[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-30 Thread gerritbot
gerritbot added a comment. Change 616564 **abandoned** by Dzahn: [operations/puppet@production] admins: turn all wdqs-admins into wdqs-roots Reason: replaced by multiple steps that are already merged, ticket is resolved https://gerrit.wikimedia.org/r/616564 TASK DETAIL

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-29 Thread gerritbot
gerritbot added a comment. Change 615821 **merged** by Dzahn: [operations/puppet@production] admins: let wdqs-admins run jstack as root https://gerrit.wikimedia.org/r/615821 TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-29 Thread gerritbot
gerritbot added a comment. Change 615818 **merged** by Dzahn: [operations/puppet@production] admins: let wdqs-admins view nginx logs https://gerrit.wikimedia.org/r/615818 TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-29 Thread herron
herron closed this task as "Resolved". herron added a comment. In T258739#6343721 , @dcausse wrote: > @herron thanks for the deploy. It works well for me. > For jstack I need an extra package for it to function properly

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-29 Thread dcausse
dcausse added a comment. @herron thanks for the deploy. It works well for me. For jstack I need an extra package for it to function properly (https://gerrit.wikimedia.org/r/c/operations/puppet/+/617074). TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-28 Thread herron
herron added a comment. https://gerrit.wikimedia.org/r/616593 has been merged, and I've ran puppet on the wdqs* hosts. @dcausse @RKemper could you have a look and confirm that's working as expected for you? TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-28 Thread gerritbot
gerritbot added a comment. Change 616593 **merged** by Herron: [operations/puppet@production] admins: add all members of wdqs-admins to wdqs-roots https://gerrit.wikimedia.org/r/616593 TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-27 Thread gerritbot
gerritbot added a comment. Change 616593 had a related patch set uploaded (by Dzahn; owner: Dzahn): [operations/puppet@production] admins: add all members of wdqs-admins to wdqs-roots https://gerrit.wikimedia.org/r/616593 TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-27 Thread Dzahn
Dzahn added a comment. Here's a new patch that moves all wdqs-admins to wdqs-roots and then also removes the wdqs-admins group entirely and changes which group is used for the deployment_server access that comes with it. Please review above. TASK DETAIL

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-27 Thread gerritbot
gerritbot added a comment. Change 616564 had a related patch set uploaded (by Dzahn; owner: Dzahn): [operations/puppet@production] admins: turn all wdqs-admins into wdqs-roots https://gerrit.wikimedia.org/r/616564 TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-27 Thread RKemper
RKemper added a comment. We discussed this during this week's SRE meeting and resolved to enable full root access for wdqs admins, rather than granularly expanding access one file at a time. This also lines up better with how we currently manage Elasticsearch, where admins have root access.

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-27 Thread Joe
Joe triaged this task as "High" priority. TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Joe Cc: herron, RKemper, CDanis, dcausse, Aklapper, Dzahn, lmata, Alter-paule, Beast1978, CBogen, Un1tY,

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-24 Thread dcausse
dcausse added a comment. I could not use this command last time and it did not work I think because the jvm was too busy. I need root to use jstack -F which I think has more chances to attach the jvm. TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-24 Thread Dzahn
Dzahn added a comment. @dcausse As John pointed out on Gerrit the (only) java process running on wdqs machines is running as the blazegraph user and wdqs-admins already can run any commands as the user blazegraph. So this works for me: `sudo -u blazegraph jstack 46484` where

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-24 Thread Joe
Joe claimed this task. TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Joe Cc: RKemper, CDanis, dcausse, Aklapper, Dzahn, lmata, Alter-paule, Beast1978, CBogen, Un1tY, Akuckartz, Hook696,

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-23 Thread RKemper
RKemper added a project: Sustainability (Incident Followup). TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: RKemper Cc: RKemper, CDanis, dcausse, Aklapper, Dzahn, lmata, Alter-paule, Beast1978,

[Wikidata-bugs] [Maniphest] T258739: wdqs admins should have access to nginx logs, jstack on wdqs machines

2020-07-23 Thread RKemper
RKemper renamed this task from "wdqs admins should have access to nginx logs on wdqs machines" to "wdqs admins should have access to nginx logs, jstack on wdqs machines". TASK DETAIL https://phabricator.wikimedia.org/T258739 EMAIL PREFERENCES