Upgrade Toolforge to Uwubernetes
Open, MediumPublic
Actions

Assigned To

None

Authored By

	taavi
	Thu, Apr 18, 10:59 AM

Description

, also known as Kubernetes 1.30. https://kubernetes.io/blog/2024/04/17/kubernetes-v1-30-release/

Related Objects
Search...

Status	Subtype	Assigned	Task
Open		None	T362869 Upgrade Toolforge to Uwubernetes
Open		None	T362868 [infra,k8s] pgrade Toolforge Kubernetes to version 1.29
Open		None	T362867 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.28
Open		None	T359641 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.27
Open		None	T327025 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.26
Open		None	T316107 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.25
Resolved		aborrero	T307651 Upgrade Toolforge Kubernetes to version 1.24
Resolved		taavi	T298005 Upgrade Toolforge Kubernetes to version 1.23
Resolved		taavi	T286856 Upgrade Toolforge Kubernetes to latest 1.22
Resolved		taavi	T280436 Migrate Toolforge admission webhooks to use the admissionregistration.k8s.io/v1 API
Resolved		taavi	T286857 Update maintain-kubeusers to certificates/v1 api
Resolved		• Bstorm	T289390 Certificate generation is broken in toolsbeta
Resolved		taavi	T292238 Figure out certificate generation for admission webhooks before we lose the certificates/v1beta1
Resolved		taavi	T329453 Deploy cert-manager to Toolforge
Resolved		taavi	T292706 tools-webservice should use ingress v1
Resolved		taavi	T292771 upgrade to ingress-nginx 1.0
Resolved		rook	T291589 Upgrade paws jupyterhub
Resolved		taavi	T295190 Upgrade all third-party Toolforge Kubernetes components to versions supporting Kubernetes 1.22
Resolved		taavi	T306296 Ensure k8s-status tool will work on Kubernetes 1.22
Resolved		rook	T308172 Upgrade PAWS to Kubernetes 1.21
Resolved		taavi	T282942 Upgrade Toolforge Kubernetes to latest 1.21
Resolved		rook	T280402 Upgrade Toolforge Kubernetes to latest 1.20
Resolved		taavi	T280340 Upgrade Toolforge Kubernetes to latest 1.19
Resolved		taavi	T280299 Upgrade Toolforge Kubernetes to latest 1.18
Resolved		taavi	T280300 Validate that maintain-kubeusers works with k8s 1.18
Resolved		taavi	T280301 Refresh certs that are not controlled by kubeadm
Resolved		taavi	T280302 Upgrade PAWS Kubernetes to the latest 1.18 release
Resolved		taavi	T264221 Upgrade the nginx ingress controller in Toolforge (and likely PAWS)
Resolved		• Bstorm	T282087 Support cinder or expanded ephemeral disk worker nodes on Toolforge Kubernetes
Resolved		taavi	T284353 Fix prometheus monitoring for Toolforge Ingress
Resolved		taavi	T280342 Upgrade Calico to 3.18
Resolved		taavi	T280360 Update ingress-admission-controller to support Ingress from networking.k8s.io/v1
Resolved		taavi	T279106 Establish replacement for PodPresets in Toolforge Kubernetes
Resolved		• Bstorm	T292672 Issue creating pods after migration away from PodPresets
Declined		None	T290531 Weird issue with the wmcs-k8s-node-upgrade.py script
Resolved		rook	T291976 Upgrade toolsbeta to k8s 1.20
Resolved		taavi	T292698 Upgrade calico to 3.21
Resolved	BUG REPORT	None	T308189 Toolforge jobs stopped getting scheduled around the same time as the Toolforge k8s cluster upgrade
Open		None	T308203 Create an alert for K8s cronjobs
Resolved		taavi	T308204 toolforge-jobs should set startingDeadlineSeconds by default
Resolved		taavi	T308205 Re-enable CronJobControllerV2
Open		None	T308381 toolforge: Scrape Kubernetes controller-manager and apiserver metrics into Prometheus
Resolved		rook	T308274 test PAWS in k8s 1.21.8
Resolved		taavi	T329869 Remove tool RBAC rules for APIs removed in Kubernetes 1.22
Resolved	BUG REPORT	taavi	T331572 maintain-kubeusers container in CrashLoopBackoff preventing new tool creation after 'user-maintainer' ClusterRole changes
Resolved		taavi	T331619 toolforge: rbac: change existing roles to reference PSP in the policy group
Resolved		taavi	T334380 Toolforge k8s: kube-scheduler permissions errors
Resolved		taavi	T334382 Toolforge k8s: kube-controller-manager permission errors
Resolved		taavi	T329677 Upgrade Calico to 3.24
Resolved		taavi	T284656 Toolforge k8s: Migrate workers to Containerd and Bookworm
Resolved		taavi	T349795 Upgrade cadvisor
Resolved		taavi	T350227 toolforge prometheus servers OOMing
Resolved		taavi	T357901 Request increased server-group-members quota for tools
Resolved		aborrero	T358476 toolforge k8s: some static pods needs manual restart
Stalled		dcaro	T314665 Toolforge: Replace all bastion with grid-less bookworm based bastion hosts
Stalled		taavi	T314664 [infra] Decommission the Grid Engine infrastructure
Resolved		komla	T313405 Migrate remaining tools off Gridengine
Declined		None	T316124 Make Grid Engine tooling emit deprecation warnings
Resolved		taavi	T329619 Toolforge: decide what to do with tools that have 'stretch' in their service manifests
Resolved		Andrew	T353351 Provide tools for disabling the grid for specific tools
Resolved		Andrew	T353642 Relocate disable-tool-archive-dbs.service
Resolved		taavi	T358333 Remove toolschecker grid engine checks
Resolved		taavi	T359934 [infra] Archive grid engine related infrastructure tools
Resolved		taavi	T359935 [infra] Archive grid engine related Gerrit repositories
Resolved		aborrero	T359619 toolforge: prepare deb packages for k8s 1.24
Resolved		aborrero	T359620 toolforge: upgrade k8s etcd nodes to debian bookworm
Resolved		aborrero	T359638 [toolsbeta,infra] upgrade kubernetes to 1.24
Resolved		aborrero	T359639 toolforge: verify etcd version is compatible with k8s 1.24
Resolved		aborrero	T359798 refresh kube-state-metrics version for k8s 1.24
Resolved		aborrero	T359927 [cookbook] wmcs.toolforge.k8s.prepare_upgrade: be more flexible checking for deb package components
In Progress		aborrero	T279110 [infra] Replace PodSecurityPolicy in Toolforge Kubernetes
Open		None	T335131 Toolforge: replace admission controllers with an existing policy admin project
In Progress		aborrero	T362050 review pod templates for stricter security
Resolved		aborrero	T362966 lima-kilo: replicate sssd setup from Toolforge
In Progress		None	T362233 Decision Request - Toolforge policy agent
Open		aborrero	T362872 Decision Request - Toolforge policy agent enforcement model
Resolved		aborrero	T363347 toolforge lima-kilo: PodSecurityPolicy admission is disabled
In Progress		aborrero	T362967 lima-kilo: container image caching
In Progress		aborrero	T363482 toolforge lima-kilo: refresh maintain-kubeusers test data
Open		None	T329671 Upgrade all third-party Toolforge Kubernetes components to versions supporting Kubernetes 1.25
Open		None	T349197 [infra] Remove TTLAfterFinished from config before upgrade to 1.25
Resolved		Andrew	T349207 [infra] Upgrade Toolforge K8s etcd nodes to Bullseye