Project

General

Profile

action #103149

Salt the dehydrated setup

Added by coolo 2 months ago. Updated about 2 months ago.

Status:
Resolved
Priority:
High
Assignee:
Target version:
Start date:
2021-11-28
Due date:
2021-12-14
% Done:

0%

Estimated time:

Description

Motivation

As the SSL certificate expired at midnight, I followed https://ca.suse.de/step-ca/ manually (it was a little painful without working https). Now that it's there, it should be part of the salt receipes.

Rollback steps

  • Validate and unpause alert "Failed systemd services (except openqa.suse.de)"

History

#1 Updated by okurz 2 months ago

  • Priority changed from Normal to Urgent
  • Target version set to Ready

Absolutely and monitoring for certificate validity. Thanks a lot for your help

#2 Updated by okurz 2 months ago

  • Assignee set to okurz

#3 Updated by okurz 2 months ago

  • Description updated (diff)
  • Status changed from New to In Progress

ugh, do you know how hard it is to find anything useful in the web for "dehydrated salt"? :D

I will look into the failed service "Failed systemd services (except openqa.suse.de)". I paused the alert.

#5 Updated by okurz 2 months ago

  • Priority changed from Urgent to High

cool, thx!

alert is paused, immediate issue was fixed by coolo. I created the ticket still as "Urgent" to make sure we pick it up soon which has happened so lowered to "High" now :)

#6 Updated by openqa_review about 2 months ago

  • Due date set to 2021-12-14

Setting due date based on mean cycle time of SUSE QE Tools

#7 Updated by okurz about 2 months ago

  • Status changed from In Progress to Resolved

Found that one service is not included in the openSUSE Leap package. Created https://gitlab.suse.de/okurz/ca.suse.de/-/merge_requests/1 for improvement to the documentation.

Created https://gitlab.suse.de/openqa/salt-pillars-openqa/-/merge_requests/367 and https://gitlab.suse.de/openqa/salt-states-openqa/-/merge_requests/615 . Both pair-programmed with nsinger and merged after verification on OSD. Clean installations might still miss something though.

https://openqa.nue.suse.com/tests looks fine (valid certificate) as well as https://openqa.suse.de .

I could not unpause https://monitor.qa.suse.de/d/KToPYLEWz/failed-systemd-services yet due to #102942 so I mentioned the rollback steps to re-enable the alert there.

Monitoring data and alert in place, see https://monitor.qa.suse.de/d/WebuiDb/webui-summary at the bottom.

Also available in: Atom PDF