Page MenuHomePhabricator

Move CAS to Java 17
Closed, ResolvedPublic

Description

Bookworm brings Java 17 as the default. Since Bullseye also provides Java 17 and our CAS version should already support Java 17, we can first move the current production instances to Java 17, so that there's less moving parts for the OS update.

Related Objects

StatusSubtypeAssignedTask
ResolvedSLyngshede-WMF
ResolvedSLyngshede-WMF

Event Timeline

Change 1005031 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] P:idp Switch idp test host to Java 17.

https://gerrit.wikimedia.org/r/1005031

Change 1005031 merged by Slyngshede:

[operations/puppet@production] P:idp Switch idp test host to Java 17.

https://gerrit.wikimedia.org/r/1005031

Change 1005042 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/cas-overlay-template@master] cas: Prefer Java 17 over 11

https://gerrit.wikimedia.org/r/1005042

Change 1005042 merged by Muehlenhoff:

[operations/software/cas-overlay-template@master] cas: Prefer Java 17 over 11

https://gerrit.wikimedia.org/r/1005042

Change 1005050 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/dns@master] Move idp-test.w.o to 2002 (using Java 17)

https://gerrit.wikimedia.org/r/1005050

Change 1005050 merged by Muehlenhoff:

[operations/dns@master] Move idp-test.w.o to 2002 (using Java 17)

https://gerrit.wikimedia.org/r/1005050

Change 1005086 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] R:idp_test Upgrade IDP test to Java 17

https://gerrit.wikimedia.org/r/1005086

Change 1005086 merged by Slyngshede:

[operations/puppet@production] R:idp_test Upgrade IDP test to Java 17

https://gerrit.wikimedia.org/r/1005086

Change 1005094 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] P:idp Force Tomcat to use the default Java installation.

https://gerrit.wikimedia.org/r/1005094

Change 1005095 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add puppetised java.security config file for hardened TLS settings

https://gerrit.wikimedia.org/r/1005095

Mentioned in SAL (#wikimedia-cloud) [2024-02-21T14:08:15Z] <taavi> update cloudinfra-idp-1 to java 17 to fix CAS class loading errors on idp.wmcloud.org T357749

Change 1005095 merged by Muehlenhoff:

[operations/puppet@production] Add puppetised java.security config file for hardened TLS settings

https://gerrit.wikimedia.org/r/1005095

Change 1005094 merged by Slyngshede:

[operations/puppet@production] P:idp Force Tomcat to use the default Java installation.

https://gerrit.wikimedia.org/r/1005094

Upgrade to Java 17 on test hosts have been completed.

Change 1006474 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] P:idp switch standby host to Java 17.

https://gerrit.wikimedia.org/r/1006474

Change 1006474 merged by Slyngshede:

[operations/puppet@production] P:idp switch standby host to Java 17.

https://gerrit.wikimedia.org/r/1006474

Change 1006478 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/dns@master] IDP switch-over.

https://gerrit.wikimedia.org/r/1006478

Change 1006478 merged by Slyngshede:

[operations/dns@master] IDP switch-over.

https://gerrit.wikimedia.org/r/1006478

idp2002 is now running Java 17 and is currently the active IDP host.
We'll give it a few days before upgrading idp1002 as well.

Change 1007259 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Revert to using hardened TLS java.security settins for idp-test

https://gerrit.wikimedia.org/r/1007259

Change 1007302 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/cas-overlay-template@master] Rebuild cas for Bookworm, and depend on tomcat 10 now

https://gerrit.wikimedia.org/r/1007302

Change 1007302 merged by Muehlenhoff:

[operations/software/cas-overlay-template@master] Rebuild cas for Bookworm, and depend on tomcat 10 now

https://gerrit.wikimedia.org/r/1007302

Change 1007259 merged by Muehlenhoff:

[operations/puppet@production] Revert to using hardened TLS java.security settins for idp-test

https://gerrit.wikimedia.org/r/1007259

Change 1012394 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/cas-overlay-template@master] cas-overlay: Revert Tomcat10-related changes

https://gerrit.wikimedia.org/r/1012394

Change 1012394 merged by Muehlenhoff:

[operations/software/cas-overlay-template@master] cas-overlay: Revert Tomcat10-related changes

https://gerrit.wikimedia.org/r/1012394