gerrit: move gerrit-spare behind CDN
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• ABran-WMF
	Feb 25 2026, 11:09 AM

Project Tags

Referenced Files

None

Subscribers

• ABran-WMF

• Aklapper

Jelto

Description

as for T418108: gerrit: move gerrit-replica behind CDN, we'll need to move gerrit-spare behind CDN which will allow us

dropping public IPs for the service
start working on T414407: Gerrit topology evolution branch pick-up
start working on T417279: Harmonize DNS on all gerrit instances

add gerrit-spare.discovery.wmnet https://gerrit.wikimedia.org/r/c/operations/dns/+/1247524
add mapping in trafficserver https://gerrit.wikimedia.org/r/c/operations/puppet/+/1247528 and https://gerrit.wikimedia.org/r/c/operations/puppet/+/1247527 (merged)
change gerrit-spare.wikimedia.org DNS entry to geoip!gerrit-addrs https://gerrit.wikimedia.org/r/c/operations/dns/+/1247531

Details

Related Changes in Gerrit:

Subject	Author	Repo	Branch	Lines +/-
gerrit: dns cache wipe update	Arnaudb	operations/cookbooks	master	+2 -2
gerrit: move gerrit-spare behind CDN	Arnaudb	operations/dns	master	+1 -4
cache:text: add gerrit-spare to alternate_domains	Arnaudb	operations/puppet	production	+2 -0
trafficserver: Add gerrit-spare backend	Arnaudb	operations/puppet	production	+8 -0
gerrit: add gerrit-spare to discovery records	Arnaudb	operations/dns	master	+1 -0

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
		Restricted Task
Resolved	Dzahn	T411895 gerrit behind CDN
Resolved	Vgutierrez	T417536 ATS causes git fetches from Gerrit to fail with 502 responses
Resolved	• ABran-WMF	T418108 gerrit: move gerrit-replica behind CDN
Resolved	• ABran-WMF	T418361 gerrit: move gerrit-spare behind CDN

Event Timeline

• ABran-WMF created this task.Feb 25 2026, 11:09 AM

Restricted Application added a subscriber: • Aklapper. · View Herald TranscriptFeb 25 2026, 11:09 AM

• ABran-WMF triaged this task as Medium priority.Feb 25 2026, 11:17 AM

• ABran-WMF moved this task from Incoming to Backlog on the collaboration-services board.

Change #1247524 had a related patch set uploaded (by Arnaudb; author: Arnaudb):

[operations/dns@master] gerrit: add gerrit-spare to discovery records

https://gerrit.wikimedia.org/r/1247524

gerritbot added a project: Patch-For-Review.Mar 3 2026, 8:49 AM

Change #1247527 had a related patch set uploaded (by Arnaudb; author: Arnaudb):

[operations/puppet@production] trafficserver: Add gerrit-spare backend

https://gerrit.wikimedia.org/r/1247527

Change #1247528 had a related patch set uploaded (by Arnaudb; author: Arnaudb):

[operations/puppet@production] cache:text: add gerrit-spare to alternate_domains

https://gerrit.wikimedia.org/r/1247528

• ABran-WMF updated the task description. (Show Details)Mar 3 2026, 8:58 AM

Change #1247531 had a related patch set uploaded (by Arnaudb; author: Arnaudb):

[operations/dns@master] gerrit: move gerrit-spare behind CDN

https://gerrit.wikimedia.org/r/1247531

• ABran-WMF updated the task description. (Show Details)Mar 3 2026, 9:04 AM

• ABran-WMF changed the task status from Open to In Progress.Mar 3 2026, 9:14 AM

• ABran-WMF moved this task from Backlog to Work in Progress on the collaboration-services board.

Change #1247524 merged by Arnaudb:

[operations/dns@master] gerrit: add gerrit-spare to discovery records

https://gerrit.wikimedia.org/r/1247524

Change #1247534 had a related patch set uploaded (by Arnaudb; author: Arnaudb):

[operations/cookbooks@master] gerrit: dns cache wipe update

https://gerrit.wikimedia.org/r/1247534

• ABran-WMF updated the task description. (Show Details)Mar 3 2026, 9:30 AM

• ABran-WMF mentioned this in T417998: ATS: align ATS and Gerrit Apache timeouts to reenable connection re-use.Mar 3 2026, 9:35 AM

Change #1247527 merged by Arnaudb:

[operations/puppet@production] trafficserver: Add gerrit-spare backend

https://gerrit.wikimedia.org/r/1247527

• ABran-WMF updated the task description. (Show Details)Mar 3 2026, 9:53 AM

• ABran-WMF updated the task description. (Show Details)

Change #1247528 abandoned by Arnaudb:

[operations/puppet@production] cache:text: add gerrit-spare to alternate_domains

Reason:

merge conflict, replaced by 1247940

https://gerrit.wikimedia.org/r/1247528

• ABran-WMF updated the task description. (Show Details)Mar 4 2026, 9:49 AM

• ABran-WMF renamed this task from gerrit-spare behind CDN to gerrit: move gerrit-spare behind CDN.Mar 4 2026, 9:52 AM

Change #1247531 merged by Arnaudb:

[operations/dns@master] gerrit: move gerrit-spare behind CDN

https://gerrit.wikimedia.org/r/1247531

• ABran-WMF updated the task description. (Show Details)Mar 4 2026, 10:50 AM

• ABran-WMF updated the task description. (Show Details)

gerrit-spare now runs behind the CDN

Thank you @ABran-WMF for merging the DNS change. I can confirm gerrit-spare host is accessible over the CDN now:

curl -I https://gerrit-spare.wikimedia.org/r/plugins/gitiles/operations/puppet/
HTTP/2 200 
date: Wed, 04 Mar 2026 11:06:48 GMT
x-cache: cp3072 miss, cp3072 pass
x-cache-status: pass

One of my request in superset:

https://superset.wikimedia.org/superset/dashboard/p/3pPvW1WerdJ/

Jelto awarded a token.Mar 4 2026, 11:07 AM

Change #1247534 merged by jenkins-bot: