ldap-ro and ldap-ro-ssl need to be migrated to IPIP encapsulation, given the current PyBal constraints this needs to happen one DC at a time (instead of host by host).
Current status:
- eqiad
- codfw
Description
Description
Details
Details
Related Changes in Gerrit:
Customize query in gerrit
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | Vgutierrez | T332027 Replace current L4LB with with Katran-based alternative | |||
| Resolved | Vgutierrez | T367312 Migrate services behind high-traffic2 LVS to IPIP encapsulation | |||
| Resolved | None | T367861 Migrate ldap-ro and ldap-ro-ssl to IPIP encapsulation |
Event Timeline
Comment Actions
Change #1047076 had a related patch set uploaded (by Vgutierrez; author: Vgutierrez):
[operations/puppet@production] hiera,openldap::replica: Enable IPIP on codfw
Comment Actions
Change #1047488 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Point codfw and codfw1dev to use the eqiad LDAP ro servers as well
Comment Actions
Change #1047488 merged by Muehlenhoff:
[operations/puppet@production] Point codfw and codfw1dev to use the eqiad LDAP ro servers as well
Comment Actions
Change #1047076 merged by Vgutierrez:
[operations/puppet@production] hiera,openldap::replica: Enable IPIP on codfw
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-06-24T12:50:55Z] <vgutierrez> rolling restart of pybal on lvs2014 and lvs2012 - T367861
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-06-24T12:53:07Z] <vgutierrez> IPIP encapsulation enabled on ldap-ro.codfw.wikimedia.org. - T367861
Comment Actions
Change #1049156 had a related patch set uploaded (by Vgutierrez; author: Vgutierrez):
[operations/puppet@production] hiera,openldap::replica: Enable IPIP on eqiad
Comment Actions
Change #1049162 had a related patch set uploaded (by Vgutierrez; author: Vgutierrez):
[operations/puppet@production] hiera,openldap::replica: Add missing ldap-ro-ssl pool
Comment Actions
Change #1049162 merged by Vgutierrez:
[operations/puppet@production] hiera,openldap::replica: Add missing ldap-ro-ssl pool
Comment Actions
Change #1049378 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Revert "Point codfw and codfw1dev to use the eqiad LDAP ro servers as well"
Comment Actions
Change #1049378 merged by Muehlenhoff:
[operations/puppet@production] Revert "Point codfw and codfw1dev to use the eqiad LDAP ro servers as well"
Comment Actions
Change #1049446 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Point eqiad and cloud/eqiad to use the codfw LDAP ro servers as well
Comment Actions
Change #1049446 merged by Muehlenhoff:
[operations/puppet@production] Point eqiad and cloud/eqiad to use the codfw LDAP ro servers as well
Comment Actions
Change #1049156 merged by Vgutierrez:
[operations/puppet@production] hiera,openldap::replica: Enable IPIP on eqiad
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-06-25T13:26:48Z] <vgutierrez> rolling restart of pybal on lvs1020 and lvs1018 - T367861
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-06-25T13:29:58Z] <vgutierrez> IPIP encapsulation enabled on ldap-ro.eqiad.wikimedia.org - T367861
Comment Actions
Change #1049568 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Revert "Point eqiad and cloud/eqiad to use the codfw LDAP ro servers as well"
Comment Actions
Change #1049568 merged by Muehlenhoff:
[operations/puppet@production] Revert "Point eqiad and cloud/eqiad to use the codfw LDAP ro servers as well"