Page MenuHomePhabricator

do not use :latest for toolforge infrastructure components
Closed, ResolvedPublic

Description

To prevent changes being applied unexpectedly on a pod restart, infrastructure components should use explicitly versioned tags which are then manually deployed to the cluster.

Event Timeline

Quick fixes aside, I think this could be tied into some more general workflow improvements. In my ideal world, the container build + push itself would be automated and only the image bump would need running commands manually.

Change 842351 had a related patch set uploaded (by Majavah; author: Majavah):

[operations/cookbooks@wmcs] toolforge: k8s: build images with explicit git version tags

https://gerrit.wikimedia.org/r/842351

Change 842351 merged by jenkins-bot:

[operations/cookbooks@wmcs] toolforge: k8s: build images with explicit git version tags

https://gerrit.wikimedia.org/r/842351

taavi claimed this task.