Page MenuHomePhabricator
Feed Advanced Search

Jul 19 2024

will published D12814: [terraform] webapp terraform config for review.
Jul 19 2024, 8:49 PM
will requested review of D12813: [terraform] add webapp, landing domains and rename keyserver domain variables.
Jul 19 2024, 8:49 PM
will updated the diff for D12810: [keyserver] run webapp, landing, and keyserver conditionally.

newline

Jul 19 2024, 8:48 PM
will closed D12808: [keyserver] remove unnecessary inviteResponder line in keyserver.js.
Jul 19 2024, 8:39 PM
will committed rCOMMc372d8492061: [keyserver] remove unnecessary inviteResponder line in keyserver.js (authored by will).
[keyserver] remove unnecessary inviteResponder line in keyserver.js
Jul 19 2024, 8:39 PM
will requested review of D12812: [terraform] run keyserver isolated from webapp and landing.
Jul 19 2024, 5:37 PM
will requested review of D12810: [keyserver] run webapp, landing, and keyserver conditionally.
Jul 19 2024, 4:17 PM
will requested review of D12808: [keyserver] remove unnecessary inviteResponder line in keyserver.js.
Jul 19 2024, 2:32 PM

Jul 18 2024

will closed D12800: [terraform] use `.env` in self-host folder for keyserver config variables instead of specifying values in terraform.tfvars or terraform.tfvars.json.
Jul 18 2024, 8:46 PM
will committed rCOMMd39ad4ec4ac3: [terraform] use `.env` in self-host folder for keyserver config variables… (authored by will).
[terraform] use `.env` in self-host folder for keyserver config variables…
Jul 18 2024, 8:46 PM
will closed D12791: [terraform] change keyserver version tag.
Jul 18 2024, 8:46 PM
will committed rCOMMf1f110c6ed9e: [terraform] change keyserver version tag (authored by will).
[terraform] change keyserver version tag
Jul 18 2024, 8:46 PM
will closed D12731: [terraform] Migration script for for self-hosted keyserver.
Jul 18 2024, 8:46 PM
will committed rCOMM2407fdb79d16: [terraform] Migration script for for self-hosted keyserver (authored by will).
[terraform] Migration script for for self-hosted keyserver
Jul 18 2024, 8:46 PM
will updated the diff for D12800: [terraform] use `.env` in self-host folder for keyserver config variables instead of specifying values in terraform.tfvars or terraform.tfvars.json.

revert mariadb sg description to Allow inbound traffic on port 3307 and all outbound traffic to avoid downtime

Jul 18 2024, 6:48 PM
will updated the summary of D12791: [terraform] change keyserver version tag.
Jul 18 2024, 6:21 PM
will updated the diff for D12791: [terraform] change keyserver version tag.

change to 1.0.100

Jul 18 2024, 6:21 PM
will updated the diff for D12800: [terraform] use `.env` in self-host folder for keyserver config variables instead of specifying values in terraform.tfvars or terraform.tfvars.json.

final changes before landing

Jul 18 2024, 6:19 PM
will added inline comments to D12731: [terraform] Migration script for for self-hosted keyserver.
Jul 18 2024, 6:10 PM
will updated the diff for D12731: [terraform] Migration script for for self-hosted keyserver.

feedback

Jul 18 2024, 6:06 PM
will added a comment to D12800: [terraform] use `.env` in self-host folder for keyserver config variables instead of specifying values in terraform.tfvars or terraform.tfvars.json.

Great work on this – looks really elegant!

Where did we land the MariaDB params – can those be specified only in the .env file, or will they need to be additionally specified to Terraform somehow?

Jul 18 2024, 5:51 PM
will updated the summary of D12800: [terraform] use `.env` in self-host folder for keyserver config variables instead of specifying values in terraform.tfvars or terraform.tfvars.json.
Jul 18 2024, 3:38 PM
will requested review of D12800: [terraform] use `.env` in self-host folder for keyserver config variables instead of specifying values in terraform.tfvars or terraform.tfvars.json.
Jul 18 2024, 3:38 PM
will accepted D12798: [terraform] bump staging identity to 0.31-staging.
Jul 18 2024, 3:22 PM
will accepted D12792: [terraform] Increase Identity memory to 2048.
Jul 18 2024, 8:03 AM

