This task is to track the work for enabling acme-chief in the PAWS Cloud VPS project: https://openstack-browser.toolforge.org/project/paws
I will be following the docs at wikitech: https://wikitech.wikimedia.org/wiki/Acme-chief/Cloud_VPS_setup
We need acme-chief to enable TLS termination in haproxy for the PAWS ingress.
| Project | Branch | Lines +/- | Subject | |
|---|---|---|---|---|
| operations/puppet | production | +1 -0 | openstack: keystone: add paws-dns-manager to the safelist |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Restricted Task | |||||
| Resolved | Bstorm | T246122 Upgrade the Toolforge Kubernetes cluster to v1.16 | |||
| Resolved | Bstorm | T211096 PAWS: Rebuild and upgrade Kubernetes | |||
| Duplicate | Chicocvenancio | T218150 Update PAWS with Zero to JupyterHub k8s 0.8.0 chart | |||
| Resolved | aborrero | T195217 Simplify ingress methods for PAWS | |||
| Resolved | aborrero | T255252 PAWS: enable acme-chief in the project |
Mentioned in SAL (#wikimedia-cloud) [2020-06-12T11:01:18Z] <arturo> created VM paws-acme-chief-01 (T255252)
Mentioned in SAL (#wikimedia-cloud) [2020-06-12T11:02:50Z] <arturo> created puppet prefix 'paws-acme-chief' (T255252)
Mentioned in SAL (#wikimedia-cloud) [2020-06-12T11:31:57Z] <arturo> introduced acme-chief private data into labs/private in paws-puppetmaster-01 (T255252)
Change 605198 had a related patch set uploaded (by Arturo Borrero Gonzalez; owner: Arturo Borrero Gonzalez):
[operations/puppet@production] openstack: keystone: add paws-dns-manager to the safelist
Change 605198 merged by Arturo Borrero Gonzalez:
[operations/puppet@production] openstack: keystone: add paws-dns-manager to the safelist
Mentioned in SAL (#wikimedia-cloud) [2020-06-12T11:51:41Z] <arturo> created service account paws-dns-manager in wikitech (T255252)
Mentioned in SAL (#wikimedia-cloud) [2020-06-12T11:55:04Z] <arturo> aborrero@cloudcontrol1004:~ $ sudo wmcs-openstack role add --user paws-dns-manager --project paws designateadmin (T255252)
Mentioned in SAL (#wikimedia-cloud) [2020-06-12T11:55:10Z] <arturo> aborrero@cloudcontrol1004:~ $ sudo wmcs-openstack role add --user paws-dns-manager --project paws observer (T255252)