Page MenuHomePhabricator
Create Task
Maniphest T351933

Bump istio and Cert Manager Docker images to Bullseye
Closed, ResolvedPublic3 Estimated Story Points
Actions

Description

Istio docker images are running on Buster, so it would be nice to upgrade to Bullseye.

Overall Istio steps:

  • Build new docker images and push them to the registry
  • Rollout the new images to staging envs and evaluate
  • Rollout to prod

Overall Cert Manager steps:

  • Build new docker images and push them to the registry
  • Rollout the new images to staging envs and evaluate
  • Rollout to prod

Details

Related Changes in Gerrit:
SubjectRepoBranchLines +/-
Revert "cert-manager: bump version in staging"operations/deployment-chartsmaster+0 -30
Bump cert-manager to 1.10.1-2 (bullseye)operations/deployment-chartsmaster+6 -4
cert-manager: bump version in stagingoperations/deployment-chartsmaster+30 -0
istio: upgrade Docker images to 1.15.7-2operations/deployment-chartsmaster+4 -4
cert-manager: upgrade to Bullseyeoperations/docker-images/production-imagesmaster+29 -4
istio: upgrade to Bullseyeoperations/docker-images/production-imagesmaster+29 -4
Customize query in gerrit

Event Timeline

elukey created this task.Nov 24 2023, 2:29 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptNov 24 2023, 2:29 PM
elukey added a comment.Nov 24 2023, 2:49 PM

Tried to build with golang 1.21 and got:

/go/pkg/mod/github.com/lucas-clemente/quic-go@v0.28.0/internal/qtls/go120.go:6:13: cannot use "The version of quic-go you're using can't be built on Go 1.20 yet. For more details, please see https://github.com/lucas-clemente/quic-go/wiki/quic-go-and-Go-versions."

Seems consistent with https://github.com/istio/istio/issues/45591

At this point, we may just upgrade to bullseye keeping 1.19 and start thinking about an upgrade :D

gerritbot added a comment.Nov 24 2023, 3:01 PM

Change 977214 had a related patch set uploaded (by Elukey; author: Elukey):

[operations/docker-images/production-images@master] istio: upgrade to Bullseye

https://gerrit.wikimedia.org/r/977214

gerritbot added a project: Patch-For-Review.Nov 24 2023, 3:01 PM
gerritbot added a comment.Nov 24 2023, 3:34 PM

Change 977220 had a related patch set uploaded (by Elukey; author: Elukey):

[operations/docker-images/production-images@master] cert-manager: upgrade to Bullseye

https://gerrit.wikimedia.org/r/977220

calbon triaged this task as Medium priority.Nov 28 2023, 3:54 PM
calbon set the point value for this task to 3.
gerritbot added a comment.Nov 29 2023, 3:06 PM

Change 977214 merged by Elukey:

[operations/docker-images/production-images@master] istio: upgrade to Bullseye

https://gerrit.wikimedia.org/r/977214

gerritbot added a comment.Nov 29 2023, 3:06 PM

Change 977220 merged by Elukey:

[operations/docker-images/production-images@master] cert-manager: upgrade to Bullseye

https://gerrit.wikimedia.org/r/977220

Maintenance_bot removed a project: Patch-For-Review.Nov 29 2023, 3:10 PM
gerritbot added a comment.Nov 29 2023, 4:57 PM

Change 978637 had a related patch set uploaded (by Elukey; author: Elukey):

[operations/deployment-charts@master] istio: upgrade Docker images to 1.15.7-2

https://gerrit.wikimedia.org/r/978637

gerritbot added a project: Patch-For-Review.Nov 29 2023, 4:57 PM
gerritbot added a comment.Nov 29 2023, 5:23 PM

Change 978640 had a related patch set uploaded (by Elukey; author: Elukey):

[operations/deployment-charts@master] cert-manager: bump appVersion

https://gerrit.wikimedia.org/r/978640

gerritbot added a comment.Nov 30 2023, 10:56 AM

Change 978637 merged by Elukey:

[operations/deployment-charts@master] istio: upgrade Docker images to 1.15.7-2

https://gerrit.wikimedia.org/r/978637

Stashbot added a comment.Dec 4 2023, 8:43 AM

Mentioned in SAL (#wikimedia-operations) [2023-12-04T08:43:00Z] <elukey> upgrade istio (buster -> bullseye) on dse-k8s-eqiad - T351933

Stashbot added a comment.Dec 4 2023, 8:48 AM

Mentioned in SAL (#wikimedia-operations) [2023-12-04T08:48:09Z] <elukey> upgrade istio (buster -> bullseye) on aux-k8s-eqiad - T351933

Stashbot added a comment.Dec 4 2023, 8:58 AM

Mentioned in SAL (#wikimedia-operations) [2023-12-04T08:58:40Z] <elukey> upgrade istio (buster -> bullseye) on ml-serve-eqiad - T351933

elukey updated the task description. (Show Details)Dec 4 2023, 9:35 AM
Stashbot added a comment.Dec 4 2023, 9:36 AM

Mentioned in SAL (#wikimedia-operations) [2023-12-04T09:36:14Z] <elukey> upgrade istio (buster -> bullseye) on ml-serve-codfw - T351933

Stashbot added a comment.Dec 4 2023, 10:28 AM

Mentioned in SAL (#wikimedia-operations) [2023-12-04T10:28:22Z] <jayme> pgrade istio (buster -> bullseye) on wikikube eqiad - T351933

Stashbot added a comment.Dec 4 2023, 10:32 AM

Mentioned in SAL (#wikimedia-operations) [2023-12-04T10:32:57Z] <jayme> upgrade istio (buster -> bullseye) on wikikube codfw - T351933

gerritbot added a comment.Dec 4 2023, 11:35 AM

Change 978640 merged by Elukey:

[operations/deployment-charts@master] cert-manager: bump version in staging

https://gerrit.wikimedia.org/r/978640

Maintenance_bot removed a project: Patch-For-Review.Dec 4 2023, 12:10 PM
elukey renamed this task from Bump istio Docker images to Bookworm to Bump istio and Cert Manager Docker images to Bullseye.Dec 4 2023, 2:41 PM
elukey updated the task description. (Show Details)
elukey added a comment.Dec 5 2023, 2:21 PM

Cert Manager deployed in staging envs, the plan is to leave it running for 2/3 days to see new certs issued. Once done, we can rollout to prod and close.

gerritbot added a comment.Dec 11 2023, 2:51 PM

Change 982100 had a related patch set uploaded (by JMeybohm; author: JMeybohm):

[operations/deployment-charts@master] Bump cert-manager to 1.10.1-2 (bullseye)

https://gerrit.wikimedia.org/r/982100

gerritbot added a project: Patch-For-Review.Dec 11 2023, 2:51 PM

Change 981735 had a related patch set uploaded (by JMeybohm; author: JMeybohm):

[operations/deployment-charts@master] Revert "cert-manager: bump version in staging"

https://gerrit.wikimedia.org/r/981735

gerritbot added a comment.Dec 11 2023, 3:27 PM

Change 982100 merged by jenkins-bot:

[operations/deployment-charts@master] Bump cert-manager to 1.10.1-2 (bullseye)

https://gerrit.wikimedia.org/r/982100

gerritbot added a comment.Dec 11 2023, 3:52 PM

Change 981735 merged by jenkins-bot:

[operations/deployment-charts@master] Revert "cert-manager: bump version in staging"

https://gerrit.wikimedia.org/r/981735

Maintenance_bot removed a project: Patch-For-Review.Dec 11 2023, 4:11 PM
elukey closed this task as Resolved.Dec 12 2023, 3:23 PM
elukey claimed this task.
elukey moved this task from Unsorted to 2023-2024 Q3 Done on the Machine-Learning-Team board.Dec 12 2023, 3:28 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits