Both Debian and CentOS packages provide a service with a timer to automate the renewal, so we don't need this but to prune our code, and move the nginx reload information to the renewal config.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed All Stories
All Stories
All Stories
Aug 4 2024
Aug 4 2024
dereckson edited reviewers for D3403: Write auth/token/roles/salt-node in vault bootstrap DRP script, added: DorianWinty; removed: dereckson.
dereckson updated the test plan for D3403: Write auth/token/roles/salt-node in vault bootstrap DRP script.
dereckson requested review of D3403: Write auth/token/roles/salt-node in vault bootstrap DRP script.
Use admin role
To be able to use auth/token/create/admin, it needs a role admin, let's add it to the DRP bootstrap script:
Deploy Salt policy properly
hunt-insecable-spaces
Just a small note this product becomes more and more open core, and we're less in favour of that one "specifically".
dereckson moved T1998: Resolve conflict between core and shellserver roles for Vault in Salt configuration from Backlog to Working on on the Servers board.
Aug 3 2024
Aug 3 2024
dereckson added a revision to T1475: Provision a mail server: D3400: Cleanup LXC-specific mailserver units.
Improve inclusive terminology
dereckson added a revision to T1668: Improve inclusive terminology: D3399: Improve inclusive terminology.
dereckson added a revision to T1668: Improve inclusive terminology: D3398: Improve inclusive terminology.
Improve inclusive terminology
dereckson added a revision to T1668: Improve inclusive terminology: D3397: Improve inclusive terminology.
Avoid insecable spaces
Harmonize attribution
dereckson attached a referenced file: F3335166: eb-2021-00288-001-INCITS-Inclusive-Terminology-Guidelines.pdf.
https://www.incits.org/dotAsset/29643f45-86d8-4137-987e-9685b944d1e0.pdf can now be used instead.
dereckson moved T1678: Health check and reporting library from In progress to Next on the User-Dereckson board.
dereckson moved T1693: Evaluate Sensu for monitoring from In progress to Backlog on the User-Dereckson board.
I've saved test run log earlier this afternoon, here it is:
Works fine.
Per previous comment, I'd advice to downgrade to 3006 LTS for paas-docker servers too.
We're downgrading to Salt 3006 on Linux servers to still be able to distribute credentials from 3006 server.
dereckson raised the priority of T1993: Salt migration to 3007, 3008 and extensions from Normal to High.
I've also discovered we can't deploy secrets to Salt 3007+ anymore from a Salt 3006 server:
dereckson moved T1991: Context has again been lost on /var/log/www from Backlog to To check again on the upstream board.
dereckson moved T1991: Context has again been lost on /var/log/www from Working on to Pending review on the Servers board.
dereckson moved T1992: Install patch on redhat family as part of core from Working on to Pending review on the Servers board.
dereckson moved T1994: Upgrade Salt repository on Debian from Backlog to Pending review on the Servers board.
dereckson moved T1998: Resolve conflict between core and shellserver roles for Vault in Salt configuration from Backlog to Bug and issues on the Salt board.
dereckson moved T1998: Resolve conflict between core and shellserver roles for Vault in Salt configuration from Backlog to Server config on the Eglide board.
Unit wanted to overwrite Eglide-specific Vault Salt configuration, I've opened T1998 for follow-up.
Eglide
$ salt-call --local state.apply roles/core/salt test=True […] ---------- ID: /etc/apt/keyrings/salt-archive-keyring-2023.gpg Function: file.managed Result: True Comment: The file /etc/apt/keyrings/salt-archive-keyring-2023.gpg is in the correct state Started: 16:25:09.653065 Duration: 7.356 ms Changes: ---------- ID: /etc/apt/sources.list.d/salt.list Function: file.managed Result: True Comment: The file /etc/apt/sources.list.d/salt.list is in the correct state Started: 16:25:09.660512 Duration: 1.221 ms Changes: […]
dereckson triaged T1998: Resolve conflict between core and shellserver roles for Vault in Salt configuration as Low priority.
Complector
$ salt dwellers state.apply hotfixes/salt dwellers: ---------- ID: T1991_egrep_patch Function: file.patch Name: /opt/saltstack/salt/lib/python3.10/site-packages/salt Result: True Comment: Patch successfully applied Started: 16:15:53.189797 Duration: 45.172 ms Changes: ---------- pid: 4123780 retcode: 0 stderr: stdout: patching file modules/csf.py patching file modules/selinux.py
dereckson added a revision to T1994: Upgrade Salt repository on Debian: D3393: Update Salt repository on Debian.
dereckson renamed T1994: Upgrade Salt repository on Debian from Upgrade Salt on Eglide to Upgrade Salt repository on Debian.
From router-001 network looks good:
Stopped currently not needed salt and node-exporter on router-001 to see if that helps.
dereckson renamed T1996: Servers on hyper-001 have network issues from Server outage: complector to Servers on hyper-001 have network issues.
dereckson shifted T1996: Servers on hyper-001 have network issues from the S1 Nasqueron space to the Restricted Space space.
dereckson lowered the priority of T1996: Servers on hyper-001 have network issues from Unbreak Now! to High.
Could be at hypervisor level. SSH failed until 13:22 where it worked immediately.
As of 13:18 UTC, SSH access works.
Also, at the same time, DevCentral is slow for arc diff or to publish this task. This delay behavior is similar as when DNS resolution timeouts occur.
dereckson added a revision to T1991: Context has again been lost on /var/log/www: D3392: Avoid egrep in Salt code base.
Eglide
$ salt-minion --versions Salt Version: Salt: 3007.1
dereckson added a subtask for T1950: Deploy PHP 8.3: T1995: PHP 8.2 and PHP 8.3 seems both to be installed on Eglide.
dereckson added a parent task for T1995: PHP 8.2 and PHP 8.3 seems both to be installed on Eglide: T1950: Deploy PHP 8.3.
dereckson moved T1995: PHP 8.2 and PHP 8.3 seems both to be installed on Eglide from Backlog to Servers on the PHP 8.x support board.
dereckson edited projects for T1994: Upgrade Salt repository on Debian, added: Servers, Eglide; removed Nasqueron Operations Squad, discussion.
We can actually provide P352 as hotfix.
Ok, with wget/wget2 transition still problematic (unrelated to patch package).
patch is available on Eglide as part of build-essential, so presumed OK for Debian
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator