Page MenuHomePhabricator

Migrate the analytics airflow instance webserver to dse-k8s
Closed, ResolvedPublic

Description

After the migration of the airflow-analytics-test instance webserver to kubernetes, we are ready to begin the migration of the remaining airflow instance webservers to kubernetes following the guide on https://wikitech.wikimedia.org/wiki/Data_Platform/Systems/Airflow/Kubernetes#Migrating_an_existing_instance

This tracks the migration of the analytics airflow instance to dse-k8s

  • Create the k8s namespaces
  • Create the k8s user kubeconfigs
  • Create the wikimedia.org public subdomains
  • Create the OIDC/CAS configuration
  • add the secret key already found in /etc/helmfile-defaults/private/dse-k8s_services/airflow-analytics-test/dse-k8s-eqiad.yaml on the deployment secret to /srv/git/private/hieradata
  • add keytab to the puppet private repo
  • create aiflow-analytics-ops ldap group
  • create admin_ng relevant config
  • deploy admin_ng
  • Defining the webserver configuration
  • Deploy the application
  • Enable ATS traffic redirection and caching

Event Timeline

Stevemunene renamed this task from Migrate the analytics airflow webserver to dse-k8s to Migrate the analytics airflow instance to dse-k8s.Oct 29 2024, 8:14 AM
Stevemunene updated the task description. (Show Details)
BTullis renamed this task from Migrate the analytics airflow instance to dse-k8s to Migrate the analytics airflow instance webserver to dse-k8s.Nov 8 2024, 10:03 AM
BTullis updated the task description. (Show Details)
Gehel triaged this task as High priority.Nov 8 2024, 2:22 PM
brouberol changed the task status from Open to In Progress.Nov 14 2024, 4:39 PM
brouberol claimed this task.

Change #1091527 had a related patch set uploaded (by Brouberol; author: Brouberol):

[operations/deployment-charts@master] airflow-analytics: define namespace

https://gerrit.wikimedia.org/r/1091527

Change #1091528 had a related patch set uploaded (by Brouberol; author: Brouberol):

[operations/deployment-charts@master] airflow-analytics: add namespace to tenant list of ceph csi and cloudnative-pg

https://gerrit.wikimedia.org/r/1091528

Change #1091524 had a related patch set uploaded (by Brouberol; author: Brouberol):

[operations/puppet@production] airflow-analytics: define user kubeconfig

https://gerrit.wikimedia.org/r/1091524

Change #1091529 had a related patch set uploaded (by Brouberol; author: Brouberol):

[operations/deployment-charts@master] airflow-analytics: define helmfile and values

https://gerrit.wikimedia.org/r/1091529

Change #1091525 had a related patch set uploaded (by Brouberol; author: Brouberol):

[operations/puppet@production] airflow-analytics: define OIDC config

https://gerrit.wikimedia.org/r/1091525

Change #1091526 had a related patch set uploaded (by Brouberol; author: Brouberol):

[operations/puppet@production] airflow-analytics: define ATS mapping and cache config

https://gerrit.wikimedia.org/r/1091526

brouberol@krb1001:~$ sudo kadmin.local addprinc -randkey analytics/airflow-analytics.discovery.wmnet@WIKIMEDIA
brouberol@krb1001:~$ sudo kadmin.local addprinc -randkey airflow/airflow-analytics.discovery.wmnet@WIKIMEDIA
brouberol@krb1001:~$ sudo kadmin.local addprinc -randkey HTTP/airflow-analytics.discovery.wmnet@WIKIMEDIA
brouberol@krb1001:~$ sudo kadmin.local ktadd -norandkey -k analytics.keytab analytics/airflow-analytics.discovery.wmnet airflow/airflow-analytics.discovery.wmnet@WIKIMEDIA HTTP/airflow-analytics.discovery.wmnet@WIKIMEDIA
Entry for principal analytics/airflow-analytics.discovery.wmnet with kvno 1, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:analytics.keytab.
Entry for principal airflow/airflow-analytics.discovery.wmnet@WIKIMEDIA with kvno 1, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:analytics.keytab.
Entry for principal HTTP/airflow-analytics.discovery.wmnet@WIKIMEDIA with kvno 1, encryption type aes256-cts-hmac-sha1-96 added to keytab WRFILE:analytics.keytab.

Change #1091524 merged by Brouberol:

[operations/puppet@production] airflow-analytics: define user kubeconfig

https://gerrit.wikimedia.org/r/1091524

Change #1091525 merged by Brouberol:

[operations/puppet@production] airflow-analytics: define OIDC config

https://gerrit.wikimedia.org/r/1091525

Change #1091527 merged by jenkins-bot:

[operations/deployment-charts@master] airflow-analytics: define namespace

https://gerrit.wikimedia.org/r/1091527

Change #1091528 merged by jenkins-bot:

[operations/deployment-charts@master] airflow-analytics: add namespace to tenant list of ceph csi and cloudnative-pg

https://gerrit.wikimedia.org/r/1091528

Change #1091529 merged by jenkins-bot:

[operations/deployment-charts@master] airflow-analytics: define helmfile and values

https://gerrit.wikimedia.org/r/1091529

Change #1091642 had a related patch set uploaded (by Brouberol; author: Brouberol):

[operations/deployment-charts@master] airflow-analytics: fix typo in db username

https://gerrit.wikimedia.org/r/1091642

Change #1091642 merged by Brouberol:

[operations/deployment-charts@master] airflow-analytics: fix typo in db username

https://gerrit.wikimedia.org/r/1091642

Change #1091526 merged by Brouberol:

[operations/puppet@production] airflow-analytics: define ATS mapping and cache config

https://gerrit.wikimedia.org/r/1091526