Rebase & merge or re-cherry-pick 668701 on deployment-puppetmaster04
Closed, DeclinedPublic
Actions

Assigned To

Authored By

	TheresNoTime
	Aug 17 2022, 12:13 AM

Description

In T315350#8159977, @ori wrote:

https://gerrit.wikimedia.org/r/c/operations/puppet/+/668701 needs to be rebased and merged or re-cherry-picked on deployment-puppetmaster04. To get it to apply I had to manually resolve a conflict, and I'm not sure I did it correctly. So the actual diff on deployment-puppetmaster04 is not consistent with what's on Gerrit.

https://gerrit.wikimedia.org/r/c/operations/puppet/+/66870

Details

Related Changes in Gerrit:

Subject	Repo	Branch	Lines +/-
deployment-prep: use pki for etcd certificates in deployment prep	operations/puppet	production	+1 -0
profile::etcd::v3: use puppet certs for standalone cluster	operations/puppet	production	+36 -1
hieradata - cloud: add etcd CI to cloud pki instance	operations/puppet	production	+29 -0
cloud: add etcd CA to cloud pki infrastracture	operations/puppet	production	+1 -0

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		jbond	T315350 Beta cluster Error: 502, Next Hop Connection Failed
		Declined		jbond	T315395 Rebase & merge or re-cherry-pick 668701 on deployment-puppetmaster04

Event Timeline

TheresNoTime created this task.Aug 17 2022, 12:13 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptAug 17 2022, 12:13 AM

TheresNoTime added a parent task: T315350: Beta cluster Error: 502, Next Hop Connection Failed.Aug 17 2022, 12:13 AM

TheresNoTime claimed this task.Aug 17 2022, 1:01 AM

Change 668701 had a related patch set uploaded (by Samtar; author: Giuseppe Lavagetto):

[operations/puppet@production] profile::etcd::v3: use puppet certs for standalone cluster

https://gerrit.wikimedia.org/r/668701

gerritbot added a project: Patch-For-Review.Aug 17 2022, 1:05 AM

Change 824155 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] cloud: add etcd CA to cloud pki infrastracture

https://gerrit.wikimedia.org/r/824155

Change 824155 merged by Jbond:

[operations/puppet@production] cloud: add etcd CA to cloud pki infrastracture

https://gerrit.wikimedia.org/r/824155

jbond triaged this task as Medium priority.Aug 17 2022, 10:05 AM

jbond updated Other Assignee, added: jbond.

TheresNoTime reassigned this task from TheresNoTime to jbond.Aug 17 2022, 10:07 AM

TheresNoTime updated Other Assignee, removed: jbond.

Change 824156 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] hieradata - cloud: add etcd CI to cloud pki instance

https://gerrit.wikimedia.org/r/824156

Change 824156 merged by Jbond:

[operations/puppet@production] hieradata - cloud: add etcd CI to cloud pki instance

https://gerrit.wikimedia.org/r/824156

Change 824158 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] deployment-prep: use pki for etcd certificates in deployment prep

https://gerrit.wikimedia.org/r/824158

In T315395#8161054, @gerritbot wrote:

Change 824158 had a related patch set uploaded (by Jbond; author: jbond):

[operations/puppet@production] deployment-prep: use pki for etcd certificates in deployment prep

https://gerrit.wikimedia.org/r/824158

I think this should allow us to use the pki instance to generate theses certificates but it would be useful if someone familiar with etcd/deployment-prep could also look at this

Zabe mentioned this in T315350: Beta cluster Error: 502, Next Hop Connection Failed.Aug 17 2022, 1:12 PM

RhinosF1 added projects: Sustainability (Incident Followup), SRE-OnFire.Aug 17 2022, 1:28 PM

Restricted Application added a subscriber: RhinosF1. · View Herald TranscriptAug 17 2022, 1:28 PM

RhinosF1 moved this task from Backlog to Pending Review & Scorecard on the SRE-OnFire board.Aug 17 2022, 1:29 PM

Incident followup tags should be reserved for production issues.

I'm pretty sure this is not needed anymore after https://gerrit.wikimedia.org/r/plugins/gitiles/cloud/instance-puppet/+/134532d2430908a530e4cc46e830b26a423e488b.

Change 824158 abandoned by Jbond: