Project
tools
Instance name
tools-acme-chief-02
Instance Id
adb1fe52-3445-46b1-914c-b9aa9b6dcffa
IP
172.16.0.18 [fixed]
Status
ACTIVE
Host hypervisor
cloudvirt1025.eqiad.wmnet
Libvirt ID
i-0000d81a
Type
UNKNOWN
Image
debian-10.0-buster (deprecated 2019-12-15)
[b6b58ba2-8656-49b4-af13-d0530ac05365]
CPUs
-
RAM
-M
Storage
-G
Created
2019-10-11T21:48:26Z
Created by
Alex Monk
Last modified
2021-05-05T10:53:50Z
Puppet classes
role::acme_chief::cloud
profile::toolforge::grid::base
role::aptly::client
role::prometheus::node_exporter
profile::toolforge::clush::target
profile::toolforge::infrastructure
Hiera settings
acmechief_host: tools-acme-chief-01.tools.eqiad.wmflabs
active_cronrunner: tools-cron-01.tools.eqiad.wmflabs
active_proxy_host: tools-proxy-06
active_redis: tools-redis-1003.tools.eqiad.wmflabs
authdns_servers: {'cloud-ns0.wikimedia.org': '208.80.154.135', 'cloud-ns1.wikimedia.org': '208.80.154.11'}
docker::builder_host: tools-docker-imagebuilder-01.tools.eqiad.wmflabs
docker::registry: docker-registry.tools.wmflabs.org
docker::registry_url: https://tools-docker-registry.wmflabs.org/v2/
dynamicproxy::banned_ips: ['70.179.6.9']
dynamicproxy::blocked_user_agent_regex: TweetmemeBot|Chrome/38\.0\.2125\.104|Applebot
dynamicproxy::error_details:
gridengine::gridmaster: tools-grid-master.tools.eqiad.wmflabs
http_proxy:
network::allow_ssh_from_ips: ['10.68.21.162', '10.68.17.221', '10.68.22.61']
passwords::root::extra_keys: {'bd808': 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb8nsxA3thqd87nLu+1mA0Jc1KY90t5qW7N+jRQksc4NLzlFqBTrld+Qm2FRVbLm37HZ9TRBZb2nuTYJIZhkNU7rRPEKs3cIUbh1pB7BbYv0aJ3F0qBD6UtHqOUIJhqVNYJ/ssobzFh2QrcrOM3eS8PrIPtL/CQSUmKmUjG8zhCocAiQZDFeIQLSyGyCWVrRg14SPjED0+wIQTGoTtCabL4B5AlLcTf2L5ztDUtaoXDObUpDJ5Tw6VUUzDoUjV+Y5AtxK4erwLRHeFEcSzmWWl0Sruhnp/TzaF4vGijl6Wcyi2O9TClBhGmp7gTl4CtMj8MDDm+7NO3dQmQMseded1 bd808+labs@wmf-bd808-mbp01.local', 'petrb': 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/kW5wnLgEOtOqVvB9HBbzdJQnrRApJ6g7QeYO8PXN+y5V2iQMG8oJR18GHByR7pTA9Ehj3XtIIQPbjvqX/bowphObQUCTgA9t8gupVexhJM6bTGqNWZ0KUjgZoD5kBM/poSEUFQsPUMl/N8lE5hsxKbQC3iX30arFS/vpYS6gnBp5+Ui53/aIyFAbRpFQ74I3LH2cGQkKgFfzjObZK0gA5TndRz05PgmzXo6BDGIun0UYvMh7nvZs0pbRQy+rjgcUH2fPUsEI1cz798wx/fExVjyENydX1jEDkuYCg0ikr//on00aYl4/lTH8w0IQDeQrXlx6lJ/cY7WUlcDFr8m5 petr bena', 'scfc': 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjcG9HXqM3yuWw0vc53OQGkP55YKJUlQNxV5uflizAI4eHtua0NeVxkaY0Bwi5dboC0D/JiGmlKzEtDDDxXmSP8hFFxMpjJVZ43R2hhTY8CpR0q9034W81dfxpO9zFEy6R0ZFmNKbL3i9OqNQRHTQZSleVuyM4hrU7bqDSGIDLduVMkM//nnMI84BZkzcErgV3uJJ1bQif7unEoUHX5UdRXea+/2DRJmLT5fcNcrTUm7Pzwi573IEUUPfYQtf0/xpXd9hWgz0Hpd5X3HF9I8oN2DlBPHEm4UGCTZOq0JzPc7VKD0r14HwyvoUNoCNbbOhqtK69c8fWrbdxzcU28Kal scfc root tools-checker-01', 'taavi': 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE+qDb+xk74wckjuHoDJH4+6U/lzNjTQDB3GiLhqp5Up taavi@taimi toolforge root key', 'zhuyifei1999': 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdm+Kiet0U2AjfPLFKIZLh57pXruVzlIfSypwSt7GRlZ+0sGhExYWvXdreW5zgZRJ3aXzR84qaZOqpwgHuVFlfMszXzq3E6p9dZ/bATP/lvIkucJJ2RL5C4ABvfwd4MHs68rW9UGwPVWn1qQftvoNpeDCu4t50uLbP9vcEXzaXrVioHROPoEpqk4YofHQS9F4HIKDbfjTFwUb5YQ/lsajuK0EZXlAELoaZ7s+uBolyBmXkIjWOjyGwHCoBU1FPiufLwLYuMZz0iAqw930dgoi89VgaPhlu12j2yP+2BZ3XkEgpzNBmZ/3lwVvRPyUnWw2pBU4qvs00FUARzx/WTRSJ zhuyifei1999@zhuyifei1999-ThinkPad-X260'}
