Page MenuHomePhabricator
Create Task
Maniphest T333732

Upgrade OpenSearch using upstream deb packages
Closed, ResolvedPublic
Actions

Description

Follow up from T313868: OpenSearch Security plugin packaging

Upgrading OpenSearch using upstream's deb packages will install the security plugin.

Requires plugins.security.disabled: true post-upgrade. This config cannot be pre-provisioned because without the security plugin installed, OpenSearch will fail to start.

Can be upgraded to use upstream packages whenever as there is no conflict as long as these plugins are removed on install:

  • securityDashboards
  • notificationDashboards
  • indexManagementDashboards

Details

Show related patches Customize query in gerrit

Related Objects
Search...

Event Timeline

colewhite created this task.Mar 31 2023, 11:45 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 31 2023, 11:45 PM
colewhite added a parent task: T213902: Implement sensitive logstash access control.Mar 31 2023, 11:45 PM
gerritbot added a comment.Apr 12 2023, 7:17 PM

Change 907838 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] opensearch_dashboards: add package provider

https://gerrit.wikimedia.org/r/907838

gerritbot added a project: Patch-For-Review.Apr 12 2023, 7:17 PM
gerritbot added a comment.Apr 17 2023, 9:27 PM

Change 907838 merged by Cwhite:

[operations/puppet@production] opensearch_dashboards: add package provider

https://gerrit.wikimedia.org/r/907838

Maintenance_bot removed a project: Patch-For-Review.Apr 17 2023, 9:29 PM
gerritbot added a comment.Apr 17 2023, 9:44 PM

Change 908884 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] profile: ensure several dashboards plugins are absent

https://gerrit.wikimedia.org/r/908884

gerritbot added a project: Patch-For-Review.Apr 17 2023, 9:45 PM
colewhite changed the task status from Open to In Progress.Apr 17 2023, 10:00 PM
colewhite claimed this task.
colewhite triaged this task as Medium priority.
gerritbot added a comment.Apr 26 2023, 8:32 PM

Change 908884 merged by Cwhite:

[operations/puppet@production] profile: ensure several dashboards plugins are absent

https://gerrit.wikimedia.org/r/908884

Maintenance_bot removed a project: Patch-For-Review.Apr 26 2023, 9:10 PM
gerritbot added a comment.Apr 27 2023, 11:06 PM

Change 912390 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] opensearch: add disable_security_plugin option

https://gerrit.wikimedia.org/r/912390

gerritbot added a project: Patch-For-Review.Apr 27 2023, 11:06 PM
gerritbot added a comment.Apr 27 2023, 11:13 PM

Change 912391 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] hiera: disable security plugin on beta-logs

https://gerrit.wikimedia.org/r/912391

gerritbot added a comment.Apr 28 2023, 3:39 PM

Change 912390 merged by Cwhite:

[operations/puppet@production] opensearch: add disable_security_plugin option

https://gerrit.wikimedia.org/r/912390

gerritbot added a comment.May 31 2023, 7:07 PM

Change 912391 merged by Cwhite:

[operations/puppet@production] hiera: disable security plugin on beta-logs

https://gerrit.wikimedia.org/r/912391

Maintenance_bot removed a project: Patch-For-Review.May 31 2023, 7:11 PM
gerritbot added a comment.May 31 2023, 7:11 PM

Change 924143 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] opensearch: add disable_security_plugin to instanceparams

https://gerrit.wikimedia.org/r/924143

gerritbot added a project: Patch-For-Review.May 31 2023, 7:12 PM

Change 924143 merged by Cwhite:

[operations/puppet@production] opensearch: add disable_security_plugin to instanceparams

https://gerrit.wikimedia.org/r/924143

Maintenance_bot removed a project: Patch-For-Review.May 31 2023, 7:30 PM
gerritbot added a comment.Jun 1 2023, 4:35 PM

Change 925114 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] opensearch_dashboards: remove alerting and observability plugins

https://gerrit.wikimedia.org/r/925114

gerritbot added a project: Patch-For-Review.Jun 1 2023, 4:35 PM
gerritbot added a comment.Jun 5 2023, 10:55 PM

Change 925114 merged by Cwhite:

[operations/puppet@production] opensearch_dashboards: remove alerting and observability plugins

https://gerrit.wikimedia.org/r/925114

Maintenance_bot removed a project: Patch-For-Review.Jun 5 2023, 11:11 PM
gerritbot added a comment.Jun 6 2023, 8:08 PM

Change 927769 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] opensearch: clean up hiera configs

https://gerrit.wikimedia.org/r/927769

gerritbot added a project: Patch-For-Review.Jun 6 2023, 8:08 PM
gerritbot added a comment.Jun 6 2023, 8:46 PM

Change 927771 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] opensearch: disable security plugin on codfw

https://gerrit.wikimedia.org/r/927771

gerritbot added a comment.Jun 6 2023, 8:46 PM

Change 927772 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] opensearch: disable security plugin for both clusters

https://gerrit.wikimedia.org/r/927772

gerritbot added a comment.Jun 7 2023, 4:19 PM

Change 927769 merged by Cwhite:

[operations/puppet@production] opensearch: clean up hiera configs

https://gerrit.wikimedia.org/r/927769

gerritbot added a comment.Jun 9 2023, 7:45 PM

Change 928906 had a related patch set uploaded (by Cwhite; author: Cwhite):

[releng/phatality@master] bump dashboards version to 2.7.0

https://gerrit.wikimedia.org/r/928906

gerritbot added a comment.Jun 13 2023, 8:35 PM

Change 928906 merged by jenkins-bot:

[releng/phatality@master] bump dashboards version to 2.7.0

https://gerrit.wikimedia.org/r/928906

gerritbot added a comment.Jun 20 2023, 9:35 PM

Change 927771 merged by Cwhite:

[operations/puppet@production] opensearch: disable security plugin on codfw

https://gerrit.wikimedia.org/r/927771

gerritbot added a comment.Jun 21 2023, 8:11 PM

Change 931911 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] hiera: map logstash.wm.o to kibana7.codfw

https://gerrit.wikimedia.org/r/931911

gerritbot added a comment.Jun 22 2023, 4:10 PM

Change 931911 merged by Cwhite:

[operations/puppet@production] hiera: map logstash.wm.o to kibana7.codfw

https://gerrit.wikimedia.org/r/931911

gerritbot added a comment.Jun 28 2023, 9:44 PM

Change 927772 merged by Cwhite:

[operations/puppet@production] opensearch: disable security plugin for both clusters

https://gerrit.wikimedia.org/r/927772

Maintenance_bot removed a project: Patch-For-Review.Jun 28 2023, 10:10 PM
gerritbot added a comment.Jul 6 2023, 2:49 AM

Change 935502 had a related patch set uploaded (by Cwhite; author: Cwhite):

[operations/puppet@production] hiera: map logstash.wm.o to kibana7.eqiad

https://gerrit.wikimedia.org/r/935502

gerritbot added a project: Patch-For-Review.Jul 6 2023, 2:49 AM
gerritbot added a comment.Jul 11 2023, 4:07 PM

Change 935502 merged by Cwhite:

[operations/puppet@production] hiera: map logstash.wm.o to kibana7.eqiad

https://gerrit.wikimedia.org/r/935502

Maintenance_bot removed a project: Patch-For-Review.Jul 11 2023, 4:11 PM
colewhite closed this task as Resolved.Jul 11 2023, 5:14 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL