Paths

Table of Contentst

Differential D12711

[terraform] Introduce secondary keyserver service
ClosedPublic
Actions

Authored by will on Jul 9 2024, 7:32 PM.

Tags

None

Referenced Files

	F3389220: D12711.id42384.diff
	Fri, Nov 29, 6:01 PM

	F3389201: D12711.id42417.diff
	Fri, Nov 29, 5:57 PM

	Unknown Object (File)
	Tue, Nov 26, 9:40 AM

	Unknown Object (File)
	Tue, Nov 26, 7:29 AM

	Unknown Object (File)
	Tue, Nov 26, 7:25 AM

	Unknown Object (File)
	Tue, Nov 26, 5:40 AM

	Unknown Object (File)
	Sat, Nov 23, 9:47 PM

	Unknown Object (File)
	Sat, Nov 23, 6:45 AM

Subscribers

Details

Reviewers

varun
bartek

Commits

rCOMMbd10a05ecdaf: [terraform] Introduce secondary keyserver service

Summary

This introduces the secondary keyserver service. The task is mostly identical to the primary except COMM_NODE_ROLE being set to
secondary.

Depends on D12710

Test Plan

I added a temporary keyserver route that printed true/false for whether it was primary. Load balancer properly distributed traffic
to both primary and secondary requests and was able to curl https://wyilio.com/role to get both true and false responses

Diff Detail

Repository

Branch

keyserver_to_aws

Lint

No Lint Coverage

Unit

No Test Coverage

Event Timeline

will created this revision.Jul 9 2024, 7:32 PM

Herald added subscribers: tomek, ashoat. · View Herald TranscriptJul 9 2024, 7:32 PM

will added inline comments.Jul 9 2024, 7:35 PM

services/terraform/self-host/keyserver_primary.tf
3	Like the primary service. Will not land until I've built and changed this to an official commapp image

Harbormaster completed remote builds in B30252: Diff 42191.Jul 9 2024, 7:47 PM

will requested review of this revision.Jul 9 2024, 7:47 PM

will added a child revision: D12724: [keyserver] add `aws` proxy type for self-hosted keyservers.Jul 11 2024, 4:19 AM

create secondary resources after primary

Harbormaster failed remote builds in B30394: Diff 42357!Jul 16 2024, 11:53 AM

rebase

Harbormaster completed remote builds in B30400: Diff 42363.Jul 16 2024, 3:18 PM

bartek requested changes to this revision.Jul 17 2024, 12:49 AM

bartek added inline comments.

keyserver_secondary.tf
1 ↗	(On Diff #42363)	Wait, isn't the `keyserver_secondary.tf` accidentally copied to repo root?

This revision now requires changes to proceed.Jul 17 2024, 12:49 AM

remove copy of keyserver_secondary.tf from root

@bartek thanks for catching that

Harbormaster completed remote builds in B30412: Diff 42384.Jul 17 2024, 6:35 AM

bartek accepted this revision.Jul 17 2024, 8:48 AM

This revision is now accepted and ready to land.Jul 17 2024, 8:48 AM

rebase

Harbormaster completed remote builds in B30441: Diff 42417.Jul 17 2024, 3:07 PM

rebase

Harbormaster completed remote builds in B30444: Diff 42420.Jul 17 2024, 3:28 PM

rebase

Harbormaster failed remote builds in B30448: Diff 42429!Jul 17 2024, 4:09 PM

rebase

Harbormaster completed remote builds in B30450: Diff 42431.Jul 17 2024, 4:40 PM

Closed by commit rCOMMbd10a05ecdaf: [terraform] Introduce secondary keyserver service (authored by will). · Explain WhyJul 17 2024, 7:01 PM

This revision was automatically updated to reflect the committed changes.

will added a commit: rCOMMbd10a05ecdaf: [terraform] Introduce secondary keyserver service.

Revision Contents
Changeset List

Path

Size

	keyserver_secondary.tf/
	services/	terraform/	self-host/


	keyserver_primary.tf

104 lines

services/

terraform/

self-host/

keyserver_primary.tf

18 lines

	keyserver_secondary.tf
	keyserver_primary.tf

96 lines

Diff 42191

keyserver_secondary.tf

Loading...

services/terraform/self-host/keyserver_primary.tf

Loading...

services/terraform/self-host/keyserver_secondary.tf

Loading...