Rush has uploaded a new change for review.
https://gerrit.wikimedia.org/r/284926
Change subject: toollabs: bastion setup for cgred::group user daemons
......................................................................
toollabs: bastion setup for cgred::group user daemons
We are already doing this under duress as a temporary
measure and this codifies.
Bug: T131541
Change-Id: I5278cc1febb53149390f337cf51c6a3d622d73f8
---
M modules/toollabs/manifests/bastion.pp
1 file changed, 17 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/26/284926/1
diff --git a/modules/toollabs/manifests/bastion.pp
b/modules/toollabs/manifests/bastion.pp
index 1e67f61..3aa6212 100644
--- a/modules/toollabs/manifests/bastion.pp
+++ b/modules/toollabs/manifests/bastion.pp
@@ -20,6 +20,23 @@
if $::operatingsystem == 'Ubuntu' {
# lint:ignore:arrow_alignment
+ cgred::group {'user-daemons':
+ config => {
+ cpu => {
+ 'cpu.shares' => '512',
+ },
+ memory => {
+ 'memory.limit_in_bytes' => '1152921504606846975',
+ },
+ },
+ rules => [
+ '*:/usr/lib/openssh/sftp-server cpu /daemon',
+ '*:/usr/lib/openssh/sftp-server memory /daemon',
+ '*:/usr/bin/mosh-server memory /daemon',
+ ],
+ }
+
+ # lint:ignore:arrow_alignment
cgred::group {'scripts':
config => {
cpu => {
--
To view, visit https://gerrit.wikimedia.org/r/284926
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I5278cc1febb53149390f337cf51c6a3d622d73f8
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Rush <r...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
