Page MenuHomePhabricator

Remove obsolete Java 8 packages from logstash cluster
Closed, ResolvedPublic

Description

The logstash* cluster used to run Java 8 in the past (installed from a separate component), but is using 11 currently. Can we prune the obsolete debs? This reduces the noise in tracking Java update and also prevents any other package to accidentally use the outdated/insecure Java 8 packages (since the component/jdk8 repo component isn't added by Puppet anymore).

The packages in question are openjdk-8-jre-headless, openjdk-8-jre, openjdk-8-jdk-headless and openjdk-8-jdk

Event Timeline

herron triaged this task as Medium priority.Feb 28 2022, 8:07 PM
herron added subscribers: colewhite, fgiunchedi, herron.

SGTM, IIRC java 8 was in use by kafka-logging which is no longer colocated on the logstash hosts.

And no longer seeing openjdk-8 in use checking with e.g. $ cumin 'logstash*' 'lsof | grep java-8'

Let's get a +1 from @fgiunchedi @colewhite too and then go ahead and remove the packages.

Mentioned in SAL (#wikimedia-operations) [2022-03-23T23:25:18Z] <cwhite> remove openjdk-8-jre from codfw logstash nodes T301770

colewhite changed the task status from Open to In Progress.Mar 23 2022, 11:29 PM
colewhite claimed this task.

Mentioned in SAL (#wikimedia-operations) [2022-03-31T19:21:17Z] <cwhite> remove openjdk-8-jre from eqiad logstash nodes T301770