Page MenuHomePhabricator
Create Task
Maniphest T309868

Test openjdk 8 package upgrades on eqiad stretch hosts
Closed, ResolvedPublic
Actions

Description

Per email with @MoritzMuehlenhoff , security updates are available for OpenJDK 8.

Will test these package updates on eqiad hosts using the following restrictions:

  • One host per row
  • No masters

Plan:

  • Announce start of work in #wikimedia-operations
  • Depool host and wait 2 minutes for traffic to cease.
  • Apply package updates
  • Restart Elastic services
  • Wait for all clusters to go back to green.

Repeat 2 more times.

Once I have successfully upgraded 3 hosts, I will consider this a success, and will fold in the upgrade to the larger operation described in T309720 .

Related Objects
Search...

Event Timeline

bking created this task.Jun 3 2022, 1:58 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 3 2022, 1:58 PM
bking added a comment.Jun 3 2022, 2:13 PM

Hosts chosen for upgrade:
elastic1048 (Row A)
elastic1065 (Row D)
elastic1080 (Row C)

Stashbot added a comment.Jun 3 2022, 2:14 PM

Mentioned in SAL (#wikimedia-operations) [2022-06-03T14:14:42Z] <inflatador> patching and restarting a few eqiad elastic hosts T309868

bking added a comment.Jun 3 2022, 2:51 PM

Commands run:

sudo depool
sudo apt-get install --only-upgrade openjdk-8-jre-headless
sudo systemctl restart elasticsearch_6*

(wait for cluster to get back to green, verify restarted host is in the list of cluster nodes)

sudo pool

bking added a comment.Jun 3 2022, 4:09 PM

All canary hosts successfully, rolled out the package to all eqiad hosts via cumin:
sudo cumin "A:stretch and P{elastic*.eqiad.wmnet}" 'sudo apt-get install -y --only-upgrade openjdk-8-jre-headless'

bking closed this task as Resolved.Jun 3 2022, 4:14 PM
bking added a parent task: T309720: Deploy S3 plugin on all Search team-managed Elastic hosts.
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL