[08:45:12] Hi! We in Search Platform team need to deploy a service (Wikimedia Commons Query Service) that requires a secret. Hiera config on horizon is publicly viewable - is there a simple way having a secret on instances started there? I could probably hack a code to get a secret from a location on the server, but I rather not do that if there is another way. [08:48:50] zpapierski: afaik you need a "standalone puppetmaster", see https://wikitech.wikimedia.org/wiki/Help:Standalone_puppetmaster [08:49:20] zpapierski: I think that Erik already setup a standalone puppet master for that server [08:50:25] but that does not really change the problem, now we would have a secret on that puppet master that isn't versioned in any repository. So basically the same as a secret local to the server, but with the additional complexity of a standalone puppetmaster [08:57:01] in our current case, standalone puppet master would require modifying the repo, but we already have it set up and the rest of the mechanism would work the way it should (no modifications to the app needed between test and production). I'd rather have a common solution, even if requiring standalone puppet master (which is quite convienent for testing anyway - no need to merge to production before verifying) [08:57:29] in any case, it's something I will use for now, thanks Majavah [09:03:20] yep, project local puppetmasters is the way to go [09:04:08] create a commit in the /var/lib/git/labs/private with the [local] tag in the commit message header [09:58:42] someone action https://phabricator.wikimedia.org/T256734, please [10:41:43] gry: done! [10:44:53] arturo: [10:44:59] $ perl [10:44:59] use XML::Feed; [10:44:59] Can't locate XML/Feed.pm in @INC [10:45:25] gry: is that the bastion I assume? [10:45:33] i'm on "tools-sgebastion-07" [10:45:49] ok, I installed it in the grid workers, but not on the bastions [10:45:53] you need it in the bastions too? [10:46:09] you should not run code on the bastions FYI [10:46:10] yeah i guess i would like to test my app out quickly before submitting it to the grid [10:48:20] well, the package is actually installed [10:48:34] aborrero@tools-sgebastion-07:~$ dpkg -s libxml-feed-perl | grep Status [10:48:34] Status: install ok installed [10:48:57] ok thank you, i think i've broken something else on my end too [10:49:06] (i was using perlbrew, it didn't pick up your install) [10:49:14] i'll unset that and i think it will be ok; thank you :) [10:51:38] yes, unset perlbrew, confirmed that it works [10:58:01] 🎉 [11:36:21] !log admin [codfw1dev] dropped glance database in the galera cluster T256283 [11:36:24] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [11:36:25] T256283: Practice Galera disaster recovert - https://phabricator.wikimedia.org/T256283 [11:39:12] !log admin [codfw1dev] stopped mysql database in the galera cluster T256283 [11:39:15] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [11:44:40] !log admin [codfw1dev] restoring glance database backup from bacula into cloudcontrol2001-dev (T256283) [11:44:42] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [11:44:42] T256283: Practice Galera disaster recovert - https://phabricator.wikimedia.org/T256283 [12:51:57] !log admin [codfw1dev] galera cluster should be up and running, openstack happy (T256283) [12:52:00] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [12:52:00] T256283: Practice Galera disaster recovert - https://phabricator.wikimedia.org/T256283 [21:44:52] !log tools.zppixbot decom sopel.bot [21:44:54] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.zppixbot/SAL [21:44:58] MacFan4000, Zppix: ^