Page MenuHomePhabricator
Create Task
Maniphest T325178

Add ingress to aux-k8s
Closed, ResolvedPublic
Actions

Description

In order to easily deploy services to aux-k8s without needing additional IPs, it makes sense to put the services behind ingress.

istio is already deployed, left to do:

  • Reserve an IP in eqiad for aux-k8s-ingress : 10.2.2.78/32
  • Configure an aux-k8s-ingress service like k8s-ingress-staging, only in eqiad
  • Test ingress

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
service::catalog: Move k8s-ingress-aux to productionoperations/puppetproduction+1 -1
service::catalog: Move k8s-ingress-aux to lvs_setupoperations/puppetproduction+1 -1
aux: explicitly disable istio injection on namespacesoperations/deployment-chartsmaster+8 -0
conftool-data: Add aux-k8s-workers to conftooloperations/puppetproduction+2 -0
aux_k8s::worker: Include P::lvs::realserveroperations/puppetproduction+1 -1
service::catalog: Add aux-k8s-ingressoperations/puppetproduction+43 -1
wmnet: Add aux-k8s-ingress.svc.eqiad.wmnetoperations/dnsmaster+2 -0
Customize query in gerrit

Related Objects
Search...

Event Timeline

Clement_Goubert created this task.Dec 14 2022, 3:23 PM
Clement_Goubert changed the task status from Open to In Progress.
Clement_Goubert triaged this task as Medium priority.
Clement_Goubert added a project: serviceops-deprecated.
Clement_Goubert moved this task from Incoming 🐫 to Doing 😎 on the serviceops-deprecated board.
Clement_Goubert moved this task from Inbox to Prioritized on the Observability-Tracing board.
Clement_Goubert updated the task description. (Show Details)Dec 14 2022, 3:33 PM
gerritbot added a comment.Dec 14 2022, 3:40 PM

Change 868100 had a related patch set uploaded (by Clément Goubert; author: Clément Goubert):

[operations/dns@master] wmnet: Add aux-k8s-ingress.svc.eqiad.wmnet

https://gerrit.wikimedia.org/r/868100

gerritbot added a project: Patch-For-Review.Dec 14 2022, 3:40 PM
gerritbot added a comment.Dec 14 2022, 3:58 PM

Change 868101 had a related patch set uploaded (by Clément Goubert; author: Clément Goubert):

[operations/puppet@production] service::catalog: Add aux-k8s-ingress

https://gerrit.wikimedia.org/r/868101

gerritbot added a comment.Dec 14 2022, 5:06 PM

Change 868100 merged by Clément Goubert:

[operations/dns@master] wmnet: Add aux-k8s-ingress.svc.eqiad.wmnet

https://gerrit.wikimedia.org/r/868100

gerritbot added a comment.Jan 11 2023, 10:39 AM

Change 868101 merged by Clément Goubert:

[operations/puppet@production] service::catalog: Add aux-k8s-ingress

https://gerrit.wikimedia.org/r/868101

gerritbot added a comment.Jan 11 2023, 11:05 AM

Change 878872 had a related patch set uploaded (by Clément Goubert; author: Clément Goubert):

[operations/puppet@production] aux_k8s::worker: Include P::lvs::realserver

https://gerrit.wikimedia.org/r/878872

gerritbot added a comment.Jan 11 2023, 11:08 AM

Change 878872 merged by Clément Goubert:

[operations/puppet@production] aux_k8s::worker: Include P::lvs::realserver

https://gerrit.wikimedia.org/r/878872

gerritbot added a comment.Jan 11 2023, 11:14 AM

Change 878874 had a related patch set uploaded (by Clément Goubert; author: Clément Goubert):

[operations/puppet@production] conftool-data: Add aux-k8s-workers to conftool

https://gerrit.wikimedia.org/r/878874

gerritbot added a comment.Jan 11 2023, 11:17 AM

Change 878874 merged by Clément Goubert:

[operations/puppet@production] conftool-data: Add aux-k8s-workers to conftool

https://gerrit.wikimedia.org/r/878874

Maintenance_bot removed a project: Patch-For-Review.Jan 11 2023, 11:31 AM
Clement_Goubert changed the status of subtask T327756: Rename aux-k8s-ingress service to k8s-ingress-aux from Open to In Progress.Jan 25 2023, 11:25 AM
Clement_Goubert closed subtask T327756: Rename aux-k8s-ingress service to k8s-ingress-aux as Resolved.Jan 26 2023, 1:14 PM
Clement_Goubert updated the task description. (Show Details)
gerritbot added a comment.Mar 9 2023, 10:46 PM

Change 896188 had a related patch set uploaded (by JHathaway; author: JHathaway):

[operations/deployment-charts@master] aux: explicitly disable istio injection on namespaces

https://gerrit.wikimedia.org/r/896188

gerritbot added a project: Patch-For-Review.Mar 9 2023, 10:46 PM
gerritbot added a comment.Mar 9 2023, 10:55 PM

Change 896188 merged by JHathaway:

[operations/deployment-charts@master] aux: explicitly disable istio injection on namespaces

https://gerrit.wikimedia.org/r/896188

Maintenance_bot removed a project: Patch-For-Review.Mar 9 2023, 11:11 PM
• joanna_borun subscribed.Jul 21 2023, 2:13 PM
fgiunchedi mentioned this in T344253: jaeger is configured to receive traces from production.Aug 15 2023, 2:33 PM
JMeybohm claimed this task.Aug 31 2023, 11:51 AM
gerritbot added a comment.Aug 31 2023, 11:53 AM

Change 954003 had a related patch set uploaded (by JMeybohm; author: JMeybohm):

[operations/puppet@production] service::catalog: Move k8s-ingress-aux to lvs_setuo

https://gerrit.wikimedia.org/r/954003

gerritbot added a project: Patch-For-Review.Aug 31 2023, 11:53 AM
gerritbot added a comment.Aug 31 2023, 12:21 PM

Change 954003 merged by JMeybohm:

[operations/puppet@production] service::catalog: Move k8s-ingress-aux to lvs_setup

https://gerrit.wikimedia.org/r/954003

Stashbot added a comment.Aug 31 2023, 12:25 PM

Mentioned in SAL (#wikimedia-operations) [2023-08-31T12:25:21Z] <jayme> restarting pybal on lvs1020 - T325178

Stashbot added a comment.Aug 31 2023, 12:27 PM

Mentioned in SAL (#wikimedia-operations) [2023-08-31T12:27:54Z] <jayme> restarting pybal on lvs1019 - T325178

Maintenance_bot removed a project: Patch-For-Review.Aug 31 2023, 12:30 PM
gerritbot added a comment.Aug 31 2023, 12:33 PM

Change 954011 had a related patch set uploaded (by JMeybohm; author: JMeybohm):

[operations/puppet@production] service::catalog: Move k8s-ingress-aux to production

https://gerrit.wikimedia.org/r/954011

gerritbot added a project: Patch-For-Review.Aug 31 2023, 12:33 PM
gerritbot added a comment.Aug 31 2023, 12:37 PM

Change 954011 merged by JMeybohm:

[operations/puppet@production] service::catalog: Move k8s-ingress-aux to production

https://gerrit.wikimedia.org/r/954011

JMeybohm updated the task description. (Show Details)Aug 31 2023, 12:45 PM
JMeybohm closed this task as Resolved.Aug 31 2023, 12:48 PM

Did the LVS dance, curl -4 --resolve jaeger-query.discovery.wmnet:30443:$(dig +short k8s-ingress-aux.svc.eqiad.wmnet) https://jaeger-query.discovery.wmnet:30443 does now work as expected and probes come through.

I did not set the service paging!

Maintenance_bot removed a project: Patch-For-Review.Aug 31 2023, 1:11 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits