Page MenuHomePhabricator

Enable TLS termination on the mwdebug deployment. fix the service definition in the chart
Closed, ResolvedPublic

Description

We're in a strange situation where the mediawiki chart defines a service that uses port 443 as a backend, even when tls is disabled. Thus:

  • Fix the service definition so that it works under no-tls as well
  • Add a certificate to the mwdebug deployment and enable tls

Event Timeline

Joe renamed this task from Enable TLS termination on the mwdebug deployment. fix the service definition to Enable TLS termination on the mwdebug deployment. fix the service definition in the chart.Jun 7 2021, 5:04 AM
Joe triaged this task as High priority.
Joe updated the task description. (Show Details)

Change 698454 had a related patch set uploaded (by Effie Mouzeli; author: Effie Mouzeli):

[operations/deployment-charts@master] mediawiki: fix ports

https://gerrit.wikimedia.org/r/698454

I have enabled TLS on staging for now, which will use some default certs

Change 698454 merged by jenkins-bot:

[operations/deployment-charts@master] mediawiki: fix ports and enable TLS on staging

https://gerrit.wikimedia.org/r/698454

Joe moved this task from Backlog to In Progress on the MW-on-K8s board.

Boldly resolving, I think this was done.