Page MenuHomePhabricator

Migrate away from legacy star.tools.wmflabs.org certificate
Closed, ResolvedPublic

Description

See https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Admin/SSL_certificates#*.tools.wmflabs.org
In T235252: Toolforge: SSL support for new domain toolforge.org we generated a cert that matches *.toolforge.org and *.tools.wmflabs.org too, so we can just use that.

Event Timeline

Change 547354 had a related patch set uploaded (by Alex Monk; owner: Alex Monk):
[operations/puppet@production] Replace old star.tools.wmflabs.org certificate with new one from acme-chief

https://gerrit.wikimedia.org/r/547354

Change 547357 had a related patch set uploaded (by Alex Monk; owner: Alex Monk):
[operations/puppet@production] Remove old absented star.tools.wmflabs.org cert

https://gerrit.wikimedia.org/r/547357

Mentioned in SAL (#wikimedia-cloud) [2019-10-31T10:00:51Z] <arturo> downtime toolschecker for 1h for replacing SSL certs in tools-static and tools-k8s-master (T236962)

Mentioned in SAL (#wikimedia-cloud) [2019-10-31T10:01:38Z] <arturo> s/tools-static/tools-docker-registry/g in last SAL entry (T236962)

Mentioned in SAL (#wikimedia-cloud) [2019-10-31T10:02:04Z] <arturo> icinga downtime toolschecker for 1h for replacing SSL certs in tools-docker-registry and tools-k8s-master (T236962)

Change 547354 merged by Arturo Borrero Gonzalez:
[operations/puppet@production] Replace old star.tools.wmflabs.org certificate with new one from acme-chief

https://gerrit.wikimedia.org/r/547354

Mentioned in SAL (#wikimedia-cloud) [2019-10-31T10:15:25Z] <arturo> SSL cert replacement for tools-docker-registry and tools-k8s-master went fine apparently (T236962)

Change 547357 merged by Jhedden:
[operations/puppet@production] Remove old absented star.tools.wmflabs.org cert

https://gerrit.wikimedia.org/r/547357