Page MenuHomePhabricator
Create Task
Maniphest T362868

[infra,k8s] Upgrade Toolforge Kubernetes to version 1.29
Open, MediumPublic
Actions

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenNoneT362869 [k8s,infra] Upgrade Toolforge to Uwubernetes (1.30)
 OpenNoneT362868 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.29
 OpenNoneT362867 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.28
 OpenNoneT359641 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.27
 OpenNoneT327025 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.26
 OpenNoneT316107 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.25
 ResolvedaborreroT307651 Upgrade Toolforge Kubernetes to version 1.24
 ResolvedtaaviT298005 Upgrade Toolforge Kubernetes to version 1.23
 ResolvedtaaviT286856 Upgrade Toolforge Kubernetes to latest 1.22
 ResolvedtaaviT280436 Migrate Toolforge admission webhooks to use the admissionregistration.k8s.io/v1 API
 ResolvedtaaviT286857 Update maintain-kubeusers to certificates/v1 api
 Resolved• BstormT289390 Certificate generation is broken in toolsbeta
 ResolvedtaaviT292238 Figure out certificate generation for admission webhooks before we lose the certificates/v1beta1
 ResolvedtaaviT329453 Deploy cert-manager to Toolforge
 ResolvedtaaviT292706 tools-webservice should use ingress v1
 ResolvedtaaviT292771 upgrade to ingress-nginx 1.0
 ResolvedrookT291589 Upgrade paws jupyterhub
 ResolvedtaaviT295190 Upgrade all third-party Toolforge Kubernetes components to versions supporting Kubernetes 1.22
 ResolvedtaaviT306296 Ensure k8s-status tool will work on Kubernetes 1.22
 ResolvedrookT308172 Upgrade PAWS to Kubernetes 1.21
 ResolvedtaaviT282942 Upgrade Toolforge Kubernetes to latest 1.21
 ResolvedrookT280402 Upgrade Toolforge Kubernetes to latest 1.20
 ResolvedtaaviT280340 Upgrade Toolforge Kubernetes to latest 1.19
 ResolvedtaaviT280299 Upgrade Toolforge Kubernetes to latest 1.18
 ResolvedtaaviT280300 Validate that maintain-kubeusers works with k8s 1.18
 ResolvedtaaviT280301 Refresh certs that are not controlled by kubeadm
 ResolvedtaaviT280302 Upgrade PAWS Kubernetes to the latest 1.18 release
 ResolvedtaaviT264221 Upgrade the nginx ingress controller in Toolforge (and likely PAWS)
 Resolved• BstormT282087 Support cinder or expanded ephemeral disk worker nodes on Toolforge Kubernetes
 ResolvedtaaviT284353 Fix prometheus monitoring for Toolforge Ingress
 ResolvedtaaviT280342 Upgrade Calico to 3.18
 ResolvedtaaviT280360 Update ingress-admission-controller to support Ingress from networking.k8s.io/v1
 ResolvedtaaviT279106 Establish replacement for PodPresets in Toolforge Kubernetes
 Resolved• BstormT292672 Issue creating pods after migration away from PodPresets
 DeclinedNoneT290531 Weird issue with the wmcs-k8s-node-upgrade.py script
 ResolvedrookT291976 Upgrade toolsbeta to k8s 1.20
 ResolvedtaaviT292698 Upgrade calico to 3.21
 ResolvedBUG REPORTNoneT308189 Toolforge jobs stopped getting scheduled around the same time as the Toolforge k8s cluster upgrade
 OpenNoneT308203 Create an alert for K8s cronjobs
 ResolvedtaaviT308204 toolforge-jobs should set startingDeadlineSeconds by default
 ResolvedtaaviT308205 Re-enable CronJobControllerV2
 OpenNoneT308381 toolforge: Scrape Kubernetes controller-manager and apiserver metrics into Prometheus
 ResolvedrookT308274 test PAWS in k8s 1.21.8
 ResolvedtaaviT329869 Remove tool RBAC rules for APIs removed in Kubernetes 1.22
 ResolvedBUG REPORTtaaviT331572 maintain-kubeusers container in CrashLoopBackoff preventing new tool creation after 'user-maintainer' ClusterRole changes
 ResolvedtaaviT331619 toolforge: rbac: change existing roles to reference PSP in the policy group
 ResolvedtaaviT334380 Toolforge k8s: kube-scheduler permissions errors
 ResolvedtaaviT334382 Toolforge k8s: kube-controller-manager permission errors
 ResolvedtaaviT329677 Upgrade Calico to 3.24
 ResolvedtaaviT284656 Toolforge k8s: Migrate workers to Containerd and Bookworm
 ResolvedtaaviT349795 Upgrade cadvisor
 ResolvedtaaviT350227 toolforge prometheus servers OOMing
 ResolvedtaaviT357901 Request increased server-group-members quota for tools
 ResolvedaborreroT358476 toolforge k8s: some static pods needs manual restart
 StalleddcaroT314665 Toolforge: Replace all bastion with grid-less bookworm based bastion hosts
 StalledtaaviT314664 [infra] Decommission the Grid Engine infrastructure
 ResolvedkomlaT313405 Migrate remaining tools off Gridengine
 DeclinedNoneT316124 Make Grid Engine tooling emit deprecation warnings
 ResolvedtaaviT329619 Toolforge: decide what to do with tools that have 'stretch' in their service manifests
 ResolvedAndrewT353351 Provide tools for disabling the grid for specific tools
 ResolvedAndrewT353642 Relocate disable-tool-archive-dbs.service
 ResolvedtaaviT358333 Remove toolschecker grid engine checks
 ResolvedtaaviT359934 [infra] Archive grid engine related infrastructure tools
 ResolvedtaaviT359935 [infra] Archive grid engine related Gerrit repositories
 ResolvedaborreroT359619 toolforge: prepare deb packages for k8s 1.24
 ResolvedaborreroT359620 toolforge: upgrade k8s etcd nodes to debian bookworm
 ResolvedaborreroT359638 [toolsbeta,infra] upgrade kubernetes to 1.24
 ResolvedaborreroT359639 toolforge: verify etcd version is compatible with k8s 1.24
 ResolvedaborreroT359798 refresh kube-state-metrics version for k8s 1.24
 ResolvedaborreroT359927 [cookbook] wmcs.toolforge.k8s.prepare_upgrade: be more flexible checking for deb package components
 In ProgressaborreroT279110 [infra] Replace PodSecurityPolicy in Toolforge Kubernetes
 OpenNoneT335131 Toolforge: replace admission controllers with an existing policy admin project
 In ProgressaborreroT362050 toolforge: review pod templates for PSP replacement
 ResolvedaborreroT362966 lima-kilo: replicate sssd setup from Toolforge
 ResolvedaborreroT362233 Decision Request - Toolforge policy agent
 OpenaborreroT362872 Decision Request - Toolforge policy agent enforcement model
 ResolvedaborreroT363347 toolforge lima-kilo: PodSecurityPolicy admission is disabled
 In ProgressaborreroT362967 lima-kilo: container image caching
 ResolvedaborreroT363482 toolforge lima-kilo: refresh maintain-kubeusers test data
 OpenaborreroT364113 toolforge: identify and cache in our container registry all kyverno images
 In ProgressaborreroT364297 toolforge: create a PSP migration plan
 OpenaborreroT364312 toolforge: introduce some logic to backfill maintain-kubeuser resources (like per-tool kyverno policies)
 OpenNoneT329671 Upgrade all third-party Toolforge Kubernetes components to versions supporting Kubernetes 1.25
 OpenNoneT349197 [infra] Remove TTLAfterFinished from config before upgrade to 1.25
 OpenNoneT364293 [infra,k8s] Move to kubernetes PAVs and drop kyverno
 ResolvedAndrewT349207 [infra] Upgrade Toolforge K8s etcd nodes to Bullseye

Event Timeline

taavi triaged this task as Medium priority.Thu, Apr 18, 10:58 AM
taavi created this task.
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptThu, Apr 18, 10:58 AM
taavi added a subtask: T362867: [infra,k8s] Upgrade Toolforge Kubernetes to version 1.28.Thu, Apr 18, 10:58 AM
taavi added a parent task: T362869: [k8s,infra] Upgrade Toolforge to Uwubernetes (1.30).
taavi moved this task from Backlog to Ready to be worked on on the Toolforge board.Thu, Apr 18, 11:02 AM
dcaro renamed this task from Upgrade Toolforge Kubernetes to version 1.29 to [infra,k8s] pgrade Toolforge Kubernetes to version 1.29.Tue, Apr 30, 2:14 PM
dcaro renamed this task from [infra,k8s] pgrade Toolforge Kubernetes to version 1.29 to [infra,k8s] Upgrade Toolforge Kubernetes to version 1.29.Mon, May 6, 9:16 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL