Change Details

To get rid of [[ https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Admin/Dynamicproxy | dynamicproxy ]] (which is currently a SPOF) we can route traffic via the kubernetes ingress. We can have `webservice-runner` create [[ https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Admin/Dynamicproxy | a manual Service object with its endpoint configured ]] and and Ingress object to route the traffic to it like we do for tools running in Kubernetes. After that we should be able to remove dynamicproxy by either removing the lua routing from nginx or by moving tls termination to the haproxy nodes and skipping the proxy nodes entirely.

To get rid of [[ https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Admin/Dynamicproxy | dynamicproxy ]] (which is currently a SPOF) before the grid is fully shut down, we could route traffic to tools running on the grid via the kubernetes ingress. We can have `webservice-runner` create [[ https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Admin/Dynamicproxy | a manual Service object with its endpoint configured ]] and and Ingress object to route the traffic to it like we do for tools running in Kubernetes. After that we should be able to remove dynamicproxy by either removing the lua routing from nginx or by moving TLS termination to the haproxy nodes and skipping the proxy nodes entirely.

To get rid of [[ https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Admin/Dynamicproxy | dynamicproxy ]] (which is currently a SPOF) before the grid is fully shut down, we canould route traffic to tools running on the grid via the kubernetes ingress. We can have `webservice-runner` create [[ https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Admin/Dynamicproxy | a manual Service object with its endpoint configured ]] and and Ingress object to route the traffic to it like we do for tools running in Kubernetes. After that we should be able to remove dynamicproxy by either removing the lua routing from nginx or by moving tlsTLS termination to the haproxy nodes and skipping the proxy nodes entirely.