1440004 - Exclude supervisor/meld from datadog's yum repo

Status: RESOLVED FIXED

(Release Engineering :: General, defect)

Description

[Chris AtLee [:catlee]]

The datadog puppet module sets up a custom repo for datadog. It configures a GPG key to trust here:

https://hg.mozilla.org/build/puppet/file/tip/modules/datadog_agent/manifests/redhat.pp#l19

However, the key used to sign is different:
https://hg.mozilla.org/build/puppet/file/tip/modules/datadog_agent/manifests/redhat.pp#l48

These keys are no longer the same, and so installing some packages fails.

Comment 1

[Chris AtLee [:catlee]]

For example:
Feb 21 11:49:59 signing-linux-14.srv.releng.usw2.mozilla.com puppet-agent[10350]: Could not update: Execution of '/usr/bin/yum -d 0 -e 0 -y install supervisor-3.0-0.10.b2.el6' returned 1: Package meld3-0.6.5-1.noarch.rpm is not signed

Comment 2

[Chris AtLee [:catlee]]

Simon and I looked a bit more into this. The problem is not that the GPG key has changed, but that the meld3 package is not signed at all.

Ideally we should mirror the datadog repo internally, but for now we think we can exclude supervisor and meld3 from the datadog repo.

Comment 3

[Chris AtLee [:catlee]]

Attachment: Bug 1440004: Exclude supervisor and meld3 from datadog repo

Review commit: https://reviewboard.mozilla.org/r/222282/diff/#index_header
See other reviews: https://reviewboard.mozilla.org/r/222282/

Comment 4

[Simon Fraser [:sfraser] ⌚️GMT]

Comment on attachment 8953013 [details]
Bug 1440004: Exclude supervisor and meld3 from datadog repo

https://reviewboard.mozilla.org/r/222282/#review228170

Comment 5

[Chris AtLee [:catlee]]

Comment on attachment 8953013 [details]
Bug 1440004: Exclude supervisor and meld3 from datadog repo

https://hg.mozilla.org/build/puppet/rev/b083d31be4b6890c61303f6a718cf4b91dffee4d