Page MenuHomePhabricator

Import pause container image >= 3.5 (k8s 1.23 dependency)
Closed, ResolvedPublic

Description

As stated in the parent task, we'd need to have the pause container at version 3.5+ for k8s 1.23. It is not clear how we have imported the current version on our registry, so we should probably add a specific config to production-images to be future proof.

Steps:

  • Review the CHANGELOG and decide what version is needed.
  • Add production-images build + pause image configuration.
  • Build and publish the new image to the Docker registry (the new version should be compatible with the current 1.16 clusters but verify this as well).

Event Timeline

Change 858345 had a related patch set uploaded (by Elukey; author: Elukey):

[operations/docker-images/production-images@master] Add the pause image

https://gerrit.wikimedia.org/r/858345

We currently have only pause:latest pushed on our registry, so we should:

  1. Push a new tag from the build server
docker pull docker-registry.discovery.wmnet/pause:latest
docker tag docker-registry.discovery.wmnet/pause:latest docker-registry.discovery.wmnet/pause:old
  1. Set the tag in puppet (profile::kubernetes::infra_pod) so that the current image is configured and "locked".
  1. Build and push the new 3.6-1 image/tag, and test it on some staging cluster.

Mentioned in SAL (#wikimedia-operations) [2022-11-18T09:16:49Z] <elukey> push the 'k8s_116' tag for docker-registry.discovery.wmnet/pause - T322920

Change 858546 had a related patch set uploaded (by Elukey; author: Elukey):

[operations/puppet@production] k8s: pin the pause container image to the k8s_116 tag on staging

https://gerrit.wikimedia.org/r/858546

Change 858546 merged by Elukey:

[operations/puppet@production] k8s: pin the pause container image to the k8s_116 tag on staging

https://gerrit.wikimedia.org/r/858546

elukey@ml-staging2002:~$  sudo docker image ls | grep pause
docker-registry.discovery.wmnet/pause                                                                       k8s_116    f2d161a2bc52   5 years ago     747kB
docker-registry.discovery.wmnet/pause                                                                       latest     f2d161a2bc52   5 years ago     747kB

The k8s_116 tag was pulled down after killing a pod, I'll do more tests on staging but it looks fine :)

Next steps:

Change 858995 had a related patch set uploaded (by Elukey; author: Elukey):

[operations/puppet@production] profile::kubernetes::node: add k8s_116 tag to infrapod's default

https://gerrit.wikimedia.org/r/858995

Change 858995 merged by Elukey:

[operations/puppet@production] profile::kubernetes::node: add k8s_116 tag to infrapod's default

https://gerrit.wikimedia.org/r/858995

Change 858345 merged by Elukey:

[operations/docker-images/production-images@master] Add the pause image

https://gerrit.wikimedia.org/r/858345

The new image will be tested on Pontoon with Kubernetes 1.23. For the moment I am closing the task, let's reopen if anything pops up.