Page MenuHomePhabricator
Create Task
Maniphest T260626

Enable TLS for api-gateway -> eventgate access log delivery
Closed, ResolvedPublic
Actions

Description

fluent-bit supports TLS natively, so we can enable it for sending the logs to eventgate.

Details

SubjectRepoBranchLines +/-
Remove unnesessary Content-Type header for fluent-bitoperations/deployment-chartsmaster+1 -2
Disable TLS in staging, enable TLS in productionoperations/deployment-chartsmaster+20 -4
Properly indent puppetca.crt for fluent-bitoperations/deployment-chartsmaster+8 -4
Add puppetca to fluent-bit for cert validationoperations/deployment-chartsmaster+10 -1
Enable TLS for fluent-bit -> eventgateoperations/deployment-chartsmaster+31 -12
Customize query in gerrit

Related Objects
Search...

Event Timeline

• Pchelolo created this task.Aug 17 2020, 10:55 PM
• Pchelolo moved this task from Backlog to Doing on the Platform Team Workboards (Green) board.Aug 19 2020, 6:24 PM
gerritbot added a comment.Aug 19 2020, 6:42 PM

Change 621332 had a related patch set uploaded (by Ppchelko; owner: Ppchelko):
[operations/deployment-charts@master] Enable TLS for fluent-bit -> eventgate

https://gerrit.wikimedia.org/r/621332

gerritbot added a project: Patch-For-Review.Aug 19 2020, 6:42 PM
• Pchelolo moved this task from Doing to Waiting for Review on the Platform Team Workboards (Green) board.Aug 19 2020, 6:43 PM
gerritbot added a comment.Aug 20 2020, 2:17 PM

Change 621527 had a related patch set uploaded (by Ppchelko; owner: Ppchelko):
[operations/deployment-charts@master] Add puppetca to fluent-bit for cert validation

https://gerrit.wikimedia.org/r/621527

gerritbot added a comment.Aug 20 2020, 2:29 PM

Change 621527 merged by jenkins-bot:
[operations/deployment-charts@master] Add puppetca to fluent-bit for cert validation

https://gerrit.wikimedia.org/r/621527

gerritbot added a comment.Aug 20 2020, 2:43 PM

Change 621530 had a related patch set uploaded (by Ppchelko; owner: Ppchelko):
[operations/deployment-charts@master] Properly indent puppetca.crt for fluent-bit

https://gerrit.wikimedia.org/r/621530

gerritbot added a comment.Aug 20 2020, 2:47 PM

Change 621530 merged by jenkins-bot:
[operations/deployment-charts@master] Properly indent puppetca.crt for fluent-bit

https://gerrit.wikimedia.org/r/621530

gerritbot added a comment.Aug 20 2020, 3:58 PM

Change 621549 had a related patch set uploaded (by Ppchelko; owner: Ppchelko):
[operations/deployment-charts@master] Disable TLS in staging, enable TLS in production

https://gerrit.wikimedia.org/r/621549

gerritbot added a comment.Aug 20 2020, 4:01 PM

Change 621549 merged by jenkins-bot:
[operations/deployment-charts@master] Disable TLS in staging, enable TLS in production

https://gerrit.wikimedia.org/r/621549

gerritbot added a comment.Aug 20 2020, 4:38 PM

Change 621551 had a related patch set uploaded (by Ppchelko; owner: Ppchelko):
[operations/deployment-charts@master] Remove unnesessary Content-Type header for fluent-bit

https://gerrit.wikimedia.org/r/621551

gerritbot added a comment.Aug 20 2020, 4:39 PM

Change 621551 merged by jenkins-bot:
[operations/deployment-charts@master] Remove unnesessary Content-Type header for fluent-bit

https://gerrit.wikimedia.org/r/621551

• Pchelolo closed this task as Resolved.Aug 20 2020, 4:53 PM
• Pchelolo moved this task from Waiting for Review to Done on the Platform Team Workboards (Green) board.

And we're live! Sending logs in production over TLS!

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL