PL-132122 upgrade hardware to 24.11 #1122
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Establish a regular sensu check on physical hosts that checks certain LUKS header parameters of all encrypted devices, to discover unexpected diversions. - tie together the individual condition checks - integrate checks into fc-luks tooling with discovery of encrypted volumes - add sensu check - extend checks with plausibility checks for proper dump input - add unit and integration tests for checks with proper mocking
This makes sense to expose the check to potential changes in to output format of `cryptsetup luksDump`. Detailed unit tests are done against mock outputs only.
Not all physical machines actually have encrypted volumes as of now, e.g. KVM hosts. The check does not need to run on them.
…cleanup-unused-vms devhost: cleanup unused VMs (PL-132737)
By running fc-luks commands as a sensu check, we suddenly do not inherit the full system PATH anymore, breaking access to necessary external tools used like `lvs`. We can adopt the `fc-ceph.conf` approach already used by `fc-ceph` subsystems, for now even the default PATH is sufficient. Requires some extra mocking in unit tests; the NixOS integration test now explicitly empties the path beforehands.
[21.05] full-disk encryption: finalisation, improvements, checks, routine tooling
This test artificially causes the FIB and RIB to get out of sync, and checks that the sensu script correctly detects these problems. PL-132595
…control-plane [21.05] Sensu monitoring for EVPN control plane
…ng-restore [21.05] restore-single-files: reduce chance of UUID collision
[21.05] Switch MX record for gocept.net
Due to performance reasons we did not always change the passwords, only for new users. This caused inconsistencies more often than we can tolerate. This now fixes it properly by parallelizing the updates, limiting to CPU_COUNT-1 and also deleting superfluous users. Fixes PL-132945
…ser-updates [21.05] fix rabbitmq user updates for sensu
We've seen instances where the / endpoint was responding but the radosgw was completely stuck. We hope to notice those better now with checks that actually hit a real object. Re PL-132070
…nitoring ceph/radosgw: improve health monitoring
osnyx
force-pushed
the
PL-132122-upgrade-hardware-to-24.11
branch
from
5970d8d to
1066610
Compare
We cannot override the test harness node IDs as they are read-only.
AFAICT this isn't how we set things up in production and it causes spurious/flaky issues in the FIB.
We do not enforce or guarantee a certain specific reboot time. Under load, the test slightly missed the 10 seconds timeout. During multiple invocations I could not make out any specific structural problem with NFS unmounts during shoutdown, so let's just be a bit more generous here with the timeouts.
Since 24.11, the innovation and lts names are deprecated aliases.
osnyx
force-pushed
the
PL-132122-upgrade-hardware-to-24.11
branch
from
3847caa to
c4653a7
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
@flyingcircusio/release-managers
Release process
Impact:
Changelog:
PR release workflow (internal)
Design notes
onoroff. Example: rate limiting.n/a
n/a
Security implications