1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
|
# File 'modules/swift/manifests/swiftrepl.pp', line 1
class swift::swiftrepl (
$ensure,
$destination_site,
$source_site = $::site,
) {
require_package('python-cloudfiles')
$basedir = '/srv/software'
$account = 'mw:media'
group { 'swiftrepl':
ensure => present, # don't clean up groups to avoid gid reuse
name => 'swiftrepl',
}
user { 'swiftrepl':
ensure => present, # don't clean up users to avoid uid reuse
name => 'swiftrepl',
home => $basedir,
shell => '/bin/sh',
comment => 'swiftrepl user',
gid => 'swiftrepl',
managehome => false,
system => true,
}
file { '/var/log/swiftrepl':
ensure => ensure_directory($ensure),
owner => 'swiftrepl',
group => 'swiftrepl',
mode => '0750',
force => true,
require => User['swiftrepl'],
}
tidy { '/var/log/swiftrepl':
age => '15w',
recurse => true,
matches => '*.log',
}
git::clone { 'operations/software':
ensure => $ensure,
directory => $basedir,
branch => 'master',
owner => 'swiftrepl',
group => 'swiftrepl',
}
file { '/usr/local/bin/swiftrepl-mw':
ensure => $ensure,
owner => 'root',
group => 'root',
mode => '0555',
source => "puppet:///modules/${module_name}/swiftrepl-mw.sh",
}
$timer_interval = $source_site ? {
'eqiad' => 'Mon *-*-* 08:00:00',
'codfw' => 'Wed *-*-* 08:00:00',
}
systemd::timer::job { 'swiftrepl-mw':
ensure => $ensure,
command => '/usr/local/bin/swiftrepl-mw repl commons notcommons unsharded global timeline transcoded',
description => 'Ensure mediawiki containers are synchronized across sites',
interval => {'start' => 'OnCalendar', 'interval' => $timer_interval},
logging_enabled => false,
user => 'swiftrepl',
}
# TODO(filippo) credentials for both source and destination sites are needed
#file { "${basedir}/swiftrepl/swiftrepl.conf":
# owner => 'swiftrepl',
# group => 'swiftrepl',
# mode => '0700',
# content => "${account}\n${password}\nhttps://ms-fe.svc.${destination_site}.wmnet/auth/v1.0\n",
#}
}
|