Page MenuHomePhabricator

Upgrade deployment-prep Elastic cluster to Debian Buster or newer
Closed, DuplicatePublic5 Estimated Story Points


The deployment-prep elastic cluster (deployment-elastic[05-07], note elastic08 did exist at some point so next instance should be elastic09) is running Debian Stretch and needs to be upgraded to Buster or newer by May 1, 2022.

Event Timeline

Note that currently the deployment-prep cluster needs per-host TLS certificates that are somehow created manually and commited as local hacks to the public and private puppet repositories on the project-local puppetmaster. This seems like a good opportunity to check if we can integrate the elastic puppetization with the new cfssl-based automated pki system and using the standard Envoy-based TLS termination stack.