Project

General

Profile

Actions

action #103149

closed

Salt the dehydrated setup

Added by coolo about 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
High
Assignee:
Category:
-
Start date:
2021-11-28
Due date:
2021-12-14
% Done:

0%

Estimated time:

Description

Motivation

As the SSL certificate expired at midnight, I followed https://ca.suse.de/step-ca/ manually (it was a little painful without working https). Now that it's there, it should be part of the salt receipes.

Rollback steps

  • Validate and unpause alert "Failed systemd services (except openqa.suse.de)"
Actions #1

Updated by okurz about 3 years ago

  • Priority changed from Normal to Urgent
  • Target version set to Ready

Absolutely and monitoring for certificate validity. Thanks a lot for your help

Actions #2

Updated by okurz about 3 years ago

  • Assignee set to okurz
Actions #3

Updated by okurz about 3 years ago

  • Description updated (diff)
  • Status changed from New to In Progress

ugh, do you know how hard it is to find anything useful in the web for "dehydrated salt"? :D

I will look into the failed service "Failed systemd services (except openqa.suse.de)". I paused the alert.

Actions #5

Updated by okurz about 3 years ago

  • Priority changed from Urgent to High

cool, thx!

alert is paused, immediate issue was fixed by coolo. I created the ticket still as "Urgent" to make sure we pick it up soon which has happened so lowered to "High" now :)

Actions #6

Updated by openqa_review about 3 years ago

  • Due date set to 2021-12-14

Setting due date based on mean cycle time of SUSE QE Tools

Actions #7

Updated by okurz about 3 years ago

  • Status changed from In Progress to Resolved

Found that one service is not included in the openSUSE Leap package. Created https://gitlab.suse.de/okurz/ca.suse.de/-/merge_requests/1 for improvement to the documentation.

Created https://gitlab.suse.de/openqa/salt-pillars-openqa/-/merge_requests/367 and https://gitlab.suse.de/openqa/salt-states-openqa/-/merge_requests/615 . Both pair-programmed with nsinger and merged after verification on OSD. Clean installations might still miss something though.

https://openqa.nue.suse.com/tests looks fine (valid certificate) as well as https://openqa.suse.de .

I could not unpause https://monitor.qa.suse.de/d/KToPYLEWz/failed-systemd-services yet due to #102942 so I mentioned the rollback steps to re-enable the alert there.

Monitoring data and alert in place, see https://monitor.qa.suse.de/d/WebuiDb/webui-summary at the bottom.

Actions

Also available in: Atom PDF