Page MenuHomePhabricator
Create Task
Maniphest T207389

Rename the Certcentral project to Acme-chief
Closed, ResolvedPublic
Actions

Description

The name "certcentral" is already used and apparently trademarked.

We need to find a new name and rename everything - the git repo, the package and our file tree, the puppet modules, the VMs, the phabricator project.

New name: acme-chief:

Action list:

Details

SubjectRepoBranchLines +/-
get rid of certcentral[12]001 IPsoperations/dnsmaster+0 -8
get rid of certcentral secretslabs/privatemaster+0 -16
deployment-prep: Get rid of deprecated certcentral referencesoperations/puppetproduction+0 -16
CI test, do not mergeoperations/software/acme-chiefmaster+1 -1
Add acme-chief-tox-docker tests for operations/software/acme-chiefintegration/configmaster+9 -0
certcentral: wipe certcentral from our puppet codebaseoperations/puppetproduction+0 -665
install_server: Get rid of certcentral instancesoperations/puppetproduction+0 -23
authdns: Drop certcentral hosts access (2/2)operations/puppetproduction+0 -34
authdns: Drop certcentral hosts access (1/2)operations/puppetproduction+4 -1
tendril: Get rid of certcentral certificatesoperations/puppetproduction+0 -3
tendril: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+3 -3
netbox: Get rid of certcentral certificatesoperations/puppetproduction+0 -3
netbox: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+3 -3
mail: Get rid of certcentral certificatesoperations/puppetproduction+0 -4
exim: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+2 -2
mirrors: Get rid of certcentral certificatesoperations/puppetproduction+0 -3
mirrors: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+2 -2
lists: Get rid of certcentral certificatesoperations/puppetproduction+0 -4
lists: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+5 -5
librenms: Get rid of certcentral certificatesoperations/puppetproduction+0 -3
librenms: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+3 -3
icinga: Get rid of certcentral certificatesoperations/puppetproduction+0 -3
icinga: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+3 -3
gerrit: Get rid of certcentral certificatesoperations/puppetproduction+10 -13
gerrit: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+3 -3
dumps: Get rid of certcentral certificatesoperations/puppetproduction+0 -3
dumps: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+2 -2
archiva: Get rid of certcentral certificatesoperations/puppetproduction+0 -3
archiva: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+2 -2
install_server: Get rid of certcentral certificatesoperations/puppetproduction+0 -3
install_server: Switch from certcentral to acme-chief certificatesoperations/puppetproduction+2 -2
tendril: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
netbox: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
mail: Deploy acme_chief TLS certificatesoperations/puppetproduction+4 -0
mirrors: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
lists: Deploy acme_chief TLS certificatesoperations/puppetproduction+4 -0
librenms: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
icinga: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
gerrit: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
dumps: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
archiva: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
installserver: Deploy acme_chief TLS certificatesoperations/puppetproduction+3 -0
Update for Acme-chief project renamelabs/tools/wikibugs2master+1 -1
Remove obsolete tox-certcentral docker imageintegration/configmaster+0 -60
Rename jenkins job to acme-chief-tox-dockerintegration/configmaster+5 -5
Rename tox-certcentral to tox-acme-chiefintegration/configmaster+66 -0
authdns: Allow acme-chief servers to fulfill ACME DNS challengesoperations/puppetproduction+31 -0
monitoring: Add missing monitoring group for acmechiefoperations/puppetproduction+6 -0
site: Switch acmechief[12]001 to acme_chief roleoperations/puppetproduction+2 -2
acme_chief: Create acme_chief module as a duplicate of certcentraloperations/puppetproduction+650 -0
install_server: provide netboot config for acmechief[12]001operations/puppetproduction+1 -0
install_server: Use buster in acmechief[12]001operations/puppetproduction+4 -0
debian: rename certcentral to acme-chiefoperations/software/certcentraldebian+58 -51
Release 0.9 This release includes the following changes: * Implement staging time * Rename certcentral to acme-chiefoperations/software/certcentraldebian+2 -2
Rename certcentral to acme-chiefoperations/software/certcentraldebian+388 -387
Release 0.9 This release includes the following changes: * Implement staging time * Rename certcentral to acme-chiefoperations/software/certcentralmaster+2 -2
Rename certcentral to acme-chiefoperations/software/certcentralmaster+388 -387
install_server: Add DHCP entries for acmechief[12]001operations/puppetproduction+10 -0
secret: add dummy LE ACMEv2 private keys for acmechief[12]001labs/privatemaster+12 -0
secret: Add authdns-acmechief dummy keyholder SSH keyslabs/privatemaster+4 -0
Add acmechief[12]001 DNS entriesoperations/dnsmaster+8 -1
Show related patches Customize query in gerrit

Related Objects

Event Timeline

There are a very large number of changes, so older changes are hidden. Show Older Changes
Legoktm added a comment.Feb 17 2019, 7:25 AM

All taken care of from the CI side AFAICT. One minor note that while rebuilding the docker image, I had to switch pebble to be built with golang 1.11 instead of 1.10 - see https://gerrit.wikimedia.org/r/491028

gerritbot added a comment.Feb 17 2019, 7:25 AM

Change 491030 merged by jenkins-bot:
[integration/config@master] Remove obsolete tox-certcentral docker image

https://gerrit.wikimedia.org/r/491030

gerritbot added a comment.Feb 17 2019, 7:29 AM

Change 491031 had a related patch set uploaded (by Legoktm; owner: Legoktm):
[labs/tools/wikibugs2@master] Update for Acme-chief project rename

https://gerrit.wikimedia.org/r/491031

gerritbot added a comment.Feb 17 2019, 7:36 AM

Change 491031 merged by jenkins-bot:
[labs/tools/wikibugs2@master] Update for Acme-chief project rename

https://gerrit.wikimedia.org/r/491031

gerritbot added a comment.Feb 22 2019, 6:16 AM

Change 492239 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] mirrors: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/492239

gerritbot added a comment.Feb 22 2019, 6:33 AM

Change 492243 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] mail: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/492243

gerritbot added a comment.Feb 22 2019, 6:41 AM

Change 492244 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] netbox: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/492244

gerritbot added a comment.Feb 22 2019, 6:46 AM

Change 492246 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] tendril: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/492246

gerritbot added a comment.Feb 22 2019, 6:52 AM

Change 490371 merged by Vgutierrez:
[operations/puppet@production] installserver: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/490371

gerritbot added a comment.Feb 22 2019, 6:58 AM

Change 490374 merged by Vgutierrez:
[operations/puppet@production] archiva: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/490374

gerritbot added a comment.Feb 22 2019, 7:04 AM

Change 490376 merged by Vgutierrez:
[operations/puppet@production] dumps: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/490376

gerritbot added a comment.Feb 22 2019, 7:09 AM

Change 490379 merged by Vgutierrez:
[operations/puppet@production] gerrit: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/490379

gerritbot added a comment.Feb 22 2019, 7:30 AM

Change 490380 merged by Vgutierrez:
[operations/puppet@production] icinga: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/490380

gerritbot added a comment.Feb 22 2019, 7:35 AM

Change 490381 merged by Vgutierrez:
[operations/puppet@production] librenms: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/490381

gerritbot added a comment.Feb 22 2019, 7:39 AM

Change 490382 merged by Vgutierrez:
[operations/puppet@production] lists: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/490382

gerritbot added a comment.Feb 22 2019, 7:44 AM

Change 492239 merged by Vgutierrez:
[operations/puppet@production] mirrors: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/492239

gerritbot added a comment.Feb 22 2019, 7:54 AM

Change 492243 merged by Vgutierrez:
[operations/puppet@production] mail: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/492243

gerritbot added a comment.Feb 22 2019, 8:05 AM

Change 492244 merged by Vgutierrez:
[operations/puppet@production] netbox: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/492244

gerritbot added a comment.Feb 22 2019, 8:09 AM

Change 492246 merged by Vgutierrez:
[operations/puppet@production] tendril: Deploy acme_chief TLS certificates

https://gerrit.wikimedia.org/r/492246

Vgutierrez added a comment.Feb 22 2019, 8:21 AM

acme-chief certificates have been deployed successfully:

vgutierrez@cumin1001:~$ sudo cumin 'R:File = /etc/acmecerts' 'md5sum /etc/centralcerts/* | sed s/centralcerts/acmecerts/ | md5sum -c'
16 hosts will be targeted:
archiva1001.wikimedia.org,cobalt.wikimedia.org,dbmonitor[1001,2001].wikimedia.org,fermium.wikimedia.org,gerrit2001.wikimedia.org,icinga2001.wikimedia.org,install[1002,2002].wikimedia.org,labstore[1006-1007].wikimedia.org,mx[1001,2001].wikimedia.org,netmon[1002,2001].wikimedia.org,sodium.wikimedia.org
Confirm to continue [y/n]? y
===== NODE GROUP =====
(2) dbmonitor[1001,2001].wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/tendril.ec-prime256v1.chain.crt: OK
/etc/acmecerts/tendril.ec-prime256v1.chained.crt: OK
/etc/acmecerts/tendril.ec-prime256v1.crt: OK
/etc/acmecerts/tendril.ec-prime256v1.key: OK
/etc/acmecerts/tendril.rsa-2048.chain.crt: OK
/etc/acmecerts/tendril.rsa-2048.chained.crt: OK
/etc/acmecerts/tendril.rsa-2048.crt: OK
/etc/acmecerts/tendril.rsa-2048.key: OK
===== NODE GROUP =====
(1) sodium.wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/mirrors.ec-prime256v1.chain.crt: OK
/etc/acmecerts/mirrors.ec-prime256v1.chained.crt: OK
/etc/acmecerts/mirrors.ec-prime256v1.crt: OK
/etc/acmecerts/mirrors.ec-prime256v1.key: OK
/etc/acmecerts/mirrors.rsa-2048.chain.crt: OK
/etc/acmecerts/mirrors.rsa-2048.chained.crt: OK
/etc/acmecerts/mirrors.rsa-2048.crt: OK
/etc/acmecerts/mirrors.rsa-2048.key: OK
===== NODE GROUP =====
(2) netmon[1002,2001].wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/librenms.ec-prime256v1.chain.crt: OK
/etc/acmecerts/librenms.ec-prime256v1.chained.crt: OK
/etc/acmecerts/librenms.ec-prime256v1.crt: OK
/etc/acmecerts/librenms.ec-prime256v1.key: OK
/etc/acmecerts/librenms.rsa-2048.chain.crt: OK
/etc/acmecerts/librenms.rsa-2048.chained.crt: OK
/etc/acmecerts/librenms.rsa-2048.crt: OK
/etc/acmecerts/librenms.rsa-2048.key: OK
/etc/acmecerts/netbox.ec-prime256v1.chain.crt: OK
/etc/acmecerts/netbox.ec-prime256v1.chained.crt: OK
/etc/acmecerts/netbox.ec-prime256v1.crt: OK
/etc/acmecerts/netbox.ec-prime256v1.key: OK
/etc/acmecerts/netbox.rsa-2048.chain.crt: OK
/etc/acmecerts/netbox.rsa-2048.chained.crt: OK
/etc/acmecerts/netbox.rsa-2048.crt: OK
/etc/acmecerts/netbox.rsa-2048.key: OK
===== NODE GROUP =====
(1) archiva1001.wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/archiva.ec-prime256v1.chain.crt: OK
/etc/acmecerts/archiva.ec-prime256v1.chained.crt: OK
/etc/acmecerts/archiva.ec-prime256v1.crt: OK
/etc/acmecerts/archiva.ec-prime256v1.key: OK
/etc/acmecerts/archiva.rsa-2048.chain.crt: OK
/etc/acmecerts/archiva.rsa-2048.chained.crt: OK
/etc/acmecerts/archiva.rsa-2048.crt: OK
/etc/acmecerts/archiva.rsa-2048.key: OK
