Commits · b1cc74b88069c8687a1ab2925beba138e360e283 · Platform / Infrastructure / CI CD / Kubernetes clusters configuration

Jan 08, 2023
- Update prod GitLab operator to 0.15.1 · b1cc74b8
  Nicolas Dandrimont authored 2 years ago
  
  Ref. swh/infra/sysadm-environment#4681
  b1cc74b8
Jan 06, 2023
- Update staging GitLab operator to 0.15.1 · 02b0754d
  Nicolas Dandrimont authored 2 years ago
  
  02b0754d
- archive-staging-rke2: Fix application references · 0c2cc102
  Antoine R. Dumont authored 2 years ago
  
  Related to swh/infra/sysadm-environment#4699
  Verified
  
  0c2cc102
- Reference new cluster archive-staging-rke2 application configuration · 906eca92
  Antoine R. Dumont authored 2 years ago
  
  Related to swh/infra/sysadm-environment#4699
  Verified
  
  906eca92
- Revert "Revert "Move repository references to new GitLab hierarchy"" · a2271cb8
  Nicolas Dandrimont authored 2 years ago
  
  This reverts commit 9cb4603d. Now that the new repository is properly configured, we can switch it over
  a2271cb8
- Revert "Move repository references to new GitLab hierarchy" · 9cb4603d
  Nicolas Dandrimont authored 2 years ago
  
  This reverts commit 109a4bd2.
  9cb4603d
- Move repository references to new GitLab hierarchy · 109a4bd2
  Nicolas Dandrimont authored 2 years ago
  
  Infra repositories and docker images are now under /swh/infra; Private repositories are under /infra-private. Ref. swh/infra/sysadm-environment#4714
  109a4bd2
Jan 05, 2023
- Drop empty archive-production cluster configuration · 7b8fb619
  Antoine R. Dumont authored 2 years ago
  
  Related to infra/sysadm-environment#4699
  Verified
  
  7b8fb619
- archive-production-rke2: Unify cassandra replay application name · 501cf52b
  Antoine R. Dumont authored 2 years ago
  
  Verified
  
  501cf52b
Jan 04, 2023

Fix swh application metadata to match the other application · e47d6153
Antoine R. Dumont authored 2 years ago
```
Related to infra/sysadm-environment#4699
```
Verified

e47d6153

Install swh application to the rke2 production cluster · 5644d4f3

New labels (swh/lister=true,swh/worker=true,swh/large-scratch-fs=true) must be
installed on nodes rancher-node-metal0[1-2] so it's effectively able to deploy
the workers on it.

Related to infra/sysadm-environment#4699

Verified

5644d4f3

Dec 30, 2022
- admin: Deploy a blackbox exporter instance · 389a84ef
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4525
  Verified
  
  389a84ef
- argocd: Force the alerts to be sent to the default receiver · 7ddc4a0a
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4525
  Verified
  
  7ddc4a0a
- alertmanager irc relay: Increase buffer size · e4544e4e
  Vincent Sellier authored 2 years ago
  
  Verified
  
  e4544e4e
- argocd: activate metrics importing and a couple of alerts · df128ca4
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4525
  Verified
  
  df128ca4
Dec 29, 2022

admin: configure alertmanager to send the alerts to the irc relay webhook · 5de0fef4
Vincent Sellier authored 2 years ago
```
Related to infra/sysadm-environment#4525
```
Verified

5de0fef4

admin: Deploy the alert manager irc webhook · 5519b227

Vincent Sellier authored 2 years ago

For now, expose it only as a service inside the cluster.
When we will want to use it for other clusters, it will be exposed
through an ingress endpoint and protected by a htaccess

Related to infra/sysadm-environment#4525

Verified

5519b227

Dec 27, 2022
- cassandra-replayers: migrate to the new rke2 cluster with metal nodes · a60f2bb7
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4699
  Verified
  
  a60f2bb7
- archive-production-rke2: Deploy keda and local-path-provisionner · f2c1f948
  Vincent Sellier authored 2 years ago
  
  to prepare the deployment of the cassandra-replayers Related to infra/sysadm-environment#4699
  Verified
  
  f2c1f948
- archive-production: decommission reaper and cassandra monitoring · 480d7b6c
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4699
  Verified
  
  480d7b6c
- archive-production-rke2: deploy reaper · 2bc87d67
  Vincent Sellier authored 2 years ago
  
  Verified
  
  2bc87d67
- archive-production-rke2: Declare the base configuration · d843d78b
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4699
  Verified
  
  d843d78b
- cluster-configuration: Add the archive-production-rke2 cluster · 7f3396ba
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4699
  Verified
  
  7f3396ba
- rancher: reduce the replicas count to 2 to reduce the memory pressure of the node · c4ed136f
  Vincent Sellier authored 2 years ago
  
  Verified
  
  c4ed136f
Dec 26, 2022

prometheus/AKS: Ensure instance names are uniques across all the clusters · 7566d0e8

Vincent Sellier authored 2 years ago

By default the instance name is the ip of the node.
The AKS cluster uses the same internal address ranges so a same instance
name can identify a node in different cluster (for example 10.240.0.5)
Using the node name solve the problem as it include a cluster id in
their names.

Related to infra/sysadm-environment#4705

Verified

7566d0e8

Dec 19, 2022
- rancher: Use a valid le certificate for the web ui · d95c070b
  Vincent Sellier authored 2 years ago
  
  Verified
  
  d95c070b
- reaper: Add the ingress tls section · e0d58f41
  Vincent Sellier authored 2 years ago
  
  Verified
  
  e0d58f41
- reaper: Generate and use a real le certificate · 271e3c9e
  Vincent Sellier authored 2 years ago
  
  Verified
  
  271e3c9e
- gitlab-staging: update operator to 0.14.2 · a3f331bd
  Nicolas Dandrimont authored 2 years ago
  
  Ref. infra/sysadm-environment#4681
  a3f331bd
- gitlab-production: fix the thanos hostname · d21ac289
  Vincent Sellier authored 2 years ago
  
  Verified
  
  d21ac289
- rancher: stabilize prometheus application sync · 06aa6418
  Vincent Sellier authored 2 years ago
  
  Verified
  
  06aa6418
- rancher: try to avoid conflicts between rancher and prometheus operator helm charts · 0e423ce7
  Vincent Sellier authored 2 years ago
  
  Verified
  
  0e423ce7
Dec 16, 2022
- gitlab-production: Use a production domain name for the thanos ingress endpoint · 8a121ee1
  Vincent Sellier authored 2 years ago
  
  Verified
  
  8a121ee1
- gitlab-production: configure the prometheus operator to expose thanos with a valid certificate · b996346a
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4385
  Verified
  
  b996346a
- gitlab-staging: configure the prometheus operator to expose thanos with a valid certificate · 664d42e5
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4385
  Verified
  
  664d42e5
- fix le issuers emails to match the environments · 2ca4f4d1
  Vincent Sellier authored 2 years ago
  
  Verified
  
  2ca4f4d1
- cluster-template: use the production branch · 4ccb0773
  Vincent Sellier authored 2 years ago
  
  Verified
  
  4ccb0773
Dec 15, 2022
- Add le issuers for internal domains on all clusters · 4611ee27
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4604
  Verified
  
  4611ee27
- Migrate cert-manager configurations to the helm template · 1600672e
  Vincent Sellier authored 2 years ago
  
  Related to infra/sysadm-environment#4677
  Verified
  
  1600672e
- cert-manager: Declare the namespace where needed · 7a4ab054
  Vincent Sellier authored 2 years ago
  
  Verified
  
  7a4ab054