Jul 17 2024

will published D12791: [terraform] change keyserver version tag for review.
Jul 17 2024, 7:21 PM
will closed D12730: [terraform] Ensure that the primary service is running before deploying secondary service.
Jul 17 2024, 7:03 PM
will committed rCOMMc46b08343400: [terraform] Ensure that the primary service is running before deploying… (authored by will).
[terraform] Ensure that the primary service is running before deploying…
Jul 17 2024, 7:03 PM
will closed D12729: [terraform] Make number of secondary nodes configured by the user.
Jul 17 2024, 7:03 PM
will committed rCOMMfbd439f617c5: [terraform] Make number of secondary nodes configured by the user (authored by will).
[terraform] Make number of secondary nodes configured by the user
Jul 17 2024, 7:03 PM
will closed D12725: [terraform] add Tunnelbroker configuration variable to self-host.
Jul 17 2024, 7:03 PM
will committed rCOMM53ab9d933f19: [terraform] add Tunnelbroker configuration variable to self-host (authored by will).
[terraform] add Tunnelbroker configuration variable to self-host
Jul 17 2024, 7:03 PM
will closed D12724: [keyserver] add `aws` proxy type for self-hosted keyservers.
Jul 17 2024, 7:02 PM
will committed rCOMMc0e56f735029: [keyserver] add `aws` proxy type for self-hosted keyservers (authored by will).
[keyserver] add `aws` proxy type for self-hosted keyservers
Jul 17 2024, 7:02 PM
will closed D12711: [terraform] Introduce secondary keyserver service.
Jul 17 2024, 7:01 PM
will committed rCOMMbd10a05ecdaf: [terraform] Introduce secondary keyserver service (authored by will).
[terraform] Introduce secondary keyserver service
Jul 17 2024, 7:01 PM
will closed D12710: [terraform] add authoritative keyserver id as a user-specified variable.
Jul 17 2024, 7:01 PM
will closed D12708: [keyserver] configure separation of primary secondary logic.
Jul 17 2024, 7:01 PM
will closed D12709: [terraform] Ensure only one running ecs task for primary service.
Jul 17 2024, 7:01 PM
will committed rCOMMd08760937f81: [terraform] add authoritative keyserver id as a user-specified variable (authored by will).
[terraform] add authoritative keyserver id as a user-specified variable
Jul 17 2024, 7:01 PM
will committed rCOMMfb4a7e309462: [terraform] Ensure only one running ecs task for primary service (authored by will).
[terraform] Ensure only one running ecs task for primary service
Jul 17 2024, 7:01 PM
will committed rCOMM4163b6376fd6: [keyserver] configure separation of primary secondary logic (authored by will).
[keyserver] configure separation of primary secondary logic
Jul 17 2024, 7:01 PM
will closed D12691: [terraform] include REDIS_URL as part of keyserver terraform config.
Jul 17 2024, 7:01 PM
will closed D12690: [terraform] restrict redis access to ecs keyserver service only.
Jul 17 2024, 7:01 PM
will committed rCOMM5810061a8009: [terraform] include REDIS_URL as part of keyserver terraform config (authored by will).
[terraform] include REDIS_URL as part of keyserver terraform config
Jul 17 2024, 7:01 PM
will committed rCOMM5d1bab441ea1: [terraform] restrict redis access to ecs keyserver service only (authored by will).
[terraform] restrict redis access to ecs keyserver service only
Jul 17 2024, 7:01 PM
will closed D12689: [terraform] create comm database on aws rds startup.
Jul 17 2024, 7:01 PM
will committed rCOMMcda5310213fd: [terraform] create comm database on aws rds startup (authored by will).
[terraform] create comm database on aws rds startup
Jul 17 2024, 7:01 PM
will closed D12688: [terraform] make aws rds instance class configurable for self-hosting.
Jul 17 2024, 7:01 PM
will closed D12687: [keyserver] use yarn instead of npm for running prod.
Jul 17 2024, 7:01 PM
will closed D12560: [terraform] set up keyserver load balancer.
Jul 17 2024, 7:01 PM
will committed rCOMM58ebfd29d060: [terraform] make aws rds instance class configurable for self-hosting (authored by will).
[terraform] make aws rds instance class configurable for self-hosting
Jul 17 2024, 7:01 PM
will committed rCOMM9f06f728b442: [keyserver] use yarn instead of npm for running prod (authored by will).
[keyserver] use yarn instead of npm for running prod
Jul 17 2024, 7:01 PM
will committed rCOMM09879f5ea31b: [terraform] set up keyserver load balancer (authored by will).
[terraform] set up keyserver load balancer
Jul 17 2024, 7:01 PM
will closed D12559: [terraform] Increase keyserver primary ecs task resources.
Jul 17 2024, 7:01 PM
will closed D12558: [keyserver] add health check route to keyserver for use by load balancer.
Jul 17 2024, 7:01 PM
will committed rCOMM66409462524b: [keyserver] add health check route to keyserver for use by load balancer (authored by will).
[keyserver] add health check route to keyserver for use by load balancer
Jul 17 2024, 7:01 PM
will committed rCOMMd57e16069a74: [terraform] Increase keyserver primary ecs task resources (authored by will).
[terraform] Increase keyserver primary ecs task resources
Jul 17 2024, 7:01 PM
will closed D12531: [terraform] initial ecs setup for keyserver primary.
Jul 17 2024, 7:01 PM
will committed rCOMM5ecf79ec6e26: [terraform] initial ecs setup for keyserver primary (authored by will).
[terraform] initial ecs setup for keyserver primary
Jul 17 2024, 7:01 PM
will updated the summary of D12531: [terraform] initial ecs setup for keyserver primary.
Jul 17 2024, 6:57 PM
will updated the summary of D12531: [terraform] initial ecs setup for keyserver primary.
Jul 17 2024, 6:56 PM
will abandoned D12529: [terraform] Allow all ip addresses to access self-host internet gateway.
Jul 17 2024, 6:56 PM
will updated the diff for D12730: [terraform] Ensure that the primary service is running before deploying secondary service.

review feedback

Jul 17 2024, 5:20 PM
will updated the diff for D12729: [terraform] Make number of secondary nodes configured by the user.

feedback

Jul 17 2024, 5:17 PM
will updated the diff for D12731: [terraform] Migration script for for self-hosted keyserver.

review feedback with minimum requirements to land

Jul 