Description
Details
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | • ema | T207048 ATS production-ready as a backend cache layer | |||
Resolved | • ema | T204208 puppetize http purging for ATS backends | |||
Resolved | None | T204209 Define and deploy Icinga checks for ATS backends | |||
Resolved | • ema | T204232 Package and deploy ATS v8.x | |||
Resolved | None | T204225 ATS: log inspection at runtime | |||
Resolved | • ema | T209021 ATS backend-side request-mangling | |||
Resolved | • ema | T210295 ATS path normalization | |||
Resolved | • ema | T210411 Applayer services without TLS | |||
Resolved | • ema | T211970 kartotherian TLS support | |||
Resolved | Vgutierrez | T238900 add TLS support for smokeping.wikimedia.org | |||
Resolved | taavi | T263830 contint.wikimedia.org: add TLS termination | |||
Resolved | • ema | T212215 Update Subject Alternative Name field in TLS certificates for swift |
Event Timeline
Change 475992 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] cp1008: point varnish-fe to ATS host
Change 475992 merged by Ema:
[operations/puppet@production] cp1008: point varnish-fe to ATS host
Change 476311 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] cache: stop using nhw admission policy
Change 476311 merged by Ema:
[operations/puppet@production] cache: stop using nhw admission policy
Change 476810 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: enable XDebug plugin
Change 476810 merged by Ema:
[operations/puppet@production] ATS: XDebug plugin support
Change 476814 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] varnish: do not allow X-ATS-Debug to be set from the outside
Change 476820 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: add SystemTap probe for uncacheable responses
Change 476828 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: do not add X-Forwarded-For
Change 476828 merged by Ema:
[operations/puppet@production] ATS: do not add X-Forwarded-For
Change 476814 merged by Ema:
[operations/puppet@production] varnish: do not allow X-ATS-Debug to be set from the outside
Change 476820 merged by Ema:
[operations/puppet@production] ATS: add SystemTap probe for uncacheable responses
Change 477424 had a related patch set uploaded (by BBlack; owner: BBlack):
[operations/puppet@production] Revert "cache: stop using nhw admission policy"
Change 477424 merged by BBlack:
[operations/puppet@production] Revert "cache: stop using nhw admission policy"
Change 477573 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] cache_upload: hfp on frontends for large objects except for exp
Change 477574 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] cache: stop using nhw admission policy
Change 477573 merged by Ema:
[operations/puppet@production] cache_upload: hfp on frontends for large objects except for exp
Change 477574 merged by Ema:
[operations/puppet@production] cache: stop using nhw admission policy
Change 477763 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: do not add Client-IP and Via to request headers
Change 477767 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: add settings for RAM Cache
Change 477763 merged by Ema:
[operations/puppet@production] ATS: do not add Client-IP and Via to request headers
Change 477767 merged by Ema:
[operations/puppet@production] ATS: add settings for RAM Cache
Change 477974 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: define global Lua scripts in plugin.config
Change 477974 merged by Ema:
[operations/puppet@production] ATS: define global Lua scripts in plugin.config
Change 477990 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: define one single global Lua script
Change 477990 merged by Ema:
[operations/puppet@production] ATS: define one single global Lua script
Change 478003 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: support Collapsed Forwarding
Change 478003 merged by Ema:
[operations/puppet@production] ATS: Collapsed Forwarding support
Change 478155 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: set http.wait_for_cache
Change 478155 merged by Ema:
[operations/puppet@production] ATS: set http.wait_for_cache
Change 478640 had a related patch set uploaded (by Ema; owner: Ema):
[operations/debs/trafficserver@master] trafficserver (8.0.1-1wm1) stretch-wikimedia; urgency=medium
Change 478640 merged by Ema:
[operations/debs/trafficserver@master] trafficserver (8.0.1-1wm1) stretch-wikimedia; urgency=medium
Mentioned in SAL (#wikimedia-operations) [2018-12-10T13:34:17Z] <ema> trafficserver 8.0.1-1wm1 uploaded to stretch-wikimedia T207048
Change 478774 had a related patch set uploaded (by Ema; owner: Cwhite):
[operations/puppet@production] hiera: add trafficserver cluster definition
Change 478774 merged by Cwhite:
[operations/puppet@production] hiera: add cache_ats cluster definition
Change 479720 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: origin server certificate validation settings
Change 479720 merged by Ema:
[operations/puppet@production] ATS: origin server certificate validation settings
Change 480083 had a related patch set uploaded (by Ema; owner: Ema):
[operations/puppet@production] ATS: use TLS to access kartotherian
Change 480083 merged by Ema:
[operations/puppet@production] ATS: use TLS to access kartotherian
We've added TLS support for maps and fixed the SAN list on swift to ensure proper TLS connections with upload origin servers. This is thus done.