Week 43 routine

[kiwixbot]

Infra

• [x] Check nodes free space

  df -h / && df -h /data

• [x] Nodes and worker system upgrades

  apt update && apt upgrade

• [x] Ensure all borg repositories are being updated
• [x] Check Pod errors

  k get pods -A -o wide|grep Error

• [x] Check Pod restarts

  k get pods -A -o wide | pyp -i 'print("\n".join([line for line in l if re.split(r"\s+", line)[4] != "0"]))'

• [x] Check if k8s should/could be upgraded

  curl -s -H "X-Auth-Token: $SCW_SECRET_KEY" https://api.scaleway.com/k8s/v1/regions/fr-par/clusters/$KIWIX_PROD_CLUSTER|jq ".version,.upgrade_available"
  curl -s -H "X-Auth-Token: $SCW_SECRET_KEY" https://api.scaleway.com/k8s/v1/regions/fr-par/versions|jq ".versions[].name"

• [x] Upgrade k8s if applicable

Stats

• [x] Ensure download.kiwix.org stats are being recorded
• [x] Check whether matomo should be upgraded

Grafana

• [x] Alert list is normal
• [x] Zimfarm dashboard is normal (look after last week data)
• [x] Mirrorbrain dashboard is normal
• [x] There is no abnormal behaviors on cluster resources consumption

Projects

• [x] UptimeRobot has no alert
• [x] youzim.it backlog is reasonable
• [x] No systematic failure in tasks.
• [x] PRs awaiting your review

Security

• [x] Analyze/merge dependabot PRs

Note: this is an automatic reminder intended for the assignee(s).

[rgaudin]

Filesystem      Size  Used Avail Use% Mounted on
bastion        37G  5.4G   30G  16% /
stats        233G   90G  132G  41% /
services        456G  191G  242G  45% /
storage         33T   19T   13T  59% /

• 1 restart of the zimfarm watcher (Stack Exchange) due to network error with archive.org
• Opened https://github.com/openzim/zimfarm/issues/848

zimit failures

• Many 403 errors
• 1 timeout (crawler)
• 1 timeout (python)
• 2 CERTIFICATE_VERIFY_FAILED due to bad certificates
• 1 CERTIFICATE_VERIFY_FAILED for something not trusted by mkcerts but OK in Firefox
• 1 WRONG_SIGNATURE_TYPE (TLS < 1.2)
• 1 405 Error
• 1 “Description is too long.”