[Jenkins-infra] Announcement: Service Maintaince (ldap, accounts.jenkins.io, uplink)

Olblak me at olblak.com
Mon Jan 20 10:56:48 UTC 2020


So I fixed the issue even if I don't understand it. 
Basically, we can define firewall rules in two different locations either at the Loadbalancer level as defined here <https://github.com/jenkins-infra/charts/blob/a57a952d49b0b913c3f8386e05a3328ffbf4b872/charts/ldap/templates/service.yaml#L13> or at the virtual network security group as defined here <https://github.com/jenkins-infra/azure/blob/master/plans/vnets-nsg.tf#L105L123>, by default connections between service Loadbalancer and Kubernetes clusters are allowed but I had to open port 636 on the security group in order for services outside Kubernetes virtual network to access it.

Regarding INFRA-1797, we have one last service to work on, https://repo.azure.jenkins.io/



---
gpg --keyserver keys.gnupg.net --recv-key 52210D3D
---


On Mon, Jan 20, 2020, at 10:23 AM, Olblak wrote:
> Quick update: 
> 
> I am having some issues with ldap.jenkins.io, it appears that the whitelisted IP rules are not taken into account so services outside the cluster, like wiki or jira, are not allowed to reach ldap.jenkins.io. 
> I am still on it
> 
> ---
> gpg --keyserver keys.gnupg.net --recv-key 52210D3D
> ---
> 
> 
> On Tue, Jan 14, 2020, at 10:06 AM, Olblak wrote:
>> Hi Everybody,
>> 
>> As part of INFRA-1797 <https://issues.jenkins-ci.org/browse/INFRA-1797> work, we plan a service maintenance window next Monday starting at 8 AM UTC 
>> 
>> While most of the services have already been migrated by Timja, we still have three left.
>> 
>> * ldap.jenkins.io [INFRA-2364 <https://issues.jenkins-ci.org/browse/INFRA-2364>]
>> * accounts.jenkins.io [INFRA-2360 <https://issues.jenkins-ci.org/browse/INFRA-2360>]
>> * uplink.jenkins.io [INFRA-2363 <https://issues.jenkins-ci.org/browse/INFRA-2363>]
>> 
>> The maintenance window will consist of updating DNS records from the old Kubernetes cluster to the new one then fixing any unplanned issues.
>> 
>> I am also reminding that evergreen.jenkins.io is deprecated and won't be migrated to the new Kubernetes cluster.
>> 
>> Cheers
>> 
>> ---
>> gpg --keyserver keys.gnupg.net --recv-key 52210D3D
>> ---
>> 

>> --
>> You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscribe at googlegroups.com.
>> To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/6e28a111-6f80-4d8c-b504-c6a688b8789a%40www.fastmail.com <https://groups.google.com/d/msgid/jenkinsci-dev/6e28a111-6f80-4d8c-b504-c6a688b8789a%40www.fastmail.com?utm_medium=email&utm_source=footer>.
> 
> 

> --
>  You received this message because you are subscribed to the Google Groups "Jenkins Developers" group.
>  To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscribe at googlegroups.com.
>  To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/c24812fe-3a38-4ee0-bdd8-4633fdfa673a%40www.fastmail.com <https://groups.google.com/d/msgid/jenkinsci-dev/c24812fe-3a38-4ee0-bdd8-4633fdfa673a%40www.fastmail.com?utm_medium=email&utm_source=footer>.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.jenkins-ci.org/pipermail/jenkins-infra/attachments/20200120/f4575a3d/attachment.html>


More information about the Jenkins-infra mailing list