Deployment tooling/Cabal/2016-05-09

2016-05-09

Automation of key generation

• Two related tasks, each have patches that are needed to streamline the scap3 migration:
  • T133211 - Automate the generation deployment keys (keyholder-managed ssh keys)
• https://gerrit.wikimedia.org/r/#/c/284418/
• TODOs
  • Ensure scap key cannot be redefined in scap::target - https://phabricator.wikimedia.org/T132747
    • Only specify deployment user, scap::target takes care of keys
    • Keep keyholder puppet functions, remove ssh-keygen
  • Possible keyholder fixups

Cross datacenter TLS

• Lots of open solutions
• TODOs
  • Add faidon to tickets
  • https://phabricator.wikimedia.org/T127498

Blocking RESTBase

• Checklist: https://phabricator.wikimedia.org/T93428
  • Config deploys (haven't done it in production)
    • Some puppet refactoring needed for ownership
  • Untangle the scap deployment pieces of puppet
  • Config --diff

Random Things

• New package tagged
  • Filippo working on it this week \o/
• Migration continues

As Always

• Phase 2
• Phase 1
• Workboard https://phabricator.wikimedia.org/tag/scap3/
• Etherpad backed up to https://www.mediawiki.org/wiki/Deployment_tooling/Cabal
• Future document https://www.mediawiki.org/wiki/Deployment_tooling/Future
• Spreadsheet: https://docs.google.com/spreadsheets/d/1MlEsFxrLvdZdV_G82WEAIvBXr7ArO7nCEKaFClHhJEw/edit#gid=0