1451388 - autocert: autocert1.private.scl3.mozilla.com -> autocert1.private.mdc1.mozilla.com

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Comment 1

[Scott Idler [:sidler] [:escote]]

><(((º> git show 
commit 743a4dcedd4af02730a25c33ac7bb3622ac725f9 (HEAD -> master, origin/master, origin/HEAD)
Author: Scott Idler <[e-mail]>
Date:   Mon Apr 9 11:51:50 2018 -0700

    added entry for autocert1.private.mdc1.mozilla.com b1451388

────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
modified: manifests/nodes/webapp.pp
────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
@ webapp.pp:801 @ node "autocert1.private.scl3.mozilla.com" {
    }
}

node "autocert1.private.mdc1.mozilla.com" {
    realize(Yumrepo["epel"])
    realize(Package['git'])
    realize(Nrpe::Plugin['docker_disk'])
 
    user { 'autocert':
      ensure => present,
      system => true,
      comment        => 'Autocert',
      home           => '/data/autocert',
      managehome     => 'false',
      groups         => 'docker',
    }
 
    include bacula_client
 
    realize(File['/data'])
    #    file { "/data":
      #  owner => 995,
      #group => 991,
      #mode  => 0755,
      ##ensure  => directory,
      #require => File['/data'];
    #}
moz ~/repos/sysadmins/puppet {master} 
><(((º>

Comment 2

[Scott Idler [:sidler] [:escote]]

node "autocert1.private.mdc1.mozilla.com" {                                     
    realize(Yumrepo["epel"])                                                    
    realize(Yumrepo["docker-ce"])                                               
    realize(Package['git'])                                                     
    realize(Nrpe::Plugin['docker_disk'])                                        
                                                                                
    user { 'autocert':                                                          
      ensure => present,                                                        
      system => true,                                                           
      comment        => 'Autocert',                                             
      home           => '/data/autocert',                                       
      managehome     => 'false',                                                
      groups         => 'docker',                                               
    }                                                                           
                                                                                
    include bacula_client                                                       
                                                                                
    realize(File['/data'])                                                      
                                                                                
    package {                                                                   
        [                                                                       
            'docker-ce',                                                        
            'openssl-devel',                                                    
            'python36',                                                         
        ]:                                                                      
            ensure => present;                                                  
    }                                                                           
}   

worked with ashish to get docker-ce on mrepo and supported on centos7 machines in mdcX

Comment 3

[Scott Idler [:sidler] [:escote]]

                '1454801' => {                                                  
                    'description' => 'allow autocert1.private.mdc1.mozilla.com to bypass proxy for pypi (pip)',
                    'source_ips' => [                                           
                        '10.48.75.29',                                          
                    ],                                                          
                    'dest_names' => [                                           
                        'pypi.org',                                             
                        'pypi.python.org',                                      
                        'files.pythonhosted.org',                               
                    ],                                                          
                }, 

in manifest/nodes/proxy.pp

Allows pip to get through the proxy in mdc1.

Comment 4

[Keegan Ferrando [:fauweh]]

Let's get the disk check figure out tomorrow Scott. I downtimed this puppy for the night.

<nagios-mdc1> Fri 00:48:52 UTC [9688] [Unknown] autocert1.private.mdc1.mozilla.com:Disk - All Docker is CRITICAL: DISK CRITICAL - /var/lib/docker/containers/f4faa3bf5d0187eb0ab4ed27482369432a6589b6a51e9845eb4d66bb4c0dcb10/mounts is not accessible: Permission denied (http://m.mozilla.org/Disk+-+All+Docker)

Comment 5

[Scott Idler [:sidler] [:escote]]

net flow work continues: https://bugzilla.mozilla.org/show_bug.cgi?id=1455651
baccula backup continues: https://bugzilla.mozilla.org/show_bug.cgi?id=1455655
moc monitoring & playbooks continue: https://bugzilla.mozilla.org/show_bug.cgi?id=1455658

:fauweh we can move the work you mentioned into the moc bug above.