Page MenuHomePhabricator

toolforge: Refresh certs that are not controlled by kubeadm (mid 2022 edition)
Closed, ResolvedPublic

Description

Refresh Toolforge k8s certificates for prometheus and the admission controllers.

For previous work, see T280301. For automating the admission controller certificates, see T292238.

Details

Due Date
Jun 2 2022, 9:00 PM

Event Timeline

taavi triaged this task as High priority.May 15 2022, 12:31 PM
taavi created this task.
taavi set Due Date to Jun 2 2022, 9:00 PM.May 15 2022, 12:31 PM
dcaro changed the task status from Open to In Progress.Jun 2 2022, 11:32 AM
dcaro claimed this task.
dcaro added a project: User-dcaro.
dcaro moved this task from To refine to Doing on the User-dcaro board.

Mentioned in SAL (#wikimedia-cloud) [2022-06-02T11:36:35Z] <dcaro> refresh volume-admission-controller certs (T308402)

Mentioned in SAL (#wikimedia-cloud) [2022-06-02T11:42:33Z] <dcaro> refresh ingress-admission-controller certs (T308402)

Mentioned in SAL (#wikimedia-cloud) [2022-06-02T11:47:27Z] <dcaro> refresh registry-admission-controller certs (T308402)

Change 802494 had a related patch set uploaded (by David Caro; author: David Caro):

[operations/puppet@production] tools: refresh prometheus certificate

https://gerrit.wikimedia.org/r/802494

Mentioned in SAL (#wikimedia-cloud) [2022-06-02T12:03:48Z] <dcaro> refresh prometheus certs (T308402)

Change 802494 merged by David Caro:

[operations/puppet@production] tools: refresh prometheus certificate

https://gerrit.wikimedia.org/r/802494