You are browsing a read-only backup copy of Wikitech. The primary site can be found at wikitech.wikimedia.org

Difference between revisions of "Hiera:Deployment-prep"

From Wikitech
Jump to navigation Jump to search
imported>Alex Monk
(Undo revision 1830131 by Alex Monk (talk))
imported>Alex Monk
(re-add puppet_ca_content in new hash format)
 
Line 12: Line 12:
 
     - role::prometheus::node_exporter
 
     - role::prometheus::node_exporter
 
puppetmaster: deployment-puppetmaster03.deployment-prep.eqiad.wmflabs
 
puppetmaster: deployment-puppetmaster03.deployment-prep.eqiad.wmflabs
 +
"profile::base::certificates::puppet_ca_content":
 +
    deployment-puppetmaster03.deployment-prep.eqiad.wmflabs: |
 +
        -----BEGIN CERTIFICATE-----
 +
        MIIF8zCCA9ugAwIBAgIBATANBgkqhkiG9w0BAQsFADBNMUswSQYDVQQDDEJQdXBw
 +
        ZXQgQ0E6IGRlcGxveW1lbnQtcHVwcGV0bWFzdGVyMDMuZGVwbG95bWVudC1wcmVw
 +
        LmVxaWFkLndtZmxhYnMwHhcNMTgwNTI1MjA0MzA3WhcNMjMwNTI1MjA0MzA3WjBN
 +
        MUswSQYDVQQDDEJQdXBwZXQgQ0E6IGRlcGxveW1lbnQtcHVwcGV0bWFzdGVyMDMu
 +
        ZGVwbG95bWVudC1wcmVwLmVxaWFkLndtZmxhYnMwggIiMA0GCSqGSIb3DQEBAQUA
 +
        A4ICDwAwggIKAoICAQCvNK9tEpMTm2MhvvpjO+/YrufgpuRqb8lKU1cpYv6vLFO+
 +
        4VIkWS2pB7roOlXYX8YCcPH5DtQn/+9aOCH1F/qYViTCv91wFRijpswvdMfXUcfR
 +
        ddikw9PNVgrvZTEpyl4+wyMOb020d3IUdmtY9TEtwwGP2pPFY58FOWWlovhZO/H7
 +
        /74r+X+UAJbyLS4qKdxZF6D4/RRXGVur6Lm9YNpmyf+AFhMVJWOQSnGvIure3Qkn
 +
        SOOku6V8wVPawU41Z98XC/nWCyf3fIg2vTRsNY+E3rtE5Wvh7EqYx04mv+FvnEn2
 +
        umaIzAMng2KFh01SYwBWKetPlTyrQ31b2JHq4lKD4D+V0dJG2t5xDXTbnNqEiP4+
 +
        BHrHKzlhIpSxuYQjKKVa9rayJGqgQ2W55ikolJNNQ0rKbg58uqecWw0qQhBQdcjL
 +
        Ds1W1avaCTVYAVzDDaCX+n7QYNXxtIxVoee6ODzysqhyXP/R4F1M5PlB4zXj4Yr2
 +
        5h9dbFaiLgk7DU0N1j6q98DLBtE1SJmhVHDli9X3jL5ackduZaTY3OthEfpe+aYH
 +
        KrvP5DCg+J1AAKHGdglya0Jo7a8pimx0jQsjfcKjEf+tFEVmJkRmtRuYH3kIQtOy
 +
        zJ4k3N0IcziOARWYKHXd/l5JB0x8Cz48I0Tam+mVe1S7mjbdeKjx0ztLnU8gpQID
 +
        AQABo4HdMIHaMDcGCWCGSAGG+EIBDQQqDChQdXBwZXQgUnVieS9PcGVuU1NMIElu
 +
        dGVybmFsIENlcnRpZmljYXRlMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTAD
 +
        AQH/MB0GA1UdDgQWBBSv7Dd2we6j3ZjAViA1tJ7rIG/D2zBfBgNVHSMEWDBWoVGk
 +
        TzBNMUswSQYDVQQDDEJQdXBwZXQgQ0E6IGRlcGxveW1lbnQtcHVwcGV0bWFzdGVy
 +
        MDMuZGVwbG95bWVudC1wcmVwLmVxaWFkLndtZmxhYnOCAQEwDQYJKoZIhvcNAQEL
 +
        BQADggIBAEDjBhV9+evEbBBmcmrlgYoNYkK6qkoNYFoJbu+OT0TmkvkZwR4Z6QS7
 +
        KtaRmOwoc56lppS2eTlED0P0VRAg67zzfI7foirGvNXqInd4vcw4nSnLxppwPKvl
 +
        gdZ/DrwXM/1Fo4wLMI22p0ItzkWhAV/BTtjD7er9N3fP+0MYOvmGb1HGiKahXE5h
 +
        qpBWOrzOBjJ+Dkr4x+BTcl5faslScSwQm2CoX2jPtRZLXSdIIcMMt/IOk2daa0B7
 +
        StmLAMKrIjF8Knd2a3Rwm2XrixJlwqvDsgeYuqlp7fXQpMkpPVM1fYfgpX2139Qb
 +
        7LA/P1Yd7T4x9ETKQ82hg8DokWnUkpU2G5WxhiEpIm+xfCApx6jLf0rJE7JKhV9U
 +
        L3tAT/+d7Xl3TJJHkuofh/wq5vGLl2r9eBBLI3vPQqiQcCeYVKy3jB7cFsNUltT2
 +
        sq40OjbhmWKgsMngcpsRqtNT8DFiBern+VqoE54L+JO7c8RjN2+S2d51pe8rJeHM
 +
        eOpyhXb8oy2T/C3frao/AvyXj4WVDiI4KQM4QZWghbXNI1DZIaGA+7Ukh58gmalo
 +
        sgPXTxInI5Jd+sXJ8L3hPR8TzT4NI5tHsU7DvMaFw4/2sh5RRmuNUGxvnNIEhdGX
 +
        1i7F8DABzWlnololA3quszMP2XwEQRlJXb6OJVjE4uHULoUSZMoR
 +
        -----END CERTIFICATE-----
 
"role::mail::mx::verp_domains":
 
"role::mail::mx::verp_domains":
 
     - beta.wmflabs.org
 
     - beta.wmflabs.org

Latest revision as of 22:55, 13 September 2019

--- "profile::mediawiki::php::restarts::ensure": absent "profile::mediawiki::php::restarts::opcache_limit": 100 "profile::restbase::salt_key": secretkey "profile::cassandra::rack": rack1 "apt::use_experimental": true "mediawiki::users::web": www-data "beta::syncsiteresources::user": www-data classes:

   - apt::unattendedupgrades
   - role::aptly::client
   - role::prometheus::node_exporter

puppetmaster: deployment-puppetmaster03.deployment-prep.eqiad.wmflabs "profile::base::certificates::puppet_ca_content":

   deployment-puppetmaster03.deployment-prep.eqiad.wmflabs: |
       -----BEGIN CERTIFICATE-----
       MIIF8zCCA9ugAwIBAgIBATANBgkqhkiG9w0BAQsFADBNMUswSQYDVQQDDEJQdXBw
       ZXQgQ0E6IGRlcGxveW1lbnQtcHVwcGV0bWFzdGVyMDMuZGVwbG95bWVudC1wcmVw
       LmVxaWFkLndtZmxhYnMwHhcNMTgwNTI1MjA0MzA3WhcNMjMwNTI1MjA0MzA3WjBN
       MUswSQYDVQQDDEJQdXBwZXQgQ0E6IGRlcGxveW1lbnQtcHVwcGV0bWFzdGVyMDMu
       ZGVwbG95bWVudC1wcmVwLmVxaWFkLndtZmxhYnMwggIiMA0GCSqGSIb3DQEBAQUA
       A4ICDwAwggIKAoICAQCvNK9tEpMTm2MhvvpjO+/YrufgpuRqb8lKU1cpYv6vLFO+
       4VIkWS2pB7roOlXYX8YCcPH5DtQn/+9aOCH1F/qYViTCv91wFRijpswvdMfXUcfR
       ddikw9PNVgrvZTEpyl4+wyMOb020d3IUdmtY9TEtwwGP2pPFY58FOWWlovhZO/H7
       /74r+X+UAJbyLS4qKdxZF6D4/RRXGVur6Lm9YNpmyf+AFhMVJWOQSnGvIure3Qkn
       SOOku6V8wVPawU41Z98XC/nWCyf3fIg2vTRsNY+E3rtE5Wvh7EqYx04mv+FvnEn2
       umaIzAMng2KFh01SYwBWKetPlTyrQ31b2JHq4lKD4D+V0dJG2t5xDXTbnNqEiP4+
       BHrHKzlhIpSxuYQjKKVa9rayJGqgQ2W55ikolJNNQ0rKbg58uqecWw0qQhBQdcjL
       Ds1W1avaCTVYAVzDDaCX+n7QYNXxtIxVoee6ODzysqhyXP/R4F1M5PlB4zXj4Yr2
       5h9dbFaiLgk7DU0N1j6q98DLBtE1SJmhVHDli9X3jL5ackduZaTY3OthEfpe+aYH
       KrvP5DCg+J1AAKHGdglya0Jo7a8pimx0jQsjfcKjEf+tFEVmJkRmtRuYH3kIQtOy
       zJ4k3N0IcziOARWYKHXd/l5JB0x8Cz48I0Tam+mVe1S7mjbdeKjx0ztLnU8gpQID
       AQABo4HdMIHaMDcGCWCGSAGG+EIBDQQqDChQdXBwZXQgUnVieS9PcGVuU1NMIElu
       dGVybmFsIENlcnRpZmljYXRlMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTAD
       AQH/MB0GA1UdDgQWBBSv7Dd2we6j3ZjAViA1tJ7rIG/D2zBfBgNVHSMEWDBWoVGk
       TzBNMUswSQYDVQQDDEJQdXBwZXQgQ0E6IGRlcGxveW1lbnQtcHVwcGV0bWFzdGVy
       MDMuZGVwbG95bWVudC1wcmVwLmVxaWFkLndtZmxhYnOCAQEwDQYJKoZIhvcNAQEL
       BQADggIBAEDjBhV9+evEbBBmcmrlgYoNYkK6qkoNYFoJbu+OT0TmkvkZwR4Z6QS7
       KtaRmOwoc56lppS2eTlED0P0VRAg67zzfI7foirGvNXqInd4vcw4nSnLxppwPKvl
       gdZ/DrwXM/1Fo4wLMI22p0ItzkWhAV/BTtjD7er9N3fP+0MYOvmGb1HGiKahXE5h
       qpBWOrzOBjJ+Dkr4x+BTcl5faslScSwQm2CoX2jPtRZLXSdIIcMMt/IOk2daa0B7
       StmLAMKrIjF8Knd2a3Rwm2XrixJlwqvDsgeYuqlp7fXQpMkpPVM1fYfgpX2139Qb
       7LA/P1Yd7T4x9ETKQ82hg8DokWnUkpU2G5WxhiEpIm+xfCApx6jLf0rJE7JKhV9U
       L3tAT/+d7Xl3TJJHkuofh/wq5vGLl2r9eBBLI3vPQqiQcCeYVKy3jB7cFsNUltT2
       sq40OjbhmWKgsMngcpsRqtNT8DFiBern+VqoE54L+JO7c8RjN2+S2d51pe8rJeHM
       eOpyhXb8oy2T/C3frao/AvyXj4WVDiI4KQM4QZWghbXNI1DZIaGA+7Ukh58gmalo
       sgPXTxInI5Jd+sXJ8L3hPR8TzT4NI5tHsU7DvMaFw4/2sh5RRmuNUGxvnNIEhdGX
       1i7F8DABzWlnololA3quszMP2XwEQRlJXb6OJVjE4uHULoUSZMoR
       -----END CERTIFICATE-----

"role::mail::mx::verp_domains":

   - beta.wmflabs.org

"role::mail::mx::verp_post_connect_server": deployment.wikimedia.beta.wmflabs.org "role::mail::mx::verp_bounce_post_url": http://deployment.wikimedia.beta.wmflabs.org/w/api.php use_dnsmasq: false eventlogging_host: 10.68.18.111 eventlogging_statsd_host: labmon1001.eqiad.wmnet "elasticsearch::cluster_hosts":

   - deployment-elastic05.deployment-prep.eqiad.wmflabs
   - deployment-elastic06.deployment-prep.eqiad.wmflabs
   - deployment-elastic07.deployment-prep.eqiad.wmflabs
   - deployment-elastic08.deployment-prep.eqiad.wmflabs

"etcd::use_ssl": true "etcd::auth::common::root_password": secret etcd_client_srv_domain: "" etcd_host: deployment-etcd-01.deployment-prep.eqiad.wmflabs etcd_port: 2379 "profile::conftool::client::protocol": https "restbase::deploy::public_key_file": puppet:///private/ssh/tin/servicedeploy_rsa.pub "role::deployment::services::key_fingerprint": e6:d0:61:5e:e5:c7:5d:2d:3e:8e:c8:a5:eb:f3:c2:63 "restbase::deploy::scap::public_key_file": puppet:///private/ssh/tin/servicedeploy_rsa.pub "restbase::deployment": scap "passwords::root::extra_keys":

   alex: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICYxCqZkGys8gZB6Mq61Fw08CB7m1huxpnpII2ay3e0H krenair@gmail.com inspiron
   bd808: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb8nsxA3thqd87nLu+1mA0Jc1KY90t5qW7N+jRQksc4NLzlFqBTrld+Qm2FRVbLm37HZ9TRBZb2nuTYJIZhkNU7rRPEKs3cIUbh1pB7BbYv0aJ3F0qBD6UtHqOUIJhqVNYJ/ssobzFh2QrcrOM3eS8PrIPtL/CQSUmKmUjG8zhCocAiQZDFeIQLSyGyCWVrRg14SPjED0+wIQTGoTtCabL4B5AlLcTf2L5ztDUtaoXDObUpDJ5Tw6VUUzDoUjV+Y5AtxK4erwLRHeFEcSzmWWl0Sruhnp/TzaF4vGijl6Wcyi2O9TClBhGmp7gTl4CtMj8MDDm+7NO3dQmQMseded1 bd808+labs@wmf-bd808-mbp01.local
   twentyafterfour: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPe9i/PI48Xk3BwCBSJ3L/o4n8noRBEFrINAPLVw4SDPmMOgPu5/HyvdxWkS47li2PQnDx4EobYE4WErxdQ0nB/Fe43ZzWEFQ6RvWuuPAxUwEFcGhraDHFFQc/TLh7adtNA247jUhLCQN/O3Nb6Qq1RPuAZgF59UuWKPNwnSOCOyLV0zHvqhjUkWmDcCI7sln1Kbv+JiEKBrVyokpv18pgCgyKL54UvFRbVD/aU7qu1DyJCFZ0GTitqFX0OMHjEyCo2bGPFUAHBkbKn/lsNz4hXNjF9iorxBvl1ZXLCRMkdRJBA6xGgLGWPXBQOXbUTc+9ow05KH0kHmQu5lXez7CZ twentyafterfour@wikiafterfour
   hashar: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD4ubnKSlwi8C1V1JraoztiIae79gfD3s+n9l2EVNkgA6R/kcnJqi/2/oBkUaX1CpOLLWoj7TAQfNAnEt+O6HyQvNpJ8taA1RcssNwek+hDevg+YthBEQRpMhLIhC8WuW2fytc+ELQ903WL2+MKzeni5qH22LLSILkqYSHsb/aViE1JUo59PFLG26mcEluqpm8MogFCqYuFbfsM7RLzSTTZwHPhoKTpb7lPHKrdqfQP4q18SjcrRRf2HkkknF5iDRQv0ngHLAXG5o6H1iPVrDDc1lNY98eBYBwNlcSb73LQIvKDXvbLnpZZDExS6XJoZqHpyQPMtoNWHyJ2EN3RW7l hashar@postwater_labs
   mobrovac: ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr04C1g3grQJRwhOyrAic/xzW+2lxlxwjdTIY12HJs6aBvKTeUhwMLTxSMQ0nsFacnCcdTU1YcDYn0ypXxpd/v62uX4nbnw3goYSgKysmYlrHiQ+87GbQnBSe/j/0SvAF+oV9bB4EKGpGDK0hokfNKVzTpI2+0IbEAHK+Ag7+yIGYwWshLeoj1rTSzQCyFb1ELaXPt1OyAq37EYa+D9INA2aP4qHWHNSrAeG1FtJ3M4QDOIB/vB1UYE5i+XYeuugXlZzHXEkL5M1KbI5utPcBjpfncAmPGDLuiUKuBnDo85V75xpTmHQb485M4K1ZnqJ9XKnZT3NWDW2Fo+lvKU7VTw== doorman@istria-wifi.irisa.fr

"conftool::password": a_secret "pybal::configuration::config": etcd mount_nfs: false "role::labs::nfsclient:mode": hard "role::cache::text::cluster": cache_text "profile::ores::redisproxy::server": deployment-ores01.deployment-prep.eqiad.wmflabs "profile::ores::redis::client_hosts":

   - deployment-ores01.deployment-prep.eqiad.wmflabs

"ores::redis::queue_maxmemory": 256M "ores::redis::cache_maxmemory": 512M "mediawiki::redis_servers::codfw": [ ] zookeeper_hosts:

   deployment-zookeeper02.eqiad.wmflabs: "2"

zookeeper_clusters:

   main-deployment-prep:
       hosts:
           deployment-zookeeper02.eqiad.wmflabs: "2"

kafka_clusters:

   main-deployment-prep:
       api_version: 0.9
       zookeeper_cluster_name: main-deployment-prep
       brokers:
           deployment-kafka04.deployment-prep.eqiad.wmflabs:
               id: 4
           deployment-kafka05.deployment-prep.eqiad.wmflabs:
               id: 5
   analytics-deployment-prep:
       api_version: 0.9
       zookeeper_cluster_name: main-deployment-prep
       brokers:
           deployment-kafka01.deployment-prep.eqiad.wmflabs:
               id: 1
           deployment-kafka03.deployment-prep.eqiad.wmflabs:
               id: 2

"profile::ores::web::graphite_server": labmon1001.eqiad.wmnet "ores::web::graphite_server": labmon1001.eqiad.wmnet "profile::ores::web::redis_host": deployment-ores01.deployment-prep.eqiad.wmflabs "profile::ores::web::redis_password": areallysecretpassword "profile::ores::redis::password": areallysecretpassword "profile::ores::web::celery_workers": 7 "profile::ores::web::extra_config":

   extractors:
       enwiki_api:
           host: https://en.wikipedia.beta.wmflabs.org

"thumbor::swift::swift_host": http://deployment-ms-fe03.deployment-prep.eqiad.wmflabs "confd::srv_dns": "" "conftool::hosts": [ ] "profile::conftool::master::sync_dir": /etc/conftool/data-local "role::aptly::client::servername": deployment-deploy01.deployment-prep.eqiad.wmflabs "aptly::manage_nginx": false "aptly::owner": jenkins-deploy "aptly::group": wikidev phabricator_active_server: phabricator phabricator_servers:

   - deployment-phab01.deployment-prep.eqiad.wmflabs

"cache::misc::nodes":

   eqiad:
       - deployment-phab01.deployment-prep.eqiad.wmflabs

"phabricator::vcs::listen_addresses":

   - 10.68.18.216

"phabricator::vcs::address::v4":

   - 10.68.18.216

phabricator_app_user: root phabricator_app_pass: phabricator phabricator_daemons_user: root phabricator_daemons_pass: phabricator "phabricator::mysql_admin_user": root "phabricator::mysql_admin_pass": phabricator phabricator_admin_user: root phabricator_admin_pass: phabricator phabricator_domain: beta-phab.wmflabs.org phabricator_altdomain: beta-phab.wmflabs.org phabricator_diffusion_ssh_host: beta-phab.wmflabs.org phabricator_active_server_fqdn: deployment-phab01.deployment-prep.eqiad.wmflabs "parsoid::mwapi_proxy": "" "puppetmaster::config::use_puppetdb": true "puppetmaster::config::puppetdb_host": deployment-puppetdb01.deployment-prep.eqiad.wmflabs "puppetmaster::puppetdb::master": deployment-puppetdb01.deployment-prep.eqiad.wmflabs "puppetmaster::puppetdb::slaves": [ ] "role::puppetmaster::puppetdb::shared_buffers": 768MB "profile::mediawiki::mcrouter_wancache::has_ssl": false "profile::ores::web::poolcounter_nodes":

   - deployment-poolcounter05:7531

"profile::nutcracker::redis_pools":

   redis:
       server_retry_timeout: 10000
       server_map:
           cp-1:
               host: 10.68.23.169
               port: 6378
           cp-2:
               host: 10.68.23.169
               port: 6379
       listen: /var/run/nutcracker/redis_chgprop.sock 0666

"profile::nutcracker::memcached_pools": [ ] "profile::nutcracker::monitor_port": 0 "profile::services_proxy::services":

   dummy:
       port: 9999
       localport: 9999
       scheme: https
       hostname: dummy.example.net
       timeout: 600

"profile::services_proxy::ensure": absent