https://apereo.github.io/cas/7.0.x/release_notes/RC1.html
https://apereo.github.io/cas/7.0.x/release_notes/RC2.html
https://apereo.github.io/cas/7.0.x/release_notes/RC3.html
https://apereo.github.io/cas/7.0.x/release_notes/RC4.html
https://apereo.github.io/cas/7.0.x/release_notes/RC5.html
https://apereo.github.io/cas/7.0.x/release_notes/RC6.html
https://apereo.github.io/cas/7.0.x/release_notes/RC7.html
https://apereo.github.io/cas/7.0.x/release_notes/RC8.html
https://apereo.github.io/cas/7.0.x/release_notes/RC9.html
Description
Details
Related Objects
Event Timeline
Change #1046601 merged by Muehlenhoff:
[operations/puppet@production] Add component/jdk21 for Bookworm
A preliminary backport of Java 21 is now available in component/jdk21, it can already be used to build CAS 7.0.
(It's preliminary package since I had to use a bootstrap package (Bookworm has Java 17, but Java 21 needs Java 20/21 to build, while Java 20 needs Java 19/20 to build etc. pp). Now that the bootstrap dep is imported to the component,I'll next rebuild openjdk-21 using this bootstrap package)
Change #1046612 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Add a build hook for Java 21
Change #1046612 merged by Muehlenhoff:
[operations/puppet@production] Add a build hook for Java 21
Change #1047013 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/software/cas-overlay-template@master] Upgrade to CAS 7.0.4.1
Mentioned in SAL (#wikimedia-operations) [2024-06-18T10:30:52Z] <moritzm> upload openjdk-21 21.0.3+9-2~deb12u2 for bookworm/wikimedia (secondary rebuild on build2001 following the initial bootstrap build) https://phabricator.wikimedia.org/T367487
Change #1047044 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] idp::build: Install Java 21 on Bookworm
Change #1047044 merged by Muehlenhoff:
[operations/puppet@production] idp::build: Install Java 21 on Bookworm
Change #1047013 merged by Slyngshede:
[operations/software/cas-overlay-template@master] Upgrade to CAS 7.0.4.1
Change #1047051 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] idp::build: Make the rsync setup depend on the OS
Change #1047053 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] P:idp Allow upgrade to Tomcat 10.
Change #1047051 merged by Muehlenhoff:
[operations/puppet@production] idp::build: Make the rsync setup depend on the OS
Change #1047063 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] cas::build: Fix creation of build directory
Change #1047063 merged by Muehlenhoff:
[operations/puppet@production] cas::build: Fix creation of build directory
Change #1047064 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] P:idp::build Add fakeroot build dependency.
Change #1047066 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/software/cas-overlay-template@master] Update Debian package dependencies for CAS 7.X
Change #1047064 abandoned by Slyngshede:
[operations/puppet@production] P:idp::build Add fakeroot build dependency.
Reason:
Not needed when building using sudo
Change #1047066 merged by Slyngshede:
[operations/software/cas-overlay-template@master] Update Debian package dependencies for CAS 7.X
Change #1047086 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] profile::java: Add support for Java 21
Change #1047254 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/software/cas-overlay-template@master] Update Debian packaging to work with Tomcat 10.
Change #1047086 merged by Muehlenhoff:
[operations/puppet@production] profile::java: Add support for Java 21
Change #1047254 merged by Slyngshede:
[operations/software/cas-overlay-template@master] Update Debian packaging to work with Tomcat 10.
Icinga downtime and Alertmanager silence (ID=d9d9df4b-e647-4f8e-8b55-811d9f86d7d0) set by slyngshede@cumin1002 for 5 days, 0:00:00 on 1 host(s) and their services with reason: CAS 7 upgrade
idp-test1002.wikimedia.org
Change #1047053 merged by Slyngshede:
[operations/puppet@production] P:idp Allow upgrade to Tomcat 10.
Change #1047909 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/software/cas-overlay-template@master] Downgrade SpringBoot version to match CAS 7.0.4.1 requirements.
Change #1047909 merged by Slyngshede:
[operations/software/cas-overlay-template@master] Downgrade SpringBoot version to match CAS 7.0.4.1 requirements.
Change #1048445 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] C:apereo_cas Add CAS 7 properties
Change #1049095 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[labs/private@master] PAC4J secrets, required for CAS7
Change #1048445 merged by Slyngshede:
[operations/puppet@production] C:apereo_cas Add CAS 7 properties
Change #1049103 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] C:apereo_cas PAC4J replication secrets
Change #1049095 merged by Slyngshede:
[labs/private@master] C:apereo_cas Additional secrets required for CAS7
Change #1049129 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[labs/private@master] C:apereo_cas Add dummy secrets for CAS 7
Change #1049129 merged by Slyngshede:
[labs/private@master] C:apereo_cas Add dummy secrets for CAS 7
Change #1049103 merged by Slyngshede:
[operations/puppet@production] C:apereo_cas oauth session encryption
Change #1049134 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] C:apereo_cas check for tomcat 10 on CAS 7 only variables.
Change #1049139 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Remove apereo spec test
Change #1049139 merged by Muehlenhoff:
[operations/puppet@production] Remove apereo spec test
Change #1049134 merged by Slyngshede:
[operations/puppet@production] C:apereo_cas check for tomcat 10 on CAS 7 only variables.
Change #1049456 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/dns@master] IDP-Test: Switch to CAS 7 on idp-test1002
Change #1049456 merged by Slyngshede:
[operations/dns@master] IDP-Test: Switch to CAS 7 on idp-test1002
Change #1049492 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/software/cas-overlay-template@master] Update Thymeleaf syntax to remove deprecation warning.
Change #1049508 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/software/cas-overlay-template@master] Move fonts to CSS directory.
Change #1049492 merged by Slyngshede:
[operations/software/cas-overlay-template@master] Update Thymeleaf syntax to remove deprecation warning.
Change #1049508 merged by Slyngshede:
[operations/software/cas-overlay-template@master] Move fonts to CSS directory.
Change #1049761 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] R:idp New CAS 7 hosts.
Change #1049883 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] R:idp_test: Separate testing environment for CAS 7
Change #1049883 merged by Slyngshede:
[operations/puppet@production] R:idp_test: Separate testing environment for CAS 7
Cookbook cookbooks.sre.hosts.reimage was started by slyngshede@cumin1002 for host idp-test1004.wikimedia.org with OS bookworm
Cookbook cookbooks.sre.hosts.reimage started by slyngshede@cumin1002 for host idp-test1004.wikimedia.org with OS bookworm executed with errors:
- idp-test1004 (FAIL)
- Removed from Puppet and PuppetDB if present and deleted any certificates
- Removed from Debmonitor if present
- Forced PXE for next reboot
- Host rebooted via gnt-instance
- Host up (Debian installer)
- Add puppet_version metadata to Debian installer
- Set boot media to disk
- Host up (new fresh bookworm OS)
- Generated Puppet certificate
- Signed new Puppet certificate
- Run Puppet in NOOP mode to populate exported resources in PuppetDB
- The reimage failed, see the cookbook logs for the details,You can also try typing "install-console" idp-test1004.wikimedia.org to get a root shellbut depending on the failure this may not work.
Change #1050266 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] R:idp_test Remove references to host that does not yet exist.
Change #1050266 abandoned by Slyngshede:
[operations/puppet@production] R:idp_test Remove references to host that does not yet exist.
Reason:
We'll just create idp-test2004 and then reimage idp-test1004
Change #1050269 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] R:idp_test: hardend_tls to false.
Change #1050269 merged by Slyngshede:
[operations/puppet@production] R:idp_test: hardend_tls to false.
Cookbook cookbooks.sre.hosts.reimage was started by slyngshede@cumin1002 for host idp-test2004.wikimedia.org with OS bookworm
Cookbook cookbooks.sre.hosts.reimage started by slyngshede@cumin1002 for host idp-test2004.wikimedia.org with OS bookworm completed:
- idp-test2004 (PASS)
- Removed from Puppet and PuppetDB if present and deleted any certificates
- Removed from Debmonitor if present
- Forced PXE for next reboot
- Host rebooted via gnt-instance
- Host up (Debian installer)
- Add puppet_version metadata to Debian installer
- Set boot media to disk
- Host up (new fresh bookworm OS)
- Generated Puppet certificate
- Signed new Puppet certificate
- Run Puppet in NOOP mode to populate exported resources in PuppetDB
- Found Nagios_host resource for this host in PuppetDB
- Downtimed the new host on Icinga/Alertmanager
- First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202406270940_slyngshede_1336576_idp-test2004.out
- configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
- Rebooted
- Automatic Puppet run was successful
- Forced a re-check of all Icinga services for the host
- Icinga status is optimal
- Icinga downtime removed
- Updated Netbox data from PuppetDB
Cookbook cookbooks.sre.hosts.reimage was started by slyngshede@cumin1002 for host idp-test1004.wikimedia.org with OS bookworm
Cookbook cookbooks.sre.hosts.reimage started by slyngshede@cumin1002 for host idp-test1004.wikimedia.org with OS bookworm completed:
- idp-test1004 (PASS)
- Downtimed on Icinga/Alertmanager
- Disabled Puppet
- Removed from Puppet and PuppetDB if present and deleted any certificates
- Removed from Debmonitor if present
- Forced PXE for next reboot
- Host rebooted via gnt-instance
- Host up (Debian installer)
- Add puppet_version metadata to Debian installer
- Set boot media to disk
- Host up (new fresh bookworm OS)
- Generated Puppet certificate
- Signed new Puppet certificate
- Run Puppet in NOOP mode to populate exported resources in PuppetDB
- Found Nagios_host resource for this host in PuppetDB
- Downtimed the new host on Icinga/Alertmanager
- Removed previous downtime on Alertmanager (old OS)
- First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202406271107_slyngshede_1349795_idp-test1004.out
- configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
- Rebooted
- Automatic Puppet run was successful
- Forced a re-check of all Icinga services for the host
- Icinga status is optimal
- Icinga downtime removed
- Updated Netbox data from PuppetDB
Change #1049761 merged by Slyngshede:
[operations/puppet@production] R:idp New CAS 7 hosts.
Cookbook cookbooks.sre.hosts.reimage was started by slyngshede@cumin1002 for host idp1004.wikimedia.org with OS bookworm
Cookbook cookbooks.sre.hosts.reimage started by slyngshede@cumin1002 for host idp1004.wikimedia.org with OS bookworm completed:
- idp1004 (PASS)
- Removed from Puppet and PuppetDB if present and deleted any certificates
- Removed from Debmonitor if present
- Forced PXE for next reboot
- Host rebooted via gnt-instance
- Host up (Debian installer)
- Add puppet_version metadata to Debian installer
- Set boot media to disk
- Host up (new fresh bookworm OS)
- Generated Puppet certificate
- Signed new Puppet certificate
- Run Puppet in NOOP mode to populate exported resources in PuppetDB
- Found Nagios_host resource for this host in PuppetDB
- Downtimed the new host on Icinga/Alertmanager
- First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202407150721_slyngshede_562764_idp1004.out
- configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
- Rebooted
- Automatic Puppet run was successful
- Forced a re-check of all Icinga services for the host
- Icinga status is optimal
- Icinga downtime removed
- Updated Netbox data from PuppetDB
Cookbook cookbooks.sre.hosts.reimage was started by slyngshede@cumin1002 for host idp2004.wikimedia.org with OS bookworm
Cookbook cookbooks.sre.hosts.reimage started by slyngshede@cumin1002 for host idp2004.wikimedia.org with OS bookworm completed:
- idp2004 (PASS)
- Removed from Puppet and PuppetDB if present and deleted any certificates
- Removed from Debmonitor if present
- Forced PXE for next reboot
- Host rebooted via gnt-instance
- Host up (Debian installer)
- Add puppet_version metadata to Debian installer
- Set boot media to disk
- Host up (new fresh bookworm OS)
- Generated Puppet certificate
- Signed new Puppet certificate
- Run Puppet in NOOP mode to populate exported resources in PuppetDB
- Found Nagios_host resource for this host in PuppetDB
- Downtimed the new host on Icinga/Alertmanager
- First Puppet run completed and logged in /var/log/spicerack/sre/hosts/reimage/202407150816_slyngshede_569604_idp2004.out
- configmaster.wikimedia.org updated with the host new SSH public key for wmf-update-known-hosts-production
- Rebooted
- Automatic Puppet run was successful
- Forced a re-check of all Icinga services for the host
- Icinga status is optimal
- Icinga downtime removed
- Updated Netbox data from PuppetDB
- Cleared switch DHCP cache and MAC table for the host IP and MAC (EVPN Switch)
Change #1054277 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/puppet@production] P:idp Add idp2004 to CAS 7 cluster.
Change #1054277 merged by Slyngshede:
[operations/puppet@production] P:idp Add idp2004 to CAS 7 cluster.
Change #1057827 had a related patch set uploaded (by Slyngshede; author: Slyngshede):
[operations/dns@master] IDP: Switch to CAS 7.0 hosts.
Change #1057827 merged by Slyngshede:
[operations/dns@master] IDP: Switch to CAS 7.0 hosts.
Change #1070899 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] CAS: Disable memcached on idp-test
Change #1070899 merged by Muehlenhoff:
[operations/puppet@production] CAS: Disable memcached on idp-test
Change #1073761 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/software/cas-overlay-template@master] Disable memcached ticket registry
Change #1073761 merged by Muehlenhoff:
[operations/software/cas-overlay-template@master] Disable memcached ticket registry
Change #1073775 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] profile::idp::build: Readd rsync service
Mentioned in SAL (#wikimedia-operations) [2024-09-18T12:33:20Z] <moritzm> uploaded cas 7.0.4.1+wmf12u3 T367487
Change #1073775 merged by Muehlenhoff:
[operations/puppet@production] profile::idp::build: Readd rsync service