Toolforge currently has cert-manager version 1.15.3. Per https://cert-manager.io/docs/releases/ the 1.15 series supports up to Kubernetes 1.32, so it must be upgraded before upgrading Kubernetes to 1.33.
v1.20 support Kubernetes 1.32 → 1.35
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Author | Repo | Branch | Lines +/- | |
|---|---|---|---|---|---|
| Add copy_certmanager_images cookbook | Andrew Bogott | cloud/wmcs-cookbooks | main | +79 -0 |
Related Changes in GitLab:
| Title | Reference | Author | Source Branch | Dest Branch | |
|---|---|---|---|---|---|
| remove "wait: true" from certmanager ansible script | repos/cloud/toolforge/lima-kilo!335 | andrew | certmanager | main | |
| cert-manager: update deploy to 1.20.3 | repos/cloud/toolforge/toolforge-deploy!1355 | andrew | certmanager | main |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T414596 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.35 | |||
| Open | Andrew | T414595 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.34 | |||
| Resolved | Andrew | T408785 [infra,k8s] Upgrade Toolforge Kubernetes to version 1.33 | |||
| Resolved | Andrew | T408786 Upgrade cert-manager past 1.15 |
Event Timeline
Comment Actions
andrew opened https://gitlab.wikimedia.org/repos/cloud/toolforge/toolforge-deploy/-/merge_requests/1355
cert-manager: update deploy to 1.20.3
Comment Actions
andrew opened https://gitlab.wikimedia.org/repos/cloud/toolforge/lima-kilo/-/merge_requests/335
remove "wait: true" from certmanager ansible script
Comment Actions
Change #1320996 had a related patch set uploaded (by Andrew Bogott; author: Andrew Bogott):
[cloud/wmcs-cookbooks@main] Add copy_certmanager_images_to_registry cookbook
Comment Actions
Mentioned in SAL (#wikimedia-cloud-feed) [2026-08-04T16:07:49Z] <andrew@cloudcumin1001> START - Cookbook wmcs.toolforge.k8s.copy_certmanager_images_to_registry for certmanager 1.20.3 (T408786)
Comment Actions
Mentioned in SAL (#wikimedia-cloud-feed) [2026-08-04T16:08:45Z] <andrew@cloudcumin1001> END (PASS) - Cookbook wmcs.toolforge.k8s.copy_certmanager_images_to_registry (exit_code=0) for certmanager 1.20.3 (T408786)
Comment Actions
Mentioned in SAL (#wikimedia-cloud-feed) [2026-08-04T16:38:41Z] <andrew@cloudcumin1001> START - Cookbook wmcs.toolforge.k8s.copy_certmanager_images for certmanager 1.20.3 (T408786)
Comment Actions
Mentioned in SAL (#wikimedia-cloud-feed) [2026-08-04T16:38:59Z] <andrew@cloudcumin1001> END (PASS) - Cookbook wmcs.toolforge.k8s.copy_certmanager_images (exit_code=0) for certmanager 1.20.3 (T408786)
Comment Actions
Mentioned in SAL (#wikimedia-cloud-feed) [2026-08-05T14:02:26Z] <andrew@cloudcumin1001> START - Cookbook wmcs.toolforge.component.deploy for component cert-manager (T408786)
Comment Actions
Mentioned in SAL (#wikimedia-cloud-feed) [2026-08-05T14:19:45Z] <andrew@cloudcumin1001> END (PASS) - Cookbook wmcs.toolforge.component.deploy (exit_code=0) for component cert-manager (T408786)
Comment Actions
1.20.3 is now deployed on toolsbeta and seems to be working. I will deploy on tools proper tomorrow.
Comment Actions
Change #1320996 merged by jenkins-bot:
[cloud/wmcs-cookbooks@main] Add copy_certmanager_images cookbook
Comment Actions
Mentioned in SAL (#wikimedia-cloud-feed) [2026-08-06T13:15:37Z] <andrew@cloudcumin1001> START - Cookbook wmcs.toolforge.component.deploy for component cert-manager (T408786)
Comment Actions
Mentioned in SAL (#wikimedia-cloud-feed) [2026-08-06T13:36:39Z] <andrew@cloudcumin1001> END (PASS) - Cookbook wmcs.toolforge.component.deploy (exit_code=0) for component cert-manager (T408786)
Comment Actions
andrew merged https://gitlab.wikimedia.org/repos/cloud/toolforge/toolforge-deploy/-/merge_requests/1355
cert-manager: update deploy to 1.20.3
Comment Actions
dcaro merged https://gitlab.wikimedia.org/repos/cloud/toolforge/lima-kilo/-/merge_requests/335
remove "wait: true" from certmanager ansible script