Page MenuHomePhabricator

Remove Matxin Key from Production
Closed, ResolvedPublic

Description

After T284887 (Deployment of Elia MT, which is replacing Matxin MT), we are not sure if old Matxin keys are removed. Check and remove Matxin secret key is there in private puppet repository.

  • Remove old Matxin key from private puppet repository
  • Deployment

Event Timeline

For context:

cxserver/deploy repository is deprecated and can be deleted. I need to look what deployment-prep is doing here.

cxserver/deploy repository is deprecated and can be deleted. I need to look what deployment-prep is doing here.

I 've marked cxserver/deploy as a read-only repo that exists only for historical purposes in Gerrit.

Change 727337 had a related patch set uploaded (by Alexandros Kosiaris; author: Alexandros Kosiaris):

[labs/private@master] Remove the old redundant passwords::cxserver class

https://gerrit.wikimedia.org/r/727337

For context:

  • We found Could not parse cxserver.conf.mt.Matxin from cxserver logs

This probably comes from the private repo where we keep the Matxin key. The private repo is populating on the deployment server the following files

  • /etc/helmfile-defaults/private/main_services/cxserver/eqiad.yaml
  • /etc/helmfile-defaults/private/main_services/cxserver/codfw.yaml
  • /etc/helmfile-defaults/private/main_services/cxserver/staging.yaml

I 've removed it from the private repo, give it 30 mins to propagate and you can do a deploy. I (think!) that should fix it.

Change 727337 merged by Alexandros Kosiaris:

[labs/private@master] Remove the old redundant passwords::cxserver class

https://gerrit.wikimedia.org/r/727337

KartikMistry updated Other Assignee, added: akosiaris.
KartikMistry updated the task description. (Show Details)

Mentioned in SAL (#wikimedia-operations) [2021-10-12T03:56:32Z] <kart_> cxserver: Remove Matxin Key from Production (T292635)

KartikMistry updated the task description. (Show Details)