Details
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Open | None | T316682 [cloudweb] Improve the alerts coming from the LVS setup | |||
Stalled | BCornwall | T236065 Remove unused plain HTTP services from LVS | |||
Open | None | T317463 Rename references of labweb to cloudweb |
Event Timeline
Change 831173 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] hieradata: labweb: update lvs pool to reference the ssl service
Change 831174 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] service: remove plaintext labweb service (I)
Change 831175 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] service: remove plaintext labweb service (II)
Change 831176 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] service: remove plaintext labweb service (III)
Change 831174 merged by Andrew Bogott:
[operations/puppet@production] service: remove plaintext labweb service (I)
Change 831175 merged by Andrew Bogott:
[operations/puppet@production] service: remove plaintext labweb service (II)
Change 831176 merged by Andrew Bogott:
[operations/puppet@production] service: remove plaintext labweb service (III)
Change 831173 merged by Andrew Bogott:
[operations/puppet@production] hieradata: labweb: update lvs pool to reference the ssl service
I merged the above patches and briefly triggered a couple of alerts like "PyBal IPVS diff check on lvs1019 is CRITICAL: CRITICAL: Services known to PyBal but not to IPVS: set([10.2.2.40:80])"
I /think/ that I we do not need all the steps on https://wikitech.wikimedia.org/wiki/LVS#Remove_a_load_balanced_service since this was a rename and not a removal, but I'd appreciate a glance from someone in Traffic to confirm that I didn't leave things in an inconsistent state.
I would think that this needs to be followed since it's technically a new service even it's a rename. For instance, the dns repo still has "labweb" in templates/wmnet.
Also, Puppet is still referencing labweb and not cloudweb; Should that be changed?
Yeah, the above patches were just getting rid of the non-TLS endpoint so we have one service to rename instead of two. The actual rename still needs to be done.
Change 941458 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] conftool-data: Duplicate labweb service as cloudweb
Change 941459 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] service: update labweb/cloudweb conftool pool name
Change 941460 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] conftool-data: drop labweb pool
Change 941458 merged by Majavah:
[operations/puppet@production] conftool-data: Duplicate labweb service as cloudweb
taavi@cumin1001 ~ $ confctl select "cluster=(lab|cloud)web" get {"cloudweb1003.wikimedia.org": {"weight": 10, "pooled": "yes"}, "tags": "dc=eqiad,cluster=labweb,service=labweb-ssl"} {"cloudweb1004.wikimedia.org": {"weight": 10, "pooled": "yes"}, "tags": "dc=eqiad,cluster=labweb,service=labweb-ssl"} {"cloudweb1003.wikimedia.org": {"weight": 10, "pooled": "yes"}, "tags": "dc=eqiad,cluster=cloudweb,service=cloudweb-ssl"} {"cloudweb1004.wikimedia.org": {"weight": 10, "pooled": "yes"}, "tags": "dc=eqiad,cluster=cloudweb,service=cloudweb-ssl"}
Change 1012629 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] hieradata: use cfssl for cloudweb in eqiad