The current Toolforge K8s HAProxy hosts run in the vlan-legacy network with a private v4 VIP. To eliminate the need for the separate front HAProxy host, we need to re-build those in the dualstack network with VIPs for both address families.
Description
Description
Details
Details
Related Changes in Gerrit:
Customize query in gerrit
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | None | T90534 Make toolforge reliable enough (tracking) | |||
| Resolved | taavi | T283948 Merge Toolforge Nginx front proxy into the existing K8s HAProxy setup | |||
| Resolved | taavi | T405078 Rebuild Toolforge HAProxies to support IPv6 |
Event Timeline
Comment Actions
Change #1189840 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] P:toolforge::k8s::haproxy: Drop old TCP listener
Comment Actions
Change #1189841 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] P:toolforge::k8s::haproxy: Handle API gateway external access
Comment Actions
Change #1189870 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] P:toolforge::k8s::haproxy: Allow passing list of IPs for VIPs
Comment Actions
Change #1189870 merged by Majavah:
[operations/puppet@production] P:toolforge::k8s::haproxy: Allow passing list of IPs for VIPs
Comment Actions
Change #1191307 had a related patch set uploaded (by Majavah; author: Majavah):
[cloud/wmcs-cookbooks@main] wmcs_libs: k8s: Support tofu-managed groups for HAProxy
Comment Actions
Change #1191308 had a related patch set uploaded (by Majavah; author: Majavah):
[cloud/wmcs-cookbooks@main] toolforge: k8s: Resolve K8s HAProxy VIPs from Hiera
Comment Actions
taavi opened https://gitlab.wikimedia.org/repos/cloud/toolforge/tofu-provisioning/-/merge_requests/86
shared: Allocate a VIP for HAProxy Keepalived usage
Comment Actions
Change #1191308 merged by jenkins-bot:
[cloud/wmcs-cookbooks@main] toolforge: k8s: Resolve K8s HAProxy VIPs from Hiera
Comment Actions
Change #1191307 merged by jenkins-bot:
[cloud/wmcs-cookbooks@main] wmcs_libs: k8s: Support tofu-managed groups for HAProxy
Comment Actions
taavi merged https://gitlab.wikimedia.org/repos/cloud/toolforge/tofu-provisioning/-/merge_requests/86
shared: Allocate a VIP for HAProxy Keepalived usage
Comment Actions
taavi opened https://gitlab.wikimedia.org/repos/cloud/toolforge/tofu-provisioning/-/merge_requests/89
toolsbeta: Point k8s DNS name to the new VIP
Comment Actions
taavi opened https://gitlab.wikimedia.org/repos/cloud/toolforge/tofu-provisioning/-/merge_requests/90
tools: Point k8s DNS name to the new VIP
Comment Actions
taavi merged https://gitlab.wikimedia.org/repos/cloud/toolforge/tofu-provisioning/-/merge_requests/89
toolsbeta: Point k8s DNS name to the new VIP
Comment Actions
Change #1193124 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] P:toolforge::k8s::haproxy: Bind the K8s API service on v6
Comment Actions
Change #1193124 merged by Majavah:
[operations/puppet@production] P:toolforge::k8s::haproxy: Bind the K8s API service on v6
Comment Actions
Change #1193125 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] P:toolforge::k8s::haproxy: Fix TLS on IPv6 listener
Comment Actions
Change #1193125 merged by Majavah:
[operations/puppet@production] P:toolforge::k8s::haproxy: Fix TLS on IPv6 listener
Comment Actions
Change #1193164 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] P:toolforge::k8s::haproxy: Prefer IPv4 for backend nodes
Comment Actions
Change #1193164 merged by Majavah:
[operations/puppet@production] P:toolforge::k8s::haproxy: Prefer IPv4 for backend nodes
Comment Actions
Change #1193310 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] P:toolforge::k8s::haproxy: Add resolver config to api-gateway-tcp
Comment Actions
Change #1193310 merged by Majavah:
[operations/puppet@production] P:toolforge::k8s::haproxy: Add resolver config to api-gateway-tcp
Comment Actions
taavi merged https://gitlab.wikimedia.org/repos/cloud/toolforge/tofu-provisioning/-/merge_requests/90
tools: Point k8s DNS name to the new VIP
Comment Actions
Change #1193317 had a related patch set uploaded (by Majavah; author: Majavah):
[operations/puppet@production] P:toolforge::proxy: Disable connection failure tracking
Comment Actions
Change #1193317 merged by Majavah:
[operations/puppet@production] P:toolforge::proxy: Disable connection failure tracking