profile::acme_chief::accounts: {'09e23666d8dd57b8597b9fd9f0ecb4bb': {'directory': 'https://acme-v02.api.letsencrypt.org/directory', 'regr': '{"body": {}, "uri": "https://acme-v02.api.letsencrypt.org/acme/acct/69142910"}'}}
profile::acme_chief::active: tools-acme-chief-01.tools.eqiad.wmflabs
profile::acme_chief::certificates: {'toolforge': {'CN': 'toolforge.org', 'SNI': ['toolforge.org', '*.toolforge.org', 'tools.wmflabs.org', '*.tools.wmflabs.org'], 'authorized_regexes': ['^tools-proxy-[0-9]+\\.tools\\.eqiad\\.wmflabs$', '^tools-docker-registry-[0-9]+\\.tools\\.eqiad\\.wmflabs$', '^tools-docker-registry-[0-9]+\\.tools\\.eqiad1\\.wikimedia\\.cloud$', '^tools-k8s-master-[0-9]+\\.tools\\.eqiad\\.wmflabs$'], 'challenge': 'dns-01'}, 'tools-legacy': {'CN': 'tools.wmflabs.org', 'SNI': ['tools.wmflabs.org', '*.tools.wmflabs.org'], 'authorized_regexes': ['^tools-legacy-redirector\\.tools\\.eqiad\\.wmflabs$'], 'challenge': 'dns-01'}, 'tools_mail': {'CN': 'mail.tools.wmflabs.org', 'SNI': ['mail.tools.wmflabs.org'], 'authorized_regexes': ['^tools-mail-[0-9]+\\.tools\\.eqiad\\.wmflabs$', '^tools-mail-[0-9]+\\.tools\\.eqiad1\\.wikimedia\\.cloud$'], 'challenge': 'dns-01'}, 'toolserver': {'CN': 'toolserver.org', 'SNI': ['toolserver.org', '*.toolserver.org'], 'authorized_regexes': ['^toolserver-proxy-[0-9]+\\.tools\\.eqiad1\\.wikimedia\\.cloud$'], 'challenge': 'dns-01'}}
profile::acme_chief::challenges: {'dns-01': {'issuing_ca': 'letsencrypt.org', 'ns_records': ['ns0.openstack.eqiad1.wikimediacloud.org.', 'ns1.openstack.eqiad1.wikimediacloud.org.'], 'resolver_port': 53, 'sync_dns_servers': ['ignored_for_designate.'], 'zone_update_cmd': '/usr/local/bin/acme-chief-designate-sync.py'}}
profile::acme_chief::cloud::designate_sync_auth_url: http://openstack.eqiad1.wikimediacloud.org:5000/v3
profile::acme_chief::cloud::designate_sync_project_names: ['tools']
profile::acme_chief::cloud::designate_sync_region_name: eqiad1-r
profile::acme_chief::cloud::designate_sync_tidyup_enabled: True
profile::acme_chief::cloud::designate_sync_username: tools-dns-manager
profile::acme_chief::passive: tools-acme-chief-02.tools.eqiad.wmflabs
profile::base::core_dump_pattern: core
profile::base::labs::unattended_distro: absent
profile::base::labs::unattended_wmf: absent
profile::base::ssh_server_settings: {'challenge_response_auth': False, 'disable_agent_forwarding': False, 'disable_nist_kex': False, 'enable_hba': True, 'explicit_macs': False}
profile::elasticsearch::base_config_dir: /etc/elasticsearch
profile::elasticsearch::base_data_dir: /srv/elasticsearch
profile::elasticsearch::common_settings: {'auto_create_index': True, 'awareness_attributes': '', 'cluster_hosts': ['tools-elastic-01.tools.eqiad.wmflabs', 'tools-elastic-02.tools.eqiad.wmflabs', 'tools-elastic-03.tools.eqiad.wmflabs'], 'cluster_name': 'labs-tools', 'curator_uses_unicast_hosts': False, 'expected_nodes': 3, 'heap_memory': '8G', 'http_port': 9200, 'minimum_master_nodes': 2, 'recover_after_nodes': 2, 'recover_after_time': '1m', 'send_logs_to_logstash': False, 'short_cluster_name': 'omega', 'transport_tcp_port': 9300, 'unicast_hosts': ['tools-elastic-01.tools.eqiad.wmflabs', 'tools-elastic-02.tools.eqiad.wmflabs', 'tools-elastic-03.tools.eqiad.wmflabs']}
profile::elasticsearch::dc_settings: {'awareness_attributes': ''}
profile::elasticsearch::instances: {}
profile::elasticsearch::rack: placeholder
profile::elasticsearch::row: placeholder
profile::kubernetes::node::disable_rsyslog: True
profile::rsyslog::kubernetes::enable: False
profile::standard::has_default_mail_relay: False
profile::toolforge::active_cronrunner: tools-sgecron-01.tools.eqiad.wmflabs
profile::toolforge::active_mail_relay: tools-mail-03.tools.eqiad1.wikimedia.cloud
profile::toolforge::active_proxy_host: tools-proxy-06
profile::toolforge::checker_hosts: ['tools-checker-04.tools.eqiad1.wikimedia.cloud']
profile::toolforge::clush::target::master: tools-clushmaster-02.tools.eqiad.wmflabs
profile::toolforge::etcdir: /var/lib/gridengine/etc
profile::toolforge::grid::base::collectors: /data/project/.system_sge/gridengine/collectors
profile::toolforge::grid::base::geconf: /data/project/.system_sge/gridengine
profile::toolforge::grid::base::project_path: /data/project
profile::toolforge::grid::base::sge_root: /var/lib/gridengine
profile::toolforge::grid::base::sysdir: /data/project/.system_sge
profile::toolforge::k8s::calicoctl_sha: 3d92b7615d1cca58daeb03d92c2ec96ae927e28e2954d758c29b412f24da4848
profile::toolforge::k8s::ingress_replicas: 3
profile::toolforge::k8s::typha_enabled: True
profile::toolforge::proxies: ['tools-proxy-05.tools.eqiad.wmflabs', 'tools-proxy-06.tools.eqiad.wmflabs']
profile::wmcs::kubeadm::component: thirdparty/kubeadm-k8s-1-17
prometheus::node_exporter::ignored_fs_types: ^(overlay|autofs|binfmt_misc|cgroup|configfs|debugfs|devpts|devtmpfs|fusectl|hugetlbfs|mqueue|nfs.*|nsfs|proc|procfs|pstore|rpc_pipefs|securityfs|sysfs|tracefs)$
prometheus_nodes: ['tools-prometheus-03.tools.eqiad.wmflabs', 'tools-prometheus-04.tools.eqiad.wmflabs']
puppetmaster: tools-puppetmaster-02.tools.eqiad.wmflabs
role::aptly::client::servername: tools-services-05.tools.eqiad1.wikimedia.cloud
role::labs::nfsclient::lookupcache: all
role::toollabs::logging::sender::centralserver: tools-logs-01.tools.eqiad.wmflabs
role::toollabs::logging::sender::centralserver_ips: ['10.68.17.229', '10.68.22.34']
shared_acme_certificates: {}
sonofgridengine::gridmaster: tools-sgegrid-master.tools.eqiad1.wikimedia.cloud
ssh::server::disable_nist_kex: False
ssh::server::enable_hba: True
ssh::server::explicit_macs: False
toollabs::proxy::proxies: ['tools-proxy-05.tools.eqiad.wmflabs', 'tools-proxy-06.tools.eqiad.wmflabs']