Tracks tasks relating to Acme-chief (formerly known as certcentral) (see readme in rOSAC) and Wikimedia's deployment of it. Acme-chief is an application resulting from the Wikimedia Hackathon 2018 that is to be used to centrally request configured TLS certificates from ACME servers, then make the public and private parts available to authorised API users.
Details
Details
Tue, Jul 2
Tue, Jul 2
Maintenance_bot removed a project from T369014: Stop using SSLCertificateChainFile on RSA+EC setups: Patch-For-Review.
gerritbot added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Change #1051304 merged by Vgutierrez:
[operations/puppet@production] gerrit: Stop using SSLCertificateChainFile
Marostegui added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Orchestrator looking fine after a reload of its apache
Vgutierrez updated the task description for T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
gerritbot added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Change #1051307 merged by Vgutierrez:
[operations/puppet@production] mirrors: Stop using SSLCertificateChainFile
gerritbot added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Change #1051310 merged by Vgutierrez:
[operations/puppet@production] orchestrator: Stop using SSLCertificateChainFile
fgiunchedi updated the task description for T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
gerritbot added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Change #1051310 had a related patch set uploaded (by Vgutierrez; author: Vgutierrez):
[operations/puppet@production] orchestrator: Stop using SSLCertificateChainFile
Vgutierrez added a project to T369014: Stop using SSLCertificateChainFile on RSA+EC setups: Data-Persistence.
gerritbot added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Change #1051307 had a related patch set uploaded (by Vgutierrez; author: Vgutierrez):
[operations/puppet@production] mirrors: Stop using SSLCertificateChainFile
fgiunchedi closed T369008: librenms cert chain validation failure, a subtask of T369014: Stop using SSLCertificateChainFile on RSA+EC setups, as Resolved.
gerritbot added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Change #1051301 merged by Filippo Giunchedi:
[operations/puppet@production] o11y: serve LE chained certificates
gerritbot added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Change #1051304 had a related patch set uploaded (by Vgutierrez; author: Vgutierrez):
[operations/puppet@production] gerrit: Stop using SSLCertificateChainFile
Vgutierrez updated the task description for T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
gerritbot added a project to T369014: Stop using SSLCertificateChainFile on RSA+EC setups: Patch-For-Review.
gerritbot added a comment to T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Change #1051301 had a related patch set uploaded (by Filippo Giunchedi; author: Filippo Giunchedi):
[operations/puppet@production] o11y: serve LE chained certificates
Vgutierrez updated the task description for T369014: Stop using SSLCertificateChainFile on RSA+EC setups.
Thu, Jun 27
Thu, Jun 27
BCornwall closed T355189: Create automation for registered MarkMonitor DNS and acme-chief/ncredir as Resolved.
Marking as resolved since this is vague and technically has been achieved. Any further developments will be in more specific tickets.
• MoritzMuehlenhoff updated the task description for T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1050244 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Switch acmechief to Puppet 7 on the role level
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1050205 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for prometheus
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1050205 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Remove acmechief annotations for prometheus
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049859 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for swift/ceph
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049873 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for remaining Search roles
Wed, Jun 26
Wed, Jun 26
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049863 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for remaining o11y roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049954 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for remainign Data Engineering roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049821 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for gerrit
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049954 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Remove acmechief annotations for remainign Data Engineering roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049864 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for Cassandra roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049907 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for Druid/Kafka roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049908 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for Hadoop
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049908 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Remove acmechief annotations for Hadoop
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049907 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Remove acmechief annotations for Druid/Kafka roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049850 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for remaining Collab roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049461 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for dns/ncredir/durum/doh
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049871 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for backup roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049875 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for misc roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049854 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for remaining IF roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049869 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for remaining WMCS roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049872 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for remaining Traffic roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049874 merged by Muehlenhoff:
[operations/puppet@production] Remove acmechief annotations for dumps roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049851 merged by Effie Mouzeli:
[operations/puppet@production] Remove acmechief annotations for memcached/redis
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049875 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Remove acmechief annotations for misc roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049874 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Remove acmechief annotations for dumps roles
gerritbot added a comment to T365799: Revert back to fleet-wide acmechief config once all ACME consumers are on Puppet 7.
Change #1049873 had a related patch set uploaded (by Muehlenhoff; author: Muehlenhoff):
[operations/puppet@production] Remove acmechief annotations for remaining Search roles