Page MenuHomePhabricator
Create Task
Maniphest T255878

Move wikifeeds to use TLS only
Closed, ResolvedPublic
Actions

Description

  • Add TLS support to the deployment chart
  • Enable TLS on k8s in production
  • Add Additional LVS endpoint configuration
  • Switch services to use the TLS LVS
  • Remove non-TLS LVS endpoint configuration
  • Remove the non-TLS k8s service

Details

SubjectRepoBranchLines +/-
wikifeeds: Remove HTTP service from kubernetesoperations/deployment-chartsmaster+7 -17
lvs: Remove wikifeeds non-TLS endpoint 2/2operations/puppetproduction+0 -36
lvs: Remove wikifeeds non-TLS endpoint 1/2operations/puppetproduction+1 -4
wikifeeds: use the service proxy for reaching the MediaWiki apioperations/deployment-chartsmaster+2 -3
services: add TLS encrypted endpoint for wikifeeds (2/2)operations/puppetproduction+4 -5
services: add TLS encrypted endpoint for wikifeeds (1/2)operations/puppetproduction+41 -1
wikifeeds: use the service proxy everywhereoperations/deployment-chartsmaster+3 -4
wikifeeds: use the service proxy in stagingoperations/deployment-chartsmaster+10 -1
Customize query in gerrit

Related Objects
Search...

Event Timeline

JMeybohm created this task.Jun 19 2020, 3:42 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 19 2020, 3:42 PM
JMeybohm triaged this task as Medium priority.Jul 21 2020, 7:54 AM
jijiki moved this task from Incoming 🐫 to 🔦Unused2 on the serviceops board.Aug 17 2020, 11:45 PM
gerritbot added a comment.Sep 9 2020, 11:04 AM

Change 626132 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/deployment-charts@master] wikifeeds: use the service proxy in staging

https://gerrit.wikimedia.org/r/626132

gerritbot added a project: Patch-For-Review.Sep 9 2020, 11:04 AM
gerritbot added a comment.Sep 15 2020, 9:24 AM

Change 626132 merged by jenkins-bot:
[operations/deployment-charts@master] wikifeeds: use the service proxy in staging

https://gerrit.wikimedia.org/r/626132

Maintenance_bot removed a project: Patch-For-Review.Sep 15 2020, 10:10 AM
gerritbot added a comment.Sep 15 2020, 2:56 PM

Change 627517 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/deployment-charts@master] wikifeeds: use the service proxy everywhere

https://gerrit.wikimedia.org/r/627517

gerritbot added a project: Patch-For-Review.Sep 15 2020, 2:56 PM
gerritbot added a comment.Sep 16 2020, 3:50 PM

Change 627517 merged by jenkins-bot:
[operations/deployment-charts@master] wikifeeds: use the service proxy everywhere

https://gerrit.wikimedia.org/r/627517

Maintenance_bot removed a project: Patch-For-Review.Sep 16 2020, 4:11 PM
• Mholloway mentioned this in T263043: [Bug] The feed/featured endpoint is broken.Sep 16 2020, 5:28 PM
gerritbot added a comment.Sep 21 2020, 8:44 AM

Change 628756 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/deployment-charts@master] wikifeeds: use the service proxy for reaching the MediaWiki api

https://gerrit.wikimedia.org/r/628756

gerritbot added a project: Patch-For-Review.Sep 21 2020, 8:44 AM
gerritbot added a comment.Sep 22 2020, 3:22 PM

Change 629154 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/puppet@production] services: add TLS encrypted endpoint for wikifeeds (1/2)

https://gerrit.wikimedia.org/r/629154

gerritbot added a comment.Sep 22 2020, 3:22 PM

Change 629155 had a related patch set uploaded (by Giuseppe Lavagetto; owner: Giuseppe Lavagetto):
[operations/puppet@production] services: add TLS encrypted endpoint for wikifeeds (2/2)

https://gerrit.wikimedia.org/r/629155

gerritbot added a comment.Sep 28 2020, 7:13 AM

Change 629154 merged by Giuseppe Lavagetto:
[operations/puppet@production] services: add TLS encrypted endpoint for wikifeeds (1/2)

https://gerrit.wikimedia.org/r/629154

gerritbot added a comment.Sep 28 2020, 9:30 AM

Change 629155 merged by Giuseppe Lavagetto:
[operations/puppet@production] services: add TLS encrypted endpoint for wikifeeds (2/2)

https://gerrit.wikimedia.org/r/629155

Joe updated the task description. (Show Details)Sep 28 2020, 10:19 AM
gerritbot added a comment.Sep 29 2020, 3:15 PM

Change 628756 abandoned by Giuseppe Lavagetto:
[operations/deployment-charts@master] wikifeeds: use the service proxy for reaching the MediaWiki api

Reason:

https://gerrit.wikimedia.org/r/628756

gerritbot added a comment.Oct 1 2020, 9:12 AM

Change 631405 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/puppet@production] lvs: Remove wikifeeds non-TLS endpoint 1/2

https://gerrit.wikimedia.org/r/631405

gerritbot added a comment.Oct 1 2020, 9:12 AM

Change 631406 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/puppet@production] lvs: Remove wikifeeds non-TLS endpoint 2/2

https://gerrit.wikimedia.org/r/631406

gerritbot added a comment.Oct 1 2020, 1:07 PM

Change 631405 merged by JMeybohm:
[operations/puppet@production] lvs: Remove wikifeeds non-TLS endpoint 1/2

https://gerrit.wikimedia.org/r/631405

gerritbot added a comment.Oct 1 2020, 2:42 PM

Change 631406 merged by JMeybohm:
[operations/puppet@production] lvs: Remove wikifeeds non-TLS endpoint 2/2

https://gerrit.wikimedia.org/r/631406

Stashbot mentioned this in T244843: Create a service-to-service proxy for handling HTTP calls from services to other entities.Oct 1 2020, 2:42 PM

Mentioned in SAL (#wikimedia-operations) [2020-10-01T14:42:42Z] <jayme> running puppet on lvs servers - T244843 T255878

Stashbot added a comment.Oct 1 2020, 2:48 PM

Mentioned in SAL (#wikimedia-operations) [2020-10-01T14:48:36Z] <jayme> restarting pybal on lvs2010.codfw.wmnet - T244843 T255878

Stashbot added a comment.Oct 1 2020, 2:50 PM

Mentioned in SAL (#wikimedia-operations) [2020-10-01T14:50:02Z] <jayme> restarting pybal on lvs1015.eqiad.wmnet,lvs2009.codfw.wmnet - T244843 T255878

Stashbot added a comment.Oct 1 2020, 2:53 PM

Mentioned in SAL (#wikimedia-operations) [2020-10-01T14:53:48Z] <jayme> running ipvsadm -D -t 10.2.1.10:8081; ipvsadm -D -t 10.2.1.47:8889 on lvs2010.codfw.wmnet,lvs2009.codfw.wmnet - T244843 T255878

Stashbot added a comment.Oct 1 2020, 2:55 PM

Mentioned in SAL (#wikimedia-operations) [2020-10-01T14:55:43Z] <jayme> running ipvsadm -D -t 10.2.2.10:8081; ipvsadm -D -t 10.2.2.47:8889 on lvs1015.eqiad.wmnet - T244843 T255878

JMeybohm updated the task description. (Show Details)Oct 2 2020, 8:36 AM
gerritbot added a comment.Aug 30 2021, 8:06 AM

Change 715452 had a related patch set uploaded (by JMeybohm; author: JMeybohm):

[operations/deployment-charts@master] wikifeeds: Remove HTTP service from kubernetes

https://gerrit.wikimedia.org/r/715452

gerritbot added a comment.Sep 2 2021, 1:49 PM

Change 715452 merged by jenkins-bot:

[operations/deployment-charts@master] wikifeeds: Remove HTTP service from kubernetes

https://gerrit.wikimedia.org/r/715452

JMeybohm closed this task as Resolved.Sep 2 2021, 2:40 PM
JMeybohm claimed this task.
JMeybohm updated the task description. (Show Details)
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL