puppetmaster[12]001: add TLS termination
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• ema
	Sep 25 2020, 8:15 AM

Description

The puppetmaster is one of the very few remaining origin servers available only via plain HTTP, see T108580#6488253. We should make it available via HTTPS instead to ensure that traffic between ATS and the puppetmasters (used for https://config-master.wikimedia.org) is encrypted.

Details

	Subject	Repo	Branch	Lines +/-
	puppetmaster: remove default apache ports from puppetmaster	operations/puppet	production	+24 -27
	httpd: Add abbility to remove the defauls ports configueration	operations/puppet	production	+50 -35

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		• ema	T108580 HTTPS for internal service traffic
		Resolved		jbond	T263831 puppetmaster[12]001: add TLS termination

Event Timeline

• ema created this task.Sep 25 2020, 8:15 AM

Restricted Application added a project: SRE. · View Herald TranscriptSep 25 2020, 8:15 AM

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

• ema added a parent task: T108580: HTTPS for internal service traffic.Sep 25 2020, 8:27 AM

MoritzMuehlenhoff added a subscriber: jbond.Sep 25 2020, 9:08 AM

ArielGlenn triaged this task as Medium priority.Sep 28 2020, 9:35 AM

Nintendofan885 added a project: HTTPS.Nov 4 2020, 2:21 PM

• ema moved this task from Backlog to Feature Requests on the Traffic board.Nov 24 2020, 3:19 PM

Change 650154 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] httpd: Add abbility to remove the defauls ports configueration

https://gerrit.wikimedia.org/r/650154

Change 650155 had a related patch set uploaded (by Jbond; owner: John Bond):
[operations/puppet@production] puppetmaster: remove default apache ports from puppetmaster

https://gerrit.wikimedia.org/r/650155

Change 650154 merged by Jbond:
[operations/puppet@production] httpd: Add abbility to remove the defauls ports configueration

https://gerrit.wikimedia.org/r/650154

Change 650155 merged by Jbond:
[operations/puppet@production] puppetmaster: remove default apache ports from puppetmaster

https://gerrit.wikimedia.org/r/650155

Maintenance_bot removed a project: Patch-For-Review.Dec 17 2020, 4:11 PM