Nova Resource:Bastion/SAL

From Wikitech

2023-09-29

  • 14:17 fnegri@cloudcumin1001: END (PASS) - Cookbook wmcs.vps.remove_instance (exit_code=0) for instance bastion-restricted-eqiad1-02 (T340241)
  • 14:16 fnegri@cloudcumin1001: START - Cookbook wmcs.vps.remove_instance for instance bastion-restricted-eqiad1-02 (T340241)
  • 14:13 fnegri@cloudcumin1001: END (PASS) - Cookbook wmcs.vps.remove_instance (exit_code=0) for instance bastion-restricted-eqiad1-02.bastion.eqiad1.wikimedia.cloud (T340241)
  • 14:13 fnegri@cloudcumin1001: START - Cookbook wmcs.vps.remove_instance for instance bastion-restricted-eqiad1-02.bastion.eqiad1.wikimedia.cloud (T340241)

2023-09-27

  • 10:55 fnegri@cloudcumin1001: END (PASS) - Cookbook wmcs.vps.create_instance_with_prefix (exit_code=0) with prefix 'bastion-restricted-eqiad1' (T347428)
  • 10:52 fnegri@cloudcumin1001: START - Cookbook wmcs.vps.create_instance_with_prefix with prefix 'bastion-restricted-eqiad1' (T347428)

2023-01-16

  • 14:53 wm-bot2: added user fnegri to the project as projectadmin - cookbook ran by fran@wmf3169
  • 14:53 wm-bot2: added user fnegri to the project as user - cookbook ran by fran@wmf3169

2022-08-09

  • 15:08 taavi: permit `sre-admins` group to log in to the restricted bastions

2022-03-07

  • 14:14 taavi: rebooting bastion-eqiad1-03,04 (not yet in active use)

2022-02-10

  • 14:14 taavi: deleted shutoff bastion-restricted-eqiad1-01

2022-01-25

  • 17:38 taavi: shutdown bastion-restricted-eqiad1-01 (unused, restricted.bastion.wmcloud.org is bastion-restricted-eqiad1-02)
  • 17:35 taavi: create bastion-eqiad1-03 and 04 (bullseye) to replace existing stretch ones (01, 02)

2021-11-11

  • 10:47 arturo: add user `srv-networktests` as project user (T294955)

2021-04-26

  • 18:16 mutante: bastion-restricted-eqiad1-01 - /etc/apt/sources.list.d# mv openstack-mitaka-jessie.list /root/  ; puppet agent -tv - fixed puppet run T281176
  • 18:14 mutante: bastion-restricted-eqiad1-01, a stretch host, has openstack-mitaka-jessie.list in APT sources. mixed stretch/jessie sources cause issues T281176
  • 18:08 mutante: bastion-restricted-eqiad1-01 puppet runs again but still has unrelated issues, like "failed to fetch python3-dateutil" T281176 on stretch
  • 18:06 mutante: running puppet on bastion-restricted-eqiad1-01 after deploying fix for T281176

2021-02-24

  • 18:32 bd808: `sudo wmcs-openstack role remove --user zfilipin --project bastion user` T267313

2020-07-07

  • 14:57 Reedy: killed meno25 process running pwb.py on tools-sgebastion-07

2020-02-23

2019-05-15

  • 12:07 arturo: T223148 move bastion-eqiad1-02 to cloudvirt1001

2019-04-15

2019-01-23

  • 19:43 andrewbogott: deleting old eqiad-region bastions

2019-01-16

  • 17:15 andrewbogott: shutting down all bastions in the eqiad region

2019-01-07

  • 14:32 gtirloni: applied kernel update and rebooted all bastion VMs
  • 14:15 gtirloni: applied kernel update and rebooted bastion-restricted-eqiad1-01

2018-09-12

  • 16:16 arturo: force-rebooted again bastion-restricted-01 due to some additional tests with DHCP
  • 11:22 arturo: rebooting bastion-restricted-01 to test new setup from T202636

2018-09-11

  • 16:58 arturo: add myself as project admin
  • 16:13 arturo: force-reboot bastion-restricted-01 bc it lost the IP address, and to force a new DHCP query

2018-01-30

  • 05:35 bd808: Added Chico Venancio as project member (T185273)
  • 05:35 bd808: Added Chico Venancio as project member

2017-09-19

  • 13:56 chasemp: add profile::openstack::main::cumin_auth_group: cumin_real_masters for puppet prefix bastion-restricted

2017-07-19

  • 21:33 bd808: Restarted nscd, nslcd on bastion-02.bastion.eqiad.wmflabs
  • 21:16 bd808: Forced puppet run and restarted nslcd on bastion-01.bastion.eqiad.wmflabs

2017-03-27

  • 15:11 bd808: Added self (BryanDavis) as projectadmin

2016-08-04

  • 00:18 yuvipanda: added Krenair as admin to help with T132225 and other issues

2016-04-08

  • 23:46 YuviPanda: terminated mwds-proxy instance + floating IP

June 16

  • 18:49 YuviPanda: deleted bastion1 and bastion2 instances. RIP

June 11

  • 20:18 Coren: getting rid of old backups-of-backups of ancient filesystems
  • 20:17 YuviPanda: deleted bastion3 after alerting sole user in the last few weeks (Krenair)
  • 14:05 YuviPanda: removed bastion-restricted-pdns, released IP and hostname
  • 14:00 YuviPanda: deleted bastion-restricted1 host, moved bastion-restricted.wmflabs.org to bastion-restricted-01

June 10

  • 18:16 YuviPanda: created bastion-01, -02, -03 as debian jessie instances.

