Page MenuHomePhabricator
Create Task
Maniphest T357749

Move CAS to Java 17
Closed, ResolvedPublic
Actions

Description

Bookworm brings Java 17 as the default. Since Bullseye also provides Java 17 and our CAS version should already support Java 17, we can first move the current production instances to Java 17, so that there's less moving parts for the OS update.

Details

Show related patches Customize query in gerrit

Related Objects
Search...

StatusSubtypeAssignedTask
 ResolvedSLyngshede-WMFT357748 Migrate CAS to Bookworm
 ResolvedSLyngshede-WMFT357749 Move CAS to Java 17

Event Timeline

MoritzMuehlenhoff created this task.Feb 16 2024, 8:04 AM
MoritzMuehlenhoff triaged this task as Medium priority.Feb 19 2024, 3:18 PM
gerritbot added a comment.Feb 20 2024, 9:21 AM

Change 1005031 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] P:idp Switch idp test host to Java 17.

https://gerrit.wikimedia.org/r/1005031

gerritbot added a project: Patch-For-Review.Feb 20 2024, 9:21 AM
gerritbot added a comment.Feb 20 2024, 9:42 AM

Change 1005031 merged by Slyngshede:

[operations/puppet@production] P:idp Switch idp test host to Java 17.

https://gerrit.wikimedia.org/r/1005031

gerritbot added a comment.Feb 20 2024, 10:19 AM

Change 1005042 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/cas-overlay-template@master] cas: Prefer Java 17 over 11

https://gerrit.wikimedia.org/r/1005042

gerritbot added a comment.Feb 20 2024, 10:32 AM

Change 1005042 merged by Muehlenhoff:

[operations/software/cas-overlay-template@master] cas: Prefer Java 17 over 11

https://gerrit.wikimedia.org/r/1005042

gerritbot added a comment.Feb 20 2024, 11:06 AM

Change 1005050 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/dns@master] Move idp-test.w.o to 2002 (using Java 17)

https://gerrit.wikimedia.org/r/1005050

gerritbot added a comment.Feb 20 2024, 11:23 AM

Change 1005050 merged by Muehlenhoff:

[operations/dns@master] Move idp-test.w.o to 2002 (using Java 17)

https://gerrit.wikimedia.org/r/1005050

Maintenance_bot removed a project: Patch-For-Review.Feb 20 2024, 11:31 AM
gerritbot added a comment.Feb 20 2024, 1:22 PM

Change 1005086 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] R:idp_test Upgrade IDP test to Java 17

https://gerrit.wikimedia.org/r/1005086

gerritbot added a project: Patch-For-Review.Feb 20 2024, 1:22 PM
gerritbot added a comment.Feb 20 2024, 1:32 PM

Change 1005086 merged by Slyngshede:

[operations/puppet@production] R:idp_test Upgrade IDP test to Java 17

https://gerrit.wikimedia.org/r/1005086

gerritbot added a comment.Feb 20 2024, 2:25 PM

Change 1005094 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] P:idp Force Tomcat to use the default Java installation.

https://gerrit.wikimedia.org/r/1005094

gerritbot added a comment.Feb 20 2024, 2:26 PM

Change 1005095 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Add puppetised java.security config file for hardened TLS settings

https://gerrit.wikimedia.org/r/1005095

Stashbot added a comment.Feb 21 2024, 2:08 PM

Mentioned in SAL (#wikimedia-cloud) [2024-02-21T14:08:15Z] <taavi> update cloudinfra-idp-1 to java 17 to fix CAS class loading errors on idp.wmcloud.org T357749

gerritbot added a comment.Feb 22 2024, 10:29 AM

Change 1005095 merged by Muehlenhoff:

[operations/puppet@production] Add puppetised java.security config file for hardened TLS settings

https://gerrit.wikimedia.org/r/1005095

gerritbot added a comment.Feb 26 2024, 7:48 AM

Change 1005094 merged by Slyngshede:

[operations/puppet@production] P:idp Force Tomcat to use the default Java installation.

https://gerrit.wikimedia.org/r/1005094

SLyngshede-WMF added a comment.Feb 26 2024, 8:16 AM

Upgrade to Java 17 on test hosts have been completed.

gerritbot added a comment.Feb 26 2024, 8:21 AM

Change 1006474 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/puppet@production] P:idp switch standby host to Java 17.

https://gerrit.wikimedia.org/r/1006474

gerritbot added a comment.Feb 26 2024, 8:27 AM

Change 1006474 merged by Slyngshede:

[operations/puppet@production] P:idp switch standby host to Java 17.

https://gerrit.wikimedia.org/r/1006474

Maintenance_bot removed a project: Patch-For-Review.Feb 26 2024, 8:30 AM
gerritbot added a comment.Feb 26 2024, 8:48 AM

Change 1006478 had a related patch set uploaded (by Slyngshede; author: Slyngshede):

[operations/dns@master] IDP switch-over.

https://gerrit.wikimedia.org/r/1006478

gerritbot added a project: Patch-For-Review.Feb 26 2024, 8:48 AM
gerritbot added a comment.Feb 26 2024, 8:59 AM

Change 1006478 merged by Slyngshede:

[operations/dns@master] IDP switch-over.

https://gerrit.wikimedia.org/r/1006478

SLyngshede-WMF added a comment.Feb 26 2024, 9:04 AM

idp2002 is now running Java 17 and is currently the active IDP host.
We'll give it a few days before upgrading idp1002 as well.

SLyngshede-WMF claimed this task.Feb 26 2024, 9:05 AM
Maintenance_bot removed a project: Patch-For-Review.Feb 26 2024, 9:30 AM
gerritbot added a comment.Feb 28 2024, 8:14 AM

Change 1007259 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/puppet@production] Revert to using hardened TLS java.security settins for idp-test

https://gerrit.wikimedia.org/r/1007259

gerritbot added a project: Patch-For-Review.Feb 28 2024, 8:14 AM
gerritbot added a comment.Feb 28 2024, 10:35 AM

Change 1007302 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/cas-overlay-template@master] Rebuild cas for Bookworm, and depend on tomcat 10 now

https://gerrit.wikimedia.org/r/1007302

gerritbot added a comment.Feb 28 2024, 11:04 AM

Change 1007302 merged by Muehlenhoff:

[operations/software/cas-overlay-template@master] Rebuild cas for Bookworm, and depend on tomcat 10 now

https://gerrit.wikimedia.org/r/1007302

SLyngshede-WMF closed this task as Resolved.Feb 29 2024, 2:30 PM
gerritbot added a comment.Mar 4 2024, 8:35 AM

Change 1007259 merged by Muehlenhoff:

[operations/puppet@production] Revert to using hardened TLS java.security settins for idp-test

https://gerrit.wikimedia.org/r/1007259

Maintenance_bot removed a project: Patch-For-Review.Mar 4 2024, 9:30 AM
gerritbot added a comment.Mar 18 2024, 2:51 PM

Change 1012394 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):

[operations/software/cas-overlay-template@master] cas-overlay: Revert Tomcat10-related changes

https://gerrit.wikimedia.org/r/1012394

gerritbot added a project: Patch-For-Review.Mar 18 2024, 2:51 PM
gerritbot added a comment.Mar 18 2024, 2:57 PM

Change 1012394 merged by Muehlenhoff:

[operations/software/cas-overlay-template@master] cas-overlay: Revert Tomcat10-related changes

https://gerrit.wikimedia.org/r/1012394

Maintenance_bot removed a project: Patch-For-Review.Mar 18 2024, 3:31 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits