Page MenuHomePhabricator

google-api-proxy: Move Debian Jessie instances to Buster
Open, Needs TriagePublic

Description

Debian Jessie is reaching its End Of Life. We need to create a new instance for the google-api-proxy that runs on Buster, and delete the old one running on Jessie.

More information at https://wikitech.wikimedia.org/wiki/News/Jessie_deprecation

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptTue, Sep 24, 4:52 PM

@bd808 With your help, Community Tech created this way back when T136862: Create project Google-api-proxy. I don't think any of us know how to set it up from scratch, though. Could you assist? :)

@MusikAnimal There is a bit of documentation at https://wikitech.wikimedia.org/wiki/Nova_Resource:Google-api-proxy. There is a puppet role that does the setup of a proxy instance.

If I was going to be the person doing this work I think I would:

  1. Request temporary +1 IP Address quota for the project
  2. Provision a new m1.small instance with Buster as the base image
  3. Attach a public IP to the instance
  4. Apply role::labs::google_api_proxy on that node along with needed Hiera settings
  5. Add the new public IP to the Google account configuration
  6. Verify that the nginx reverse proxy works via curl from the new instance directly
  7. Delete and recreate the https proxies so that they point to the new instance
  8. Verify that the nginx reverse proxy works via the proxy hostnames
  9. Release the public IP from the old instance
  10. Delete the old instance
  11. Release the temporary +1 IP quota bump
  12. Profit!!