production: Deploy webapp (& dependent read-only services) to dynamic infra
Deploy dependent services first then the webapp:
- swh/infra/ci-cd/swh-charts!268 (merged): Deploy swh-search read-only rpc
- swh/infra/ci-cd/swh-charts!268 (merged): Deploy swh-storage read-only rpc
- swh/infra/ci-dc/swh-charts!268: Migrate services to use the read-only storage
- Deploy ^
- Loop, deploy, analyze, fix papercuts until it works
- swh/infra/ci-cd/swh-charts!269 (merged): rpc: make indexer-storage multi-deployment instance
- Deploy
- swh/infra/ci-cd/swh-charts!269 (merged): Deploy swh-indexer-storage read-only rpc to production
- Deploy
- swh/infra/ci-cd/swh-charts!270 (merged): Deploy swh-web instance which uses the previous rpc services ^
- Loop, deploy, analyze, fix papercuts until it works
- Checks
- swh/infra/puppet/puppet-swh-site!675 (merged): Expose new webapp instance publicly (recycle webapp1.internal.s.o cname)
- vangogh.euwest.azure is blocked by the firewall, so this needs adaptation
-
Checks
- browsing
- logging to keycloak
- cooking
- save-code-now (access and trigger)
- api accesses
-
access to features
- save-code-now (public & moderation uis)
- add-forge-now (public & moderation uis)
- deposit (fail) as it's missing the configuration
- Loop, deploy, analyze, fix papercuts until it works
- deposit moderation ui
- swh/infra/ci-cd/swh-charts!271 (merged): https://webapp1.internal.softwareheritage.org/graphql/ should be reachable
post-migration:
- swh/infra/puppet/puppet-swh-site!675 (merged): Decommission webapp1.production webapp services
Refs. #5110 (closed)