Page MenuHomePhabricator
Create Task
Maniphest T255876

Move mobileapps to use TLS only
Closed, ResolvedPublic
Actions

Description

  • Add TLS support to the deployment chart
  • Enable TLS on k8s in production
  • Add Additional LVS endpoint configuration
  • Switch services to use the TLS LVS
  • Remove non-TLS LVS endpoint configuration
  • Remove the non-TLS k8s service

Details

SubjectRepoBranchLines +/-
lvs: Remove mobileapps non-TLS endpoint from LVS 2/2operations/puppetproduction+0 -35
lvs: Remove mobileapps non-TLS endpoint from LVS 1/2operations/puppetproduction+2 -2
lvs: Remove mobileapps non-TLS endpoint from LVS 2/3operations/puppetproduction+2 -2
mobileapps: make template for the restbase uri configurableoperations/deployment-chartsmaster+5 -4
mobileapps: use the service proxy everywhereoperations/deployment-chartsmaster+6 -6
mobileapps: use the service proxy for all calls in stagingoperations/deployment-chartsmaster+2 -1
mobileapps: use the service proxy in stagingoperations/deployment-chartsmaster+31 -0
service_proxy: switch mobileapps to the TLS endpointoperations/puppetproduction+1 -1
mobileapps: enable monitoring on the TLS endpointoperations/puppetproduction+2 -2
mobileapps: add tls-enabled endpointoperations/puppetproduction+37 -2
Customize query in gerrit

Related Objects
Search...

Event Timeline

• JMeybohm created this task.Jun 19 2020, 3:42 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 19 2020, 3:42 PM
• JMeybohm triaged this task as Medium priority.Jul 21 2020, 7:54 AM
MSantos merged a task: T240597: Enable TLS for mobileapps and implement the Strict-Transport-Security header .Jul 30 2020, 5:59 PM
MSantos mentioned this in T240597: Enable TLS for mobileapps and implement the Strict-Transport-Security header .
MSantos added subscribers: MSantos, akosiaris, Joe and 3 others.
jijiki moved this task from Incoming 🐫 to cross-team active on the serviceops board.Aug 17 2020, 11:45 PM
gerritbot added a comment.Sep 7 2020, 6:07 AM

Change 625584 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/puppet@production] mobileapps: add tls-enabled endpoint

https://gerrit.wikimedia.org/r/625584

gerritbot added a project: Patch-For-Review.Sep 7 2020, 6:07 AM
gerritbot added a comment.Sep 7 2020, 10:36 AM

Change 625619 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/deployment-charts@master] mobileapps: use the service proxy

https://gerrit.wikimedia.org/r/625619

Nintendofan885 subscribed.Sep 7 2020, 10:38 AM
gerritbot added a comment.Sep 7 2020, 1:42 PM

Change 625584 merged by Giuseppe Lavagetto:
[operations/puppet@production] mobileapps: add tls-enabled endpoint

https://gerrit.wikimedia.org/r/625584

gerritbot added a comment.Sep 7 2020, 1:55 PM

Change 625643 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/puppet@production] mobileapps: enable monitoring on the TLS endpoint

https://gerrit.wikimedia.org/r/625643

gerritbot added a comment.Sep 7 2020, 2:00 PM

Change 625643 merged by Giuseppe Lavagetto:
[operations/puppet@production] mobileapps: enable monitoring on the TLS endpoint

https://gerrit.wikimedia.org/r/625643

gerritbot added a comment.Sep 7 2020, 3:36 PM

Change 625707 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/puppet@production] service_proxy: switch mobileapps to the TLS endpoint

https://gerrit.wikimedia.org/r/625707

gerritbot added a comment.Sep 7 2020, 3:57 PM

Change 625707 merged by Giuseppe Lavagetto:
[operations/puppet@production] service_proxy: switch mobileapps to the TLS endpoint

https://gerrit.wikimedia.org/r/625707

gerritbot added a comment.Sep 8 2020, 6:43 AM

Change 625619 merged by Giuseppe Lavagetto:
[operations/deployment-charts@master] mobileapps: use the service proxy in staging

https://gerrit.wikimedia.org/r/625619

Maintenance_bot removed a project: Patch-For-Review.Sep 8 2020, 7:10 AM
gerritbot added a comment.Sep 8 2020, 4:15 PM

Change 625936 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/deployment-charts@master] mobileapps: make template for the restbase uri configurable

https://gerrit.wikimedia.org/r/625936

gerritbot added a project: Patch-For-Review.Sep 8 2020, 4:15 PM

Change 625937 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/deployment-charts@master] mobileapps: use the service proxy for all calls in staging

https://gerrit.wikimedia.org/r/625937

gerritbot added a comment.Sep 9 2020, 8:04 AM

Change 625936 merged by jenkins-bot:
[operations/deployment-charts@master] mobileapps: make template for the restbase uri configurable

https://gerrit.wikimedia.org/r/625936

gerritbot added a comment.Sep 9 2020, 8:06 AM

Change 625937 merged by jenkins-bot:
[operations/deployment-charts@master] mobileapps: use the service proxy for all calls in staging

https://gerrit.wikimedia.org/r/625937

Joe updated the task description. (Show Details)Sep 9 2020, 8:06 AM
gerritbot added a comment.Sep 9 2020, 8:21 AM

Change 626102 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/deployment-charts@master] mobileapps: use the service proxy everywhere

https://gerrit.wikimedia.org/r/626102

gerritbot added a comment.Sep 9 2020, 8:31 AM

Change 626102 merged by jenkins-bot:
[operations/deployment-charts@master] mobileapps: use the service proxy everywhere

https://gerrit.wikimedia.org/r/626102

• bearND mentioned this in T262432: Investigate why mobileapps service times out.Sep 9 2020, 3:34 PM
gerritbot added a comment.Sep 14 2020, 12:16 PM

Change 627265 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/puppet@production] lvs: Remove mobileapps non-TLS endpoint from LVS

https://gerrit.wikimedia.org/r/627265

gerritbot added a comment.Sep 14 2020, 12:16 PM

Change 627266 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/puppet@production] lvs: Completely remove mobileapps-http service stanza

https://gerrit.wikimedia.org/r/627266

gerritbot added a comment.Sep 14 2020, 12:38 PM

Change 627271 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/puppet@production] lvs: Remove mobileapps non-TLS endpoint from LVS 1/3

https://gerrit.wikimedia.org/r/627271

• JMeybohm claimed this task.Sep 14 2020, 2:28 PM
gerritbot added a comment.Sep 15 2020, 2:02 PM

Change 627265 abandoned by JMeybohm:
[operations/puppet@production] lvs: Remove mobileapps non-TLS endpoint from LVS 2/3

Reason:

https://gerrit.wikimedia.org/r/627265

gerritbot added a comment.Sep 16 2020, 9:51 AM

Change 627271 merged by JMeybohm:
[operations/puppet@production] lvs: Remove mobileapps non-TLS endpoint from LVS 1/2

https://gerrit.wikimedia.org/r/627271

gerritbot added a comment.Sep 17 2020, 12:57 PM

Change 627266 merged by JMeybohm:
[operations/puppet@production] lvs: Remove mobileapps non-TLS endpoint from LVS 2/2

https://gerrit.wikimedia.org/r/627266

• JMeybohm updated the task description. (Show Details)Sep 17 2020, 1:51 PM
• JMeybohm closed this task as Resolved.Aug 30 2021, 7:55 AM
• JMeybohm updated the task description. (Show Details)
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits