Alex Vandiver
3e421d71ba
kandra: Update Teleport CA.
2025-02-21 10:16:33 -08:00
Alex Vandiver
ce34ebdfed
kandra: Add a hook to notify of local schema drift from merge-base.
2025-02-19 12:43:00 -08:00
Alex Vandiver
af4fa75b66
puppet: Upgrade version of aws tool.
2025-01-28 17:43:08 -08:00
Anders Kaseorg
19b8cde27f
ruff: Fix PLC0206 Extracting value from dictionary without calling .items().
...
Signed-off-by: Anders Kaseorg <anders@zulip.com >
2024-12-21 21:06:53 -08:00
Alex Vandiver
f325e15439
nagios: Switch staging hosts to not page, but send a zulip.
2024-10-08 16:55:07 -07:00
Alex Vandiver
77a121082b
kandra: Add localhost access to internal APIs on port 80.
...
This parallels 02d3fb7666 .
2024-09-25 10:08:27 -07:00
Alex Vandiver
64a16dd9b4
kandra: We do not serve staging from staging.zulip.com:80.
...
It is not configured in the ALB's rules, nor does the ALB ever forward
to port 80.
2024-09-09 15:17:19 -07:00
Alex Vandiver
fe0a7b3b77
kandra: Drop support for 20.04 hosts.
2024-08-20 10:03:59 -07:00
Mateusz Mandera
aaca394813
presence: Remove the queue worker.
2024-07-31 16:46:42 -07:00
Alex Vandiver
bf807eabd7
nagios: Make zephyr mirroring not page.
...
It is often flaky for reasons we cannot affect, and this is no longer
an important part of the Zulip Cloud service.
2024-07-26 14:24:50 -07:00
Anders Kaseorg
f3c67103cf
memcached_exporter: Explicitly close memcached connection.
...
Fixes warnings like “ResourceWarning: unclosed <socket.socket fd=5,
family=AddressFamily.AF_INET, type=SocketKind.SOCK_STREAM, proto=0,
laddr=('127.0.0.1', 39702), raddr=('127.0.0.1', 11211)>” with warnings
enabled.
Signed-off-by: Anders Kaseorg <anders@zulip.com >
2024-07-16 14:50:09 -07:00
Alex Vandiver
2e38f426f4
upload: Generate thumbnails when images are uploaded.
...
A new table is created to track which path_id attachments are images,
and for those their metadata, and which thumbnails have been created.
Using path_id as the effective primary key lets us ignore if the
attachment is archived or not, saving some foreign key messes.
A new worker is added to observe events when rows are added to this
table, and to generate and store thumbnails for those images in
differing sizes and formats.
2024-07-16 13:22:15 -07:00
Anders Kaseorg
0fa5e7f629
ruff: Fix UP035 Import from collections.abc, typing instead.
...
Signed-off-by: Anders Kaseorg <anders@zulip.com >
2024-07-13 22:28:22 -07:00
Anders Kaseorg
531b34cb4c
ruff: Fix UP007 Use X | Y for type annotations.
...
Signed-off-by: Anders Kaseorg <anders@zulip.com >
2024-07-13 22:28:22 -07:00
Anders Kaseorg
e08a24e47f
ruff: Fix UP006 Use list instead of List for type annotation.
...
Signed-off-by: Anders Kaseorg <anders@zulip.com >
2024-07-13 22:28:22 -07:00
Alex Vandiver
d2516607bb
puppet: Silence "needrestart" nags about kernel upgrades.
...
Ksplice keeps the kernel updated without restarts.
2024-05-28 14:34:26 -07:00
Alex Vandiver
f246b82f67
puppet: Factor out pattern of writing a nagios state file atomically.
2024-05-24 11:31:25 -07:00
Alex Vandiver
230040caa9
puppet: Remove check_postgresql_backup.
...
We have replaced this monitoring with the black-box wal-g monitoring,
which is more accurate.
2024-05-24 11:27:59 -07:00
Alex Vandiver
9dfaa83aa8
invites: Remove invites worker, make confirmation object in-process.
...
The "invites" worker exists to do two things -- make a Confirmation
object, and send the outgoing email. Making the Confirmation object
in a background process from where the PreregistrationUser is created
temporarily leaves the PreregistrationUser in invalid state, and
results in 500's, and the user not immediately seeing the sent
invitation. That the "invites" worker also wants to create the
Confirmation object means that "resending" an invite invalidates the
URL in the previous email, which can be confusing to the user.
Moving the Confirmation creation to the same transaction solves both
of these issues, and leaves the "invites" worker with nothing to do
but send the email; as such, we remove it entirely, and use the
existing "email_senders" worker to send the invites. The volume of
invites is small enough that this will not affect other uses of that
worker.
Fixes : #21306
Fixes : #24275
2024-05-02 14:23:04 -07:00
Alex Vandiver
2df91c70ef
puppet: Move rabbitmq monitoring into kandra/, where it is used from.
2024-04-24 14:40:28 -07:00
Alex Vandiver
6e981c18d5
puppet: Factor out cron job creation.
2024-04-24 14:40:28 -07:00
Alex Vandiver
49422c05c8
kandra: Add teleport services to "needsrestart" skip list.
...
These are often how one is connected to the node, and restarting them
would drop the connection one us actively using.
2024-04-19 09:55:17 -07:00
Alex Vandiver
a4e6037dc4
kandra: Automate the second step of configuring database replicas.
...
If there is a replication primary configured, and no current database,
then we check all of the required secrets are in place, then pull down
the latest backup and trigger a PostgreSQL restart, which will pick up
downloading the remaining WAL logs to catch up, then start streaming
from the configured primary.
2024-04-17 17:31:49 -07:00
Alex Vandiver
e4883cc2dc
kandra: Move PostgreSQL data mountpoint to /srv/data.
...
We store a lot of other things in `/srv` now, and moving them mid-puppet
confuses things significantly.
2024-03-29 11:34:18 -07:00
Alex Vandiver
93c6fd4746
kandra: Pull instance storage device from nvme information.
2024-03-29 11:34:18 -07:00
Alex Vandiver
e06b1794a8
kandra: Template and insert email credentials.
2024-03-21 16:14:44 -07:00
Anders Kaseorg
553f268b04
ruff: Fix RUF027 Possible f-string without an f prefix.
...
This is a preview rule, not yet enabled by default.
Signed-off-by: Anders Kaseorg <anders@zulip.com >
2024-03-01 09:30:04 -08:00
Anders Kaseorg
570f3dd447
python: Reformat with Ruff formatter.
...
https://docs.astral.sh/ruff/formatter/
Signed-off-by: Anders Kaseorg <anders@zulip.com >
2024-02-29 17:07:16 -08:00
Alex Vandiver
802477ca1a
memcached-exporter: Add metrics for max item size and max connections.
2024-02-27 10:16:00 -08:00
Alex Vandiver
11e0c448da
memcached-exporter: Fix descriptions on read/written_bytes_total.
2024-02-27 10:16:00 -08:00
Alex Vandiver
dfdaddea38
kandra: Add a memcached exporter using bmemcached.
2024-02-23 13:32:04 -08:00
Alex Vandiver
3d63a87384
kandra: Puppet github.com keys to both root and zulip users.
...
We update to add the ecdsa-sha2-nistp256 key as well.
2024-02-07 10:42:12 -08:00
Alex Vandiver
b1f899512a
pack-local-script: Match mode of file outside of packing.
2024-02-07 10:42:12 -08:00
Alex Vandiver
927660a7b6
kandra: Remove munin.
2024-02-06 21:34:56 -08:00
Alex Vandiver
2cbd9c2a47
kandra: Update default chrony configuration for 22.04.
2024-02-07 00:02:32 -05:00
Alex Vandiver
b23d90ed62
puppet: Rename puppet/zulip_ops to puppet/kandra.
...
This makes for easier tab-completion, and also is a bit more explicit
about the expected consumer.
2024-02-06 17:56:27 -08:00