===== NODE GROUP =====
(2) labstore[1006-1007].wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/dumps.ec-prime256v1.chain.crt: OK
/etc/acmecerts/dumps.ec-prime256v1.chained.crt: OK
/etc/acmecerts/dumps.ec-prime256v1.crt: OK
/etc/acmecerts/dumps.ec-prime256v1.key: OK
/etc/acmecerts/dumps.rsa-2048.chain.crt: OK
/etc/acmecerts/dumps.rsa-2048.chained.crt: OK
/etc/acmecerts/dumps.rsa-2048.crt: OK
/etc/acmecerts/dumps.rsa-2048.key: OK
===== NODE GROUP =====
(1) fermium.wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/lists.ec-prime256v1.chain.crt: OK
/etc/acmecerts/lists.ec-prime256v1.chained.crt: OK
/etc/acmecerts/lists.ec-prime256v1.crt: OK
/etc/acmecerts/lists.ec-prime256v1.key: OK
/etc/acmecerts/lists.rsa-2048.chain.crt: OK
/etc/acmecerts/lists.rsa-2048.chained.crt: OK
/etc/acmecerts/lists.rsa-2048.crt: OK
/etc/acmecerts/lists.rsa-2048.key: OK
===== NODE GROUP =====
(2) cobalt.wikimedia.org,gerrit2001.wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/gerrit.ec-prime256v1.chain.crt: OK
/etc/acmecerts/gerrit.ec-prime256v1.chained.crt: OK
/etc/acmecerts/gerrit.ec-prime256v1.crt: OK
/etc/acmecerts/gerrit.ec-prime256v1.key: OK
/etc/acmecerts/gerrit.rsa-2048.chain.crt: OK
/etc/acmecerts/gerrit.rsa-2048.chained.crt: OK
/etc/acmecerts/gerrit.rsa-2048.crt: OK
/etc/acmecerts/gerrit.rsa-2048.key: OK
===== NODE GROUP =====
(2) install[1002,2002].wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/apt.ec-prime256v1.chain.crt: OK
/etc/acmecerts/apt.ec-prime256v1.chained.crt: OK
/etc/acmecerts/apt.ec-prime256v1.crt: OK
/etc/acmecerts/apt.ec-prime256v1.key: OK
/etc/acmecerts/apt.rsa-2048.chain.crt: OK
/etc/acmecerts/apt.rsa-2048.chained.crt: OK
/etc/acmecerts/apt.rsa-2048.crt: OK
/etc/acmecerts/apt.rsa-2048.key: OK
===== NODE GROUP =====
(1) icinga2001.wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/icinga.ec-prime256v1.chain.crt: OK
/etc/acmecerts/icinga.ec-prime256v1.chained.crt: OK
/etc/acmecerts/icinga.ec-prime256v1.crt: OK
/etc/acmecerts/icinga.ec-prime256v1.key: OK
/etc/acmecerts/icinga.rsa-2048.chain.crt: OK
/etc/acmecerts/icinga.rsa-2048.chained.crt: OK
/etc/acmecerts/icinga.rsa-2048.crt: OK
/etc/acmecerts/icinga.rsa-2048.key: OK
===== NODE GROUP =====
(2) mx[1001,2001].wikimedia.org
----- OUTPUT of 'md5sum /etc/cent...rts/ | md5sum -c' -----
/etc/acmecerts/mx.ec-prime256v1.chain.crt: OK
/etc/acmecerts/mx.ec-prime256v1.chained.crt: OK
/etc/acmecerts/mx.ec-prime256v1.crt: OK
/etc/acmecerts/mx.ec-prime256v1.key: OK
/etc/acmecerts/mx.rsa-2048.chain.crt: OK
/etc/acmecerts/mx.rsa-2048.chained.crt: OK
/etc/acmecerts/mx.rsa-2048.crt: OK
/etc/acmecerts/mx.rsa-2048.key: OK
================
Vgutierrez updated the task description. (Show Details)Feb 22 2019, 8:21 AM
gerritbot added a comment.Feb 22 2019, 8:32 AM

Change 492259 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] install_server: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492259

gerritbot added a comment.Feb 22 2019, 8:32 AM

Change 492260 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] install_server: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492260

Vgutierrez updated the task description. (Show Details)Feb 22 2019, 8:33 AM
gerritbot added a comment.Feb 22 2019, 8:42 AM

Change 492264 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] archiva: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492264

gerritbot added a comment.Feb 22 2019, 8:42 AM

Change 492265 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] archiva: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492265

Aklapper renamed this task from Rename the Certcentral project to Rename the Certcentral project to Acme-chief.Feb 22 2019, 10:21 AM
gerritbot added a comment.Feb 22 2019, 10:58 AM

Change 492280 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] dumps: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492280

gerritbot added a comment.Feb 22 2019, 10:58 AM

Change 492281 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] dumps: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492281

gerritbot added a comment.Feb 22 2019, 11:18 AM

Change 492283 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] gerrit: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492283

gerritbot added a comment.Feb 22 2019, 11:18 AM

Change 492284 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] gerrit: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492284

gerritbot added a comment.Feb 22 2019, 11:36 AM

Change 492285 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] icinga: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492285

gerritbot added a comment.Feb 22 2019, 11:36 AM

Change 492286 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] icinga: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492286

gerritbot added a comment.Feb 22 2019, 11:53 AM

Change 492288 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] librenms: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492288

gerritbot added a comment.Feb 22 2019, 11:53 AM

Change 492289 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] librenms: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492289

gerritbot added a comment.Feb 22 2019, 12:16 PM

Change 492292 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] lists: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492292

gerritbot added a comment.Feb 22 2019, 12:16 PM

Change 492293 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] lists: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492293

gerritbot added a comment.Feb 22 2019, 12:28 PM

Change 492295 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] mirrors: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492295

gerritbot added a comment.Feb 22 2019, 12:28 PM

Change 492296 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] mirrors: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492296

gerritbot added a comment.Feb 22 2019, 1:23 PM

Change 492310 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] exim: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492310

gerritbot added a comment.Feb 22 2019, 1:23 PM

Change 492311 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] mail: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492311

gerritbot added a comment.Feb 22 2019, 1:43 PM

Change 492317 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] netbox: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492317

gerritbot added a comment.Feb 22 2019, 1:43 PM

Change 492318 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] netbox: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492318

gerritbot added a comment.Feb 22 2019, 1:58 PM

Change 492326 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] tendril: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492326

gerritbot added a comment.Feb 22 2019, 1:58 PM

Change 492327 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] tendril: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492327

gerritbot added a comment.Feb 22 2019, 2:18 PM

Change 492259 merged by Vgutierrez:
[operations/puppet@production] install_server: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492259

gerritbot added a comment.Feb 22 2019, 2:26 PM

Change 492260 merged by Vgutierrez:
[operations/puppet@production] install_server: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492260

gerritbot added a comment.Feb 22 2019, 2:32 PM

Change 492264 merged by Vgutierrez:
[operations/puppet@production] archiva: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492264

gerritbot added a comment.Feb 22 2019, 2:36 PM

Change 492265 merged by Vgutierrez:
[operations/puppet@production] archiva: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492265

gerritbot added a comment.Feb 22 2019, 3:12 PM

Change 492280 merged by Vgutierrez:
[operations/puppet@production] dumps: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492280

gerritbot added a comment.Feb 22 2019, 3:21 PM

Change 492281 merged by Vgutierrez:
[operations/puppet@production] dumps: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492281

gerritbot added a comment.Feb 25 2019, 8:44 AM

Change 492283 merged by Vgutierrez:
[operations/puppet@production] gerrit: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492283

gerritbot added a comment.Feb 25 2019, 9:26 AM

Change 492284 merged by Vgutierrez:
[operations/puppet@production] gerrit: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492284

gerritbot added a comment.Feb 25 2019, 9:36 AM

Change 492285 merged by Vgutierrez:
[operations/puppet@production] icinga: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492285

gerritbot added a comment.Feb 25 2019, 9:44 AM

Change 492286 merged by Vgutierrez:
[operations/puppet@production] icinga: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492286

gerritbot added a comment.Feb 25 2019, 10:22 AM

Change 492288 merged by Vgutierrez:
[operations/puppet@production] librenms: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492288

gerritbot added a comment.Feb 25 2019, 10:28 AM

Change 492289 merged by Vgutierrez:
[operations/puppet@production] librenms: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492289

gerritbot added a comment.Feb 25 2019, 10:39 AM

Change 492292 merged by Vgutierrez:
[operations/puppet@production] lists: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492292

gerritbot added a comment.Feb 25 2019, 10:45 AM

Change 492293 merged by Vgutierrez:
[operations/puppet@production] lists: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492293

gerritbot added a comment.Feb 25 2019, 10:50 AM

Change 492295 merged by Vgutierrez:
[operations/puppet@production] mirrors: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492295

gerritbot added a comment.Feb 25 2019, 10:56 AM

Change 492296 merged by Vgutierrez:
[operations/puppet@production] mirrors: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492296

gerritbot added a comment.Feb 25 2019, 11:43 AM

Change 492310 merged by Vgutierrez:
[operations/puppet@production] exim: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492310

gerritbot added a comment.Feb 25 2019, 11:49 AM

Change 492311 merged by Vgutierrez:
[operations/puppet@production] mail: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492311

gerritbot added a comment.Feb 25 2019, 11:52 AM

Change 492317 merged by Vgutierrez:
[operations/puppet@production] netbox: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492317

gerritbot added a comment.Feb 25 2019, 11:57 AM

Change 492318 merged by Vgutierrez:
[operations/puppet@production] netbox: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492318

gerritbot added a comment.Feb 25 2019, 12:03 PM

Change 492326 merged by Vgutierrez:
[operations/puppet@production] tendril: Switch from certcentral to acme-chief certificates

https://gerrit.wikimedia.org/r/492326

gerritbot added a comment.Feb 25 2019, 12:07 PM

Change 492327 merged by Vgutierrez:
[operations/puppet@production] tendril: Get rid of certcentral certificates

https://gerrit.wikimedia.org/r/492327

Vgutierrez updated the task description. (Show Details)Feb 25 2019, 12:09 PM

At this point all the former clients of certcentral are using the new acme-chief code & servers to fetch their certificates

Stashbot added a comment.Feb 25 2019, 3:20 PM

Mentioned in SAL (#wikimedia-operations) [2019-02-25T15:20:52Z] <vgutierrez> shutting down certcentral VMs for decommission - T207389

gerritbot added a comment.Feb 25 2019, 3:54 PM

Change 492705 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] authdns: Drop certcentral hosts access (1/2)

https://gerrit.wikimedia.org/r/492705

gerritbot added a comment.Feb 25 2019, 4:04 PM

Change 492713 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] authdns: Drop certcentral hosts access (2/2)

https://gerrit.wikimedia.org/r/492713

gerritbot added a comment.Feb 25 2019, 4:13 PM

Change 492705 merged by Vgutierrez:
[operations/puppet@production] authdns: Drop certcentral hosts access (1/2)

https://gerrit.wikimedia.org/r/492705

gerritbot added a comment.Feb 25 2019, 4:20 PM

Change 492713 merged by Vgutierrez:
[operations/puppet@production] authdns: Drop certcentral hosts access (2/2)

https://gerrit.wikimedia.org/r/492713

gerritbot added a comment.Feb 25 2019, 4:41 PM

Change 492724 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] install_server: Get rid of certcentral instances

https://gerrit.wikimedia.org/r/492724

Vgutierrez updated the task description. (Show Details)Feb 25 2019, 5:48 PM
gerritbot added a comment.Feb 25 2019, 5:55 PM

Change 492724 merged by Vgutierrez:
[operations/puppet@production] install_server: Get rid of certcentral instances

https://gerrit.wikimedia.org/r/492724

ops-monitoring-bot subscribed.Feb 25 2019, 5:58 PM

cookbooks.sre.hosts.decommission executed by vgutierrez@cumin1001 for hosts: certcentral2001.codfw.wmnet,certcentral1001.eqiad.wmnet

  • certcentral2001.codfw.wmnet
    • Removed from Puppet master and PuppetDB
    • Skipped downtime host on Icinga (likely already removed)
    • No management interface found (likely a VM)
    • Removed from DebMonitor
  • certcentral1001.eqiad.wmnet
    • Removed from Puppet master and PuppetDB
    • Skipped downtime host on Icinga (likely already removed)
    • No management interface found (likely a VM)
    • Removed from DebMonitor
gerritbot added a comment.Feb 25 2019, 6:05 PM

Change 492744 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] certcentral: wipe certcentral from our puppet codebase

https://gerrit.wikimedia.org/r/492744

Vgutierrez updated the task description. (Show Details)Feb 25 2019, 6:06 PM
gerritbot added a comment.Feb 26 2019, 9:26 AM

Change 492744 merged by Vgutierrez:
[operations/puppet@production] certcentral: wipe certcentral from our puppet codebase

https://gerrit.wikimedia.org/r/492744

Vgutierrez updated the task description. (Show Details)Feb 26 2019, 10:04 AM
gerritbot added a comment.Feb 26 2019, 10:12 AM

Change 492982 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[integration/config@master] Add acme-chief-tox-docker tests for operations/software/acme-chief

https://gerrit.wikimedia.org/r/492982

Vgutierrez updated the task description. (Show Details)Feb 26 2019, 10:15 AM
gerritbot added a comment.Feb 26 2019, 10:50 AM

Change 492982 merged by jenkins-bot:
[integration/config@master] Add acme-chief-tox-docker tests for operations/software/acme-chief

https://gerrit.wikimedia.org/r/492982

Vgutierrez updated the task description. (Show Details)Feb 26 2019, 1:28 PM
gerritbot added a comment.Feb 26 2019, 1:31 PM

Change 493022 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/software/acme-chief@master] CI test, do not merge

https://gerrit.wikimedia.org/r/493022

Vgutierrez mentioned this in rOSAC4b9abc3f2ce4: CI test, do not merge.Feb 26 2019, 1:36 PM
gerritbot added a comment.Feb 26 2019, 1:37 PM

Change 493022 abandoned by Vgutierrez:
CI test, do not merge

Reason:
CI test

https://gerrit.wikimedia.org/r/493022

Vgutierrez updated the task description. (Show Details)Feb 26 2019, 1:42 PM
gerritbot added a comment.Feb 26 2019, 2:11 PM

Change 493027 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/puppet@production] deployment-prep: Get rid of deprecated certcentral references

https://gerrit.wikimedia.org/r/493027

gerritbot added a comment.Feb 26 2019, 2:17 PM

Change 493027 merged by Vgutierrez:
[operations/puppet@production] deployment-prep: Get rid of deprecated certcentral references

https://gerrit.wikimedia.org/r/493027

Vgutierrez closed this task as Resolved.Feb 26 2019, 2:22 PM
Vgutierrez removed a project: Patch-For-Review.
gerritbot added a comment.Feb 26 2019, 4:00 PM

Change 493059 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[labs/private@master] get rid of certcentral secrets

https://gerrit.wikimedia.org/r/493059

gerritbot added a project: Patch-For-Review.Feb 26 2019, 4:00 PM

Change 493059 merged by Vgutierrez:
[labs/private@master] get rid of certcentral secrets

https://gerrit.wikimedia.org/r/493059

gerritbot added a comment.Apr 9 2019, 11:57 AM

Change 502473 had a related patch set uploaded (by Vgutierrez; owner: Vgutierrez):
[operations/dns@master] get rid of certcentral[12]001 IPs

https://gerrit.wikimedia.org/r/502473

gerritbot added a comment.Apr 9 2019, 12:06 PM

Change 502473 merged by Vgutierrez:
[operations/dns@master] get rid of certcentral[12]001 IPs

https://gerrit.wikimedia.org/r/502473

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL