Page MenuHomePhabricator
Create Task
Maniphest T256683

fundraising kafkatee ca certificate has expired
Closed, ResolvedPublic
Actions

Description

We need to refresh the CA and client certificate for kafkatee, the CA certificate (which was from palladium) expired today.

The existing client certificate is CN = kafka_fundraising_client

Event Timeline

Jgreen created this task.Jun 29 2020, 8:20 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 29 2020, 8:20 PM
Jgreen triaged this task as Unbreak Now! priority.Jun 29 2020, 8:21 PM
Jgreen moved this task from Triage to In Progress on the fundraising-tech-ops board.
Jgreen added a comment.EditedJun 29 2020, 8:32 PM

https://wikitech.wikimedia.org/wiki/Kafka/Administration#Kafka_Certificates
https://wikitech.wikimedia.org/wiki/Cergen

Jgreen updated the task description. (Show Details)Jun 29 2020, 8:37 PM
Jgreen added a comment.Jun 29 2020, 8:49 PM

Refreshed CA cert from puppetmaster1001:/srv/private/modules/secret/secrets/certificates/kafka_fundraising_client which has fixed the problem.

Jgreen closed this task as Resolved.Jun 29 2020, 8:49 PM
Jgreen claimed this task.
Jgreen moved this task from In Progress to Done on the fundraising-tech-ops board.
Content licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted; code licensed under GNU General Public License (GPL) or other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL