Create Task
Maniphest T367490

Split out ldap management from mwmaint
Closed, ResolvedPublic
Actions

Description

Historically profile::openldap::management was co-hosted on the mwmaint servers. These will vanish when the wikikube migration is completed, so this task is about moving them to separate ldap-maint1001/ldap-maint2002 hosts.

Details

Show related patches Customize query in gerrit

Event Timeline

• MoritzMuehlenhoff created this task.Fri, Jun 14, 7:51 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptFri, Jun 14, 7:51 AM
gerritbot added a comment.Fri, Jun 14, 7:57 AM

Change #1043645 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add ldap-maint[12]001 to site.pp

https://gerrit.wikimedia.org/r/1043645

gerritbot added a project: Patch-For-Review.Fri, Jun 14, 7:57 AM
gerritbot added a comment.Fri, Jun 14, 8:01 AM

Change #1043646 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add partman globbing for ldap-maint

https://gerrit.wikimedia.org/r/1043646

gerritbot added a comment.Fri, Jun 14, 8:08 AM

Change #1043645 merged by Muehlenhoff:

[operations/puppet@production] Add ldap-maint[12]001 to site.pp

https://gerrit.wikimedia.org/r/1043645

gerritbot added a comment.Fri, Jun 14, 8:12 AM

Change #1043646 merged by Muehlenhoff:

[operations/puppet@production] Add partman globbing for ldap-maint

https://gerrit.wikimedia.org/r/1043646

Maintenance_bot removed a project: Patch-For-Review.Fri, Jun 14, 8:30 AM
gerritbot added a comment.Fri, Jun 14, 8:39 AM

Change #1043656 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] profile::openldap::management: Add support for bookworm

https://gerrit.wikimedia.org/r/1043656

gerritbot added a project: Patch-For-Review.Fri, Jun 14, 8:39 AM
gerritbot added a comment.Fri, Jun 14, 9:31 AM

Change #1043656 merged by Muehlenhoff:

[operations/puppet@production] profile::openldap::management: Add support for bookworm

https://gerrit.wikimedia.org/r/1043656

gerritbot added a comment.Fri, Jun 14, 9:47 AM

Change #1043680 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] New openldap::management role

https://gerrit.wikimedia.org/r/1043680

gerritbot added a comment.Fri, Jun 14, 10:17 AM

Change #1043680 merged by Muehlenhoff:

[operations/puppet@production] New openldap::management role

https://gerrit.wikimedia.org/r/1043680

gerritbot added a comment.Fri, Jun 14, 10:24 AM

Change #1043709 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Apply openldap::maintenance role to ldap-maint* hosts

https://gerrit.wikimedia.org/r/1043709

gerritbot added a comment.Fri, Jun 14, 1:00 PM

Change #1043709 merged by Muehlenhoff:

[operations/puppet@production] Apply openldap::maintenance role to ldap-maint* hosts

https://gerrit.wikimedia.org/r/1043709

gerritbot added a comment.Fri, Jun 14, 1:08 PM

Change #1043770 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add ldap-admins settings to new ldap-maint role

https://gerrit.wikimedia.org/r/1043770

gerritbot added a comment.Fri, Jun 14, 1:19 PM

Change #1043770 merged by Muehlenhoff:

[operations/puppet@production] Add ldap-admins settings to new ldap-maint role

https://gerrit.wikimedia.org/r/1043770

Maintenance_bot removed a project: Patch-For-Review.Fri, Jun 14, 1:30 PM
gerritbot added a comment.Fri, Jun 14, 1:42 PM

Change #1043783 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Enable account check on new ldap-main host in eqiad

https://gerrit.wikimedia.org/r/1043783

gerritbot added a project: Patch-For-Review.Fri, Jun 14, 1:42 PM
gerritbot added a comment.Fri, Jun 14, 1:47 PM

Change #1043783 merged by Muehlenhoff:

[operations/puppet@production] Enable account check on new ldap-main host in eqiad

https://gerrit.wikimedia.org/r/1043783

Stashbot added a comment.Fri, Jun 14, 1:49 PM

Mentioned in SAL (#wikimedia-operations) [2024-06-14T13:49:15Z] <jmm@cumin2002> START - Cookbook sre.puppet.sync-netbox-hiera generate netbox hiera data: "new ldap-maint hosts - jmm@cumin2002 - T367490"

Stashbot added a comment.Fri, Jun 14, 2:04 PM

Mentioned in SAL (#wikimedia-operations) [2024-06-14T14:04:54Z] <jmm@cumin2002> END (PASS) - Cookbook sre.puppet.sync-netbox-hiera (exit_code=0) generate netbox hiera data: "new ldap-maint hosts - jmm@cumin2002 - T367490"

Maintenance_bot removed a project: Patch-For-Review.Fri, Jun 14, 2:30 PM
gerritbot added a comment.Mon, Jun 17, 7:06 AM

Change #1046318 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] mwmaint: Stop including profile::openldap::management

https://gerrit.wikimedia.org/r/1046318

gerritbot added a project: Patch-For-Review.Mon, Jun 17, 7:06 AM
gerritbot added a comment.Mon, Jun 17, 7:50 AM

Change #1046318 merged by Muehlenhoff:

[operations/puppet@production] mwmaint: Stop including profile::openldap::management

https://gerrit.wikimedia.org/r/1046318

gerritbot added a comment.Mon, Jun 17, 7:58 AM

Change #1046592 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Disable openldap::management timers on mwmaint hosts

https://gerrit.wikimedia.org/r/1046592

gerritbot added a comment.Mon, Jun 17, 8:10 AM

Change #1046594 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] profile::openldap::management: Remove support for buster

https://gerrit.wikimedia.org/r/1046594

gerritbot added a comment.Mon, Jun 17, 8:13 AM

Change #1046596 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Drop ldap-admins access group from mwmaint hosts

https://gerrit.wikimedia.org/r/1046596

gerritbot added a comment.Mon, Jun 17, 8:28 AM

Change #1046594 merged by Muehlenhoff:

[operations/puppet@production] profile::openldap::management: Remove support for buster

https://gerrit.wikimedia.org/r/1046594

gerritbot added a comment.Mon, Jun 17, 8:32 AM

Change #1046592 merged by Muehlenhoff:

[operations/puppet@production] Disable openldap::management timers on mwmaint hosts

https://gerrit.wikimedia.org/r/1046592

• MoritzMuehlenhoff closed this task as Resolved.Mon, Jun 17, 8:49 AM

The LDAP management parts have been split off to the new ldap-maint1001/ldap-maint2001 hosts.

gerritbot added a comment.Wed, Jun 19, 8:20 AM

Change #1046596 merged by Muehlenhoff:

[operations/puppet@production] Drop ldap-admins access group from mwmaint hosts

https://gerrit.wikimedia.org/r/1046596

Saadfghjkl9988776655 subscribed.Wed, Jun 19, 8:22 AM
Maintenance_bot removed a project: Patch-For-Review.Wed, Jun 19, 8:30 AM
gerritbot added a comment.Tue, Jun 25, 12:38 PM

Change #1049536 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] offboard-user: New -H for ldapmodify

https://gerrit.wikimedia.org/r/1049536

gerritbot added a project: Patch-For-Review.Tue, Jun 25, 12:38 PM
gerritbot added a comment.Tue, Jun 25, 12:49 PM

Change #1049536 merged by Muehlenhoff:

[operations/puppet@production] offboard-user: New -H for ldapmodify

https://gerrit.wikimedia.org/r/1049536

Maintenance_bot removed a project: Patch-For-Review.Tue, Jun 25, 1:31 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits