Per email with @MoritzMuehlenhoff , security updates are available for OpenJDK 8.
Will test these package updates on eqiad hosts using the following restrictions:
- One host per row
- No masters
- Announce start of work in #wikimedia-operations
- Depool host and wait 2 minutes for traffic to cease.
- Apply package updates
- Restart Elastic services
- Wait for all clusters to go back to green.
Repeat 2 more times.
Once I have successfully upgraded 3 hosts, I will consider this a success, and will fold in the upgrade to the larger operation described in T309720 .