-2 CRM-652 voms voms module: Use passfile to specify DB details in the configuration scripts CRM-661 osrepos Fix GPG key location on SLC repos defined for RHEL 5 and 6 systems CRM-662 voms voms module: Add COMPASS vo