User Details
User Details
- User Since
- Sep 7 2015, 3:25 PM (227 w, 6 d)
- Roles
- Administrator
Fri, Jan 17
Fri, Jan 17
Thu, Jan 16
Thu, Jan 16
olasd committed rSPSITEeb179416dbcd: Set an icinga check URI for the keycloak reverse proxy (authored by olasd).
Set an icinga check URI for the keycloak reverse proxy
olasd changed the status of T2162: Setup a centralized authentication service, a subtask of T1982: Add user authentication and permissions to swh-web, from Open to Work in Progress.
olasd changed the status of T2162: Setup a centralized authentication service, a subtask of T2163: Hook up sentry to centralized authentication, from Open to Work in Progress.
olasd changed the status of T2162: Setup a centralized authentication service from Open to Work in Progress.
Keycloak has been installed on a new vm, and the (empty) install is available at https://idp.softwareheritage.org/.
Add keycloak admin password
olasd committed rSPSITE60706cdf5601: pgbouncer: add ignore_startup_parameters setting (authored by olasd).
pgbouncer: add ignore_startup_parameters setting
Add facts for kelvingrove
Import module treydock/keycloak
Improve letsencrypt livedns hook
Add keycloak letsencrypt certificate
Implement origin lookup by sha1
olasd committed rDSTOCa3fd8269308a: Migrate tox.ini to extras = xxx instead of deps = .[testing] (authored by olasd).
Migrate tox.ini to extras = xxx instead of deps = .[testing]
Drop unused listener extra
Merge tox test environment configurations
olasd committed rDSTOCbb5d4051a491: Add minimal test coverage for swh.storage.schemata (authored by olasd).
Add minimal test coverage for swh.storage.schemata
olasd committed rDSTOCd788677c0ff4: Fix bogus NotImplementedError on Area.index_uris (authored by olasd).
Fix bogus NotImplementedError on Area.index_uris
Add keycloak postgresql password
olasd committed rSPSITEf33091701164: Add proper dependency between fish and /usr/bin/fish users (authored by olasd).
Add proper dependency between fish and /usr/bin/fish users
olasd committed rSPSITEa62060881e9b: Revert "Revert "deploy/webapp.pp: Modify static_dir location"" (authored by olasd).
Revert "Revert "deploy/webapp.pp: Modify static_dir location""
olasd added a comment to T2029: cran lister: Align lister to output list of tarballs per origin.
Wed, Jan 15
Wed, Jan 15
Accepting in so far as my concerns have been handled.
olasd requested changes to D2530: Decode textual content from utf-8 before displaying it.
Tue, Jan 14
Tue, Jan 14
olasd added a reverting change for D2519: deploy/webapp.pp: Modify static_dir location: rSPSITE679317a0c964: Revert "deploy/webapp.pp: Modify static_dir location".
olasd committed rSPSITE679317a0c964: Revert "deploy/webapp.pp: Modify static_dir location" (authored by olasd).
Revert "deploy/webapp.pp: Modify static_dir location"
Add esnode3 to logstash config
olasd closed T2174: Add debian package for swh-search, a subtask of T2167: Deploy swh-search, as Resolved.
After a few small hoops (adding the elasticsearch repository for tests, backporting python3-elasticsearch and its dependencies), swh.search is now packaged for unstable and buster.
olasd added a comment to D2527: Filter out swh/__init__.py from package.
D'oh. Landed via 4c5fe6995561f566dc7c3439932bca010cf31850. Thanks!
Mon, Jan 13
Mon, Jan 13
Move the weekly report to swh-devel.
olasd committed rSPSITEfd50fe11bbe5: Add crontabs to compress and purge old puppet reports (authored by olasd).
Add crontabs to compress and purge old puppet reports
Thu, Jan 9
Thu, Jan 9
olasd committed rSPSITE22d2f14cb93c: Partially revert "Add metrics_path and scheme variables to exported prometheus… (authored by olasd).
Partially revert "Add metrics_path and scheme variables to exported prometheus…
Make icinga2 disk excludes confirugrable
Wed, Jan 8
Wed, Jan 8
olasd committed rSPSITE2be3fd2d9600: Merge remote-tracking branch 'origin/production' into production (authored by olasd).
Merge remote-tracking branch 'origin/production' into production
The archive.internal.softwareheritage.org cert is now valid (via rSPSITEbdddd7804bbb).
olasd closed T1164: Dar backups fill up disk space on client machines, a subtask of T1282: Revisit backups, as Resolved.
dar backups have now been replaced with a setup around borg-backup and borgmatic, which only needs a small cache on the machines that are being backed up. borg is fast enough and its dedup is efficient enough that we're able to backups every hour now.
Cleanup hardcoded bind resource records
olasd committed rSPSITE589b7dfc5238: Only generate DNS records for the proper subdomains (authored by olasd).
Only generate DNS records for the proper subdomains
Tue, Jan 7
Tue, Jan 7
All this logic should probably end up in swh.storage.algorithms, because I'm sure swh.web also has a subtly different algorithm to pick a default branch.
Refactor puppet profiles to simplify them
olasd committed rSPSITEf036a922b641: Set the icinga check uri for sentry to a relevant path (authored by olasd).
Set the icinga check uri for sentry to a relevant path
olasd committed rSPSITE849c5e3cf614: Add icinga_check_uri parameter to reverse_proxy resources (authored by olasd).
Add icinga_check_uri parameter to reverse_proxy resources
olasd committed rSPSITE3e0a27992123: Only warn if letsencrypt certificate expires 25 days from now, not 60 days (authored by olasd).
Only warn if letsencrypt certificate expires 25 days from now, not 60 days
Mon, Jan 6
Mon, Jan 6
Done while reviewing old certificates.
olasd updated the task description for T979: Migrate TLS certificates away from the *.softwareheritage.org wildcards.
Fixed via rSPSITEbdddd780
Add sharing_id for swh.network domain
The puppet manifests have been updated to hardcode the ELK stack version, and ensure they stay there with package pinning.
I guess https://grafana.softwareheritage.org/d/Gyww7RfWz/workers-overview?orgId=1 implements this.
I'm pretty sure that this was a symptom of the MTU issue which has since been fixed at the gateway.
Fixed a while ago with rSPSITEe43c6cce.
tytso is now properly a member of the proxmox cluster.
olasd closed T1014: Add tytso to the proxmox cluster, a subtask of T1012: Integrate tytso in the swh infra, as Resolved.
That's been done for a while now.
olasd closed T1916: Fix invalid status.s.o certificate, a subtask of T979: Migrate TLS certificates away from the *.softwareheritage.org wildcards, as Resolved.
At the point of this report, status.softwareheritage.org was /not/ supposed to be accessible via https.
Done (via the profile::elasticsearch puppet module).
olasd closed T793: Move elasticsearch log cluster configuration inside puppet, a subtask of T792: Make the elasticsearch logging cluster actually a cluster, as Resolved.
Done via rSPSITEfed9cd721
olasd requested changes to D2496: writer/__init__.py: Fix UnboundLocalError.
This is plain Python AST stupid^Wbehavior:
Add borgmatic cron to borg clients
Fri, Jan 3
Fri, Jan 3
olasd committed rDJNLa9fb7c733a4f: Support short-hand syntax in get_journal_writer (authored by olasd).
Support short-hand syntax in get_journal_writer
Add systemd watchdog support
olasd committed rDJNL942d23f62425: Add producer_config key to kafka journal writer (authored by olasd).
Add producer_config key to kafka journal writer
olasd committed rSPSITEac8b6f33e33f: Allow unbound to forward requests to in-addr.arpa zones (authored by olasd).
Allow unbound to forward requests to in-addr.arpa zones
olasd committed rSPSITEc4d9b5d8e9d8: Use proper syntax for exported resource collection (authored by olasd).
Use proper syntax for exported resource collection
olasd committed rSPSITE0d0f92215511: Sensitive doesn't play well with exported resources (authored by olasd).
Sensitive doesn't play well with exported resources
olasd committed rSPSITE8dbfa42856ee: Add prefix for the borgmatic consistency section (authored by olasd).
Add prefix for the borgmatic consistency section
olasd committed rSPSITE6cf2694347ca: Remove from= restriction from ssh key as it interacts poorly with UseDNS=no (authored by olasd).
Remove from= restriction from ssh key as it interacts poorly with UseDNS=no
Proper borg init command run
olasd committed rSPSITEffaa659c3b32: Move borgmatic config to proper default path (authored by olasd).
Move borgmatic config to proper default path
Set the ssh key file in borgmatic config
Add /etc/borgmatic directory
olasd committed rSPSITEc603fdb11018: The borg backup package is called borgbackup (authored by olasd).
The borg backup package is called borgbackup
Bootstrap borg backup setup
Drop rsnapshot configuration
olasd committed rSPSITEfc98abcf5c6b: Rename dar variables to generic backups variables (authored by olasd).
Rename dar variables to generic backups variables
Update ocd facts
olasd committed rSENVfceea2285026: Remove legacy environment_data_provider setting (authored by olasd).
Remove legacy environment_data_provider setting
olasd committed rSPSITE0a49e2d3ece8: Remove reference to $ssl_chain/key in stats_web vhost definition (authored by olasd).
Remove reference to $ssl_chain/key in stats_web vhost definition
Thu, Jan 2
Thu, Jan 2
olasd closed T790: Turn off syslog, a subtask of T752: logrotate log spam: "error: error creating output file: FILE File exists", as Resolved.
Disable rsyslog on all servers
olasd committed rSPSITEfed9cd721e4a: Add crontab entry to rotate journald logs (only if they're properly synced) (authored by olasd).
Add crontab entry to rotate journald logs (only if they're properly synced)
olasd closed T790: Turn off syslog as Resolved by committing rSPSITE4512617a8c19: Disable rsyslog on all servers.