March 30

  • 22:30 Coren: rebooted bastion1 and bastion2

January 17

  • 06:30 andrewbogott: rebooting bastion1

January 15

  • 08:13 andrewbogott: rebooted bastion2 due to virt11 issues

January 14

  • 16:17 andrewbogott: rebooting bastion1

December 3

  • 22:34 hashar: ping

October 30

  • 22:50 mutante: creating new project 'netflow'

October 7

May 29

  • 20:50 andrewbogott: restarted puppet service on all bastion hosts -- it had been off for many days for some reason.

May 16

  • 21:18 Ryan_Lane: rebooting all bastions

April 19

  • 19:25 mutante: added new project "math" (Test to render TeX to MathML within the MW Framework)

March 20

  • 11:01 petan: +DixonD

March 12

  • 20:00 mutante: killing and restarting nrpe-server on all instances (bug 46026)

March 7

  • 02:04 Ryan_Lane: rebooting bastion-restricted

February 20

  • 15:10 hashar: puppet1.pmtpa.wmflabs is dead.

January 21

  • 09:57 hashar: relaying Ryan: he restarted ldap on virt0 (was hung after server restart). nscld was properly falling back to virt1000 but ldap was stuck there too. DNS got restarted.

January 16

  • 10:03 petan: Failed to add Fox Wilson to bastion.
  • 10:03 petan: giving access to Fox Wilson

January 14

  • 20:17 petan: giving access to Merlijn van Deen

January 10

  • 08:34 petan: testing
  • 08:34 petan: testing

December 18

  • 07:09 Ryan_Lane: rebooting bastion-restricted.wmflabs.org
  • 07:07 Ryan_Lane: rebooting bastion.wmflabs.org

December 11

  • 10:16 hashar: /home/ is filling up again :(

November 27

  • 16:07 paravoid: disabled hazard-sj's cron, as it was accidentally DoSing bastion

November 13

  • 16:21 petan: test

October 11

  • 20:33 hashar: DNS issue fixed by adding a LDAP failover on the NS servers bug 40825

October 3

  • 20:02 mutante: adding new member Nemo_bis

September 29

  • 13:32 Hydriz: Added Huji to the project. Requested for shell access, but is already in the shell group.

July 10

  • 14:48 mutante: labs now has > 100 projects - We just created project #101.
  • 14:44 mutante: created new project metavidwiki with gchriss as admin

July 9

  • 13:01 mutante: labs.wikimedia.org is now a redirect to labsconsole for your convenience

June 27

  • 09:41 mutante: - re-adding unassigned IP 208.80.153.222 to virt2 pool

June 22

  • 13:12 mutante: deleting puppet variable mariadb_version
  • 13:04 mutante: deleted mariadb classes from nova puppet groups

June 18

  • 17:31 Thehelpfulone: added Kangaroopower to the project

May 30

  • 11:38 mutante: adding Kai Nissen (WMFDE) to bastion

May 29

  • 14:46 mutante: creating new project mediawiki-custom-de

May 22

  • 15:29 Thehelpfulone: also added Sven_Manguard a few days ago
  • 15:25 Thehelpfulone: added Tanvir to the object a few hours ago

May 12

  • 16:08 mutante: added new member mschon to grant him shell access to wikistats instance

May 3

  • 14:31 mutante: added myself to admin roles to see if that lets me login to debug ssh key for diederik, but it doesnt

March 15

  • 03:44 mutante: - getting my Connection closed after the "If you are having access problems.." message. just me or all ?

March 13

  • 02:01 Ryan_Lane: restricted login on bastion-restricted1 to people in the ops group
  • 02:01 Ryan_Lane: restricted login on bastion1 to people in the bastion group, and am disallowing ops

March 6

  • 10:36 petan|wk: new member IWorld

February 27

  • 18:07 maplebed: added awjrichards to the bastion project
  • 18:06 maplebed: creating awjr's labs account by running add-labs-user --wikiname=awjrichards --mail="arichards@wikimedia.org" awjrichards

February 23

  • 16:43 petan|wk: given access to aude to labs

February 13

  • 15:10 mutante: created project "translation-memory" for Nikerabbit
  • 15:01 mutante: added member nikerabbit
  • 14:43 mutante: added nikerabbit as a labs user, using add-labs-user on virt0

February 10

  • 17:39 mutante: still asks for reboot
  • 17:38 petan: petan fixed me

February 1

  • 20:36 Ryan_Lane: temporarily removing Hydriz

January 22

  • 21:38 Ryan_Lane: installing git-review via pip
  • 21:38 Ryan_Lane: installing python-pip

January 18

  • 12:21 mutante: - bastion1 asks for reboot

January 13

  • 21:56 Ryan_Lane: installed tofrodos and python-paramiko on bastion1
  • 19:16 mutante: added new member Coren

January 10

  • 02:58 Ryan_Lane: test