Page MenuHomePhabricator
Create Task
Maniphest T215810

Package envoy 1.9.X for stretch and use it as redis proxy on docker registry
Closed, ResolvedPublic
Actions

Description

We already use twemproxy / nutcracker as a redis proxy on mediawiki app servers but since twemproxy is unmaintained and envoy does support redis proxy protocol is a good opportunity to explore its usage. Sadly packaging envoy is going to be challenging since the build process is a little bit complex involving bazel, luckily we already have a docker image for envoy building

Details

ProjectBranchLines +/-Subject
operations/debs/envoyproxywikimedia-stretch+153 -0Initial debianization for envoyproxy
integration/configmaster+1 -0Add debian-glue job to operations/debs/envoyproxy
Customize query in gerrit

Related Objects
Search...

Event Timeline

• fsero triaged this task as Medium priority.Feb 11 2019, 3:52 PM
• fsero created this task.
• fsero moved this task from Backlog to In progress on the Prod-Kubernetes board.Feb 13 2019, 4:16 PM
• fsero moved this task from Backlog to In progress on the User-fsero board.Feb 18 2019, 2:55 PM
gerritbot added a comment.Feb 21 2019, 12:20 PM

Change 491951 had a related patch set uploaded (by Fsero; owner: Fsero):
[operations/debs/envoyproxy@wikimedia-stretch] Initial debianization for envoyproxy

https://gerrit.wikimedia.org/r/491951

gerritbot added a project: Patch-For-Review.Feb 21 2019, 12:20 PM
gerritbot added a comment.Feb 22 2019, 7:46 AM

Change 492254 had a related patch set uploaded (by Hashar; owner: Hashar):
[integration/config@master] Add debian-glue job to operations/debs/envoyproxy

https://gerrit.wikimedia.org/r/492254

gerritbot added a comment.Feb 22 2019, 7:49 AM

Change 492254 merged by jenkins-bot:
[integration/config@master] Add debian-glue job to operations/debs/envoyproxy

https://gerrit.wikimedia.org/r/492254

gerritbot added a comment.Feb 25 2019, 3:42 PM

Change 491951 merged by Fsero:
[operations/debs/envoyproxy@wikimedia-stretch] Initial debianization for envoyproxy

https://gerrit.wikimedia.org/r/491951

Stashbot added a subscriber: Stashbot.Feb 25 2019, 4:17 PM

Mentioned in SAL (#wikimedia-operations) [2019-02-25T16:17:31Z] <fsero> upload envoy 1.9.0 to stretch-wikimedia T215810

• fsero renamed this task from Package envoy 1.9.0 for stretch and use it as redis proxy on docker registry to Package envoy 1.9.X for stretch and use it as redis proxy on docker registry.Apr 8 2019, 10:30 AM

Building 1.9.1 due to CVE

Stashbot added a comment.Apr 8 2019, 11:11 AM

Mentioned in SAL (#wikimedia-operations) [2019-04-08T11:11:56Z] <fsero> upgrading envoy to 1.9.1 T215810

MoritzMuehlenhoff added a subscriber: MoritzMuehlenhoff.Apr 10 2019, 9:15 AM
In T215810#5092693, @fsero wrote:

Building 1.9.1 due to CVE

Adding CVE 2019-9900 and CVE 2019-9901 for better searchability, references are https://github.com/envoyproxy/envoy/issues/6434 and https://github.com/envoyproxy/envoy/issues/6435

• fsero closed this task as Resolved.Jul 24 2019, 8:15 AM

package is done and uploaded long time ago.

gerritbot added a comment.Jul 26 2019, 10:14 AM

Change 491951 merged by Fsero:
[operations/debs/envoyproxy@wikimedia-stretch] Initial debianization for envoyproxy

https://gerrit.wikimedia.org/r/491951

Content licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted; code licensed under GNU General Public License (GPL) or other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL