Commits · 30ee54f0789c944cca2b71c5d84c3eeab78ffdc0 · Platform / Infrastructure / Puppet / puppet-swh-site

Oct 17, 2022
- thanos: Declare archive-production thanos for live data querying · 30ee54f0
  Vincent Sellier authored 2 years ago
  
  Related to T4385
  30ee54f0
Oct 04, 2022
- k8s-archive-production: Add an internal ingress to expose reaper webui · 9065bc6a
  Vincent Sellier authored 2 years ago
  
  Related to T4458
  Unverified
  
  9065bc6a
Oct 03, 2022
- Add thanos store for archive-production rancher cluster · 4a28fe53
  Nicolas Dandrimont authored 2 years ago
  
  4a28fe53
Sep 30, 2022
- argocd: fix the missing dot in the dns declaration · 4b287964
  Vincent Sellier authored 2 years ago
  
  Related to T4461
  Unverified
  
  4b287964
Sep 29, 2022
- Disable ping on hosts/ips managed by metallb · bee3d6dc
  Vincent Sellier authored 2 years ago
  
  Related to T4534
  Unverified
  
  bee3d6dc
Sep 28, 2022

Vincent Sellier authored 2 years ago

- Delete the public RP configuration
- Don't generate the ssl certificate as a self-signed certificate
  will be used at this time

Related to T4461

Unverified

dd8df930

Add more origins to savecodenow::e2e. · 7f082ccb

vlorentz authored 2 years ago

This will reduce the number of visits on the tested origins,
by randomly selecting one to submit to SCN, instead of always
visiting the same one.

Because of the current performance of swh-storage, having too
many visits for the same origin causes timeouts.

7f082ccb

argocd: Prepare the configuration to migrate to the internal admin network · 73ae99da
Vincent Sellier authored 2 years ago
```
- Use the global ingress cluster ip
- Prepare the certificate to support argocd.internal.a.s.n

Related to T4461
```
Unverified

73ae99da
staging: Migrate last indexer journal client to elastic workers · b81df129
Antoine R. Dumont authored 2 years ago
```
Related to T4540
```
Unverified

b81df129

Sep 27, 2022
- staging: Migrate most indexer journal clients to elastic workers · 2f67bfc5
  Antoine R. Dumont authored 2 years ago
  
  All but fossology license as some "nomossa" packaging for bullseye need to happen somehow first. That's the executable that indexer requires to run. Related to T4540
  Unverified
  
  2f67bfc5
- staging: Decomission worker2 · 461e9ea4
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  461e9ea4
- staging: Migrate deposit checker service to elastic workers · c06913c4
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  c06913c4
Sep 26, 2022
- rancher-node-production-worker*: Update nameserver entries with ns0 · 187454b0
  Antoine R. Dumont authored 2 years ago
  
  The ip is ns0.azure [1] [1] ``` $ host ns0.euwest.azure.internal.softwareheritage.org ns0.euwest.azure.internal.softwareheritage.org has address 192.168.200.22 ```
  Unverified
  
  187454b0
- staging: Migrate vault cookers to elastic workers · c9ad6c20
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  c9ad6c20
- Set rancher-node-production worker to high load profile · 67575cd6
  Antoine R. Dumont authored 2 years ago
  
  Unverified
  
  67575cd6
Sep 22, 2022
- staging: Deploy remaining lister in elastic staging workers · f5ec1b2f
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  f5ec1b2f
- staging: Migrate maven lister to elastic workers · b99fc17b
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  b99fc17b
Sep 20, 2022
- staging: Stop opam worker service deployed in elastic workers · b16e2a0d
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  b16e2a0d
- staging: Stop deposit worker service deployed in elastic workers · 58a1a089
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  58a1a089
- staging: Stop nixguix worker service deployed in elastic workers · de37476e
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  de37476e
- staging: Stop some more services deployed in elastic workers · ae7c160c
  Antoine R. Dumont authored 2 years ago
  
  - archive - cran - debian - high priority Related to T4540
  Unverified
  
  ae7c160c
Sep 19, 2022
- staging: Stop services already deployed in elastic workers · 7ff67989
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  7ff67989
- staging: Migrate svn loader service to elastic workers · 45968c2e
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  45968c2e
- staging: Migrate cvs loader service to elastic workers · 67d4765b
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  67d4765b
- staging: Migrate mercurial loader service to elastic worker · c369b92b
  Antoine R. Dumont authored 2 years ago
  
  Related to T4540
  Unverified
  
  c369b92b
- postfix: remove zack from the root smtp alias · c7ec3955
  Vincent Sellier authored 2 years ago
  
  at his request because it generates a lot of informative/spammy emails
  Unverified
  
  c7ec3955
Sep 16, 2022
- indexer: Simplify journal client configuration · ca0e247c
  Antoine R. Dumont authored 2 years ago
  
  Related to T4459
  Unverified
  
  ca0e247c
- Adapt configuration for indexer workers running on azure · 24f2623d
  Antoine R. Dumont authored 2 years ago
  
  Prior to this the broker configuration was not applied appropriately. Related to T4459
  Unverified
  
  24f2623d
- indexer: Use public brokers in production, internal ones for staging · 74264b68
  Antoine R. Dumont authored 2 years ago
  
  Related to T4459
  Unverified
  
  74264b68
- indexer: Allow journal client authentication configuration · 009c9243
  Antoine R. Dumont authored 2 years ago
  
  This extends the current production indexer journal clients to use their credentials and avoid passing through the vpn. This does not touch the staging workers configuration. This got adapted according to the documentation [1]. [1] https://docs.softwareheritage.org/devel/swh-journal/journal-clients.html#journal-client-authentication Related to T4459
  Unverified
  
  009c9243
Sep 15, 2022
- rancher: use a zfs dataset for /var/lib/kubelet to use the local storage for EmptyDir volumes · 386b3c6a
  Vincent Sellier authored 2 years ago
  
  Related to T4506
  Unverified
  
  386b3c6a
- Make swh.graph http listen on all ip addresses · 4790ce76
  Nicolas Dandrimont authored 2 years ago
  
  4790ce76
- cassandra: Allow to configure the jmx for remote or local only access · de429d5d
  Vincent Sellier authored 2 years ago
  
  If remote access is activated, the user authentication is configured and activated Related to T4458
  Unverified
  
  de429d5d
Sep 14, 2022
- swh::deploy::graph: revert unexport of icinga checks · b56179cd
  Nicolas Dandrimont authored 2 years ago
  
  b56179cd
- Split deployment of swh.graph grpc and http · 3e45c431
  Nicolas Dandrimont authored 2 years ago
  
  3e45c431
- Clarify swh-graph icinga checks between http and grpc · ce5de80d
  Nicolas Dandrimont authored 2 years ago
  
  ce5de80d
- Prometheus's 1m is one minute, not one month · 892f68fe
  Nicolas Dandrimont authored 2 years ago
  
  892f68fe
- Use the proper option to get perfdata out of prometheus metrics · 7447a512
  Nicolas Dandrimont authored 2 years ago
  
  7447a512
- Overhaul variables for prometheus metric icinga check · 07b107e9
  Nicolas Dandrimont authored 2 years ago
  
  07b107e9
- Use proper name for the check_prometheus_metric_query var · cf64f9b3
  Nicolas Dandrimont authored 2 years ago
  
  cf64f9b3