Page MenuHomePhabricator
Create Task
Maniphest T274852

Refactor users in production-images
Closed, ResolvedPublic
Actions

Description

Some production-images could use a refactor of the users used to run the processes (away from special runuser to nobody would be nice):

  • ratelimit
  • fluent-bit
  • eventrouter (also needs a refactoring to use debian as base)

Details

SubjectRepoBranchLines +/-
eventrouter: Use debian based imageoperations/deployment-chartsmaster+2 -2
api-gateway: Bump ratelimit and fluent-bit image versionsoperations/deployment-chartsmaster+2 -2
fluent-bit: Switch to nobody and use seed_imageoperations/docker-images/production-imagesmaster+10 -6
ratelimit: Switch to nobody, update build and base imageoperations/docker-images/production-imagesmaster+13 -6
eventrouter: Update build and base image, switch to nobodyoperations/docker-images/production-imagesmaster+17 -15
Customize query in gerrit

Related Objects
Search...

Event Timeline

JMeybohm triaged this task as Low priority.Feb 16 2021, 9:26 AM
JMeybohm created this task.
gerritbot added a comment.Mar 8 2021, 2:55 PM

Change 669846 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/docker-images/production-images@master] eventrouter: Update build and base image, switch to nobody

https://gerrit.wikimedia.org/r/669846

gerritbot added a project: Patch-For-Review.Mar 8 2021, 2:55 PM
JMeybohm claimed this task.Mar 11 2021, 1:46 PM
gerritbot added a comment.Mar 17 2021, 5:03 PM

Change 670838 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/docker-images/production-images@master] fluent-bit: Switch to nobody and use seed_image

https://gerrit.wikimedia.org/r/670838

gerritbot added a comment.Mar 17 2021, 5:03 PM

Change 670836 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/docker-images/production-images@master] ratelimit: Switch to nobody, update build and base image

https://gerrit.wikimedia.org/r/670836

gerritbot added a comment.Mar 22 2021, 7:56 AM

Change 669846 merged by JMeybohm:
[operations/docker-images/production-images@master] eventrouter: Update build and base image, switch to nobody

https://gerrit.wikimedia.org/r/669846

gerritbot added a comment.Mar 22 2021, 7:56 AM

Change 670836 merged by JMeybohm:
[operations/docker-images/production-images@master] ratelimit: Switch to nobody, update build and base image

https://gerrit.wikimedia.org/r/670836

gerritbot added a comment.Mar 22 2021, 7:57 AM

Change 670838 merged by JMeybohm:
[operations/docker-images/production-images@master] fluent-bit: Switch to nobody and use seed_image

https://gerrit.wikimedia.org/r/670838

gerritbot added a comment.Mar 22 2021, 8:11 AM

Change 673934 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/deployment-charts@master] api-gateway: Bump ratelimit and fluent-bit image versions

https://gerrit.wikimedia.org/r/673934

gerritbot added a comment.Mar 22 2021, 8:11 AM

Change 673935 had a related patch set uploaded (by JMeybohm; owner: JMeybohm):
[operations/deployment-charts@master] eventrouter: Use debian based image

https://gerrit.wikimedia.org/r/673935

gerritbot added a comment.Mar 22 2021, 10:04 AM

Change 673934 merged by jenkins-bot:
[operations/deployment-charts@master] api-gateway: Bump ratelimit and fluent-bit image versions

https://gerrit.wikimedia.org/r/673934

gerritbot added a comment.Mar 22 2021, 12:23 PM

Change 673935 merged by jenkins-bot:
[operations/deployment-charts@master] eventrouter: Use debian based image

https://gerrit.wikimedia.org/r/673935

JMeybohm closed this task as Resolved.Mar 23 2021, 4:13 PM

Done and rolled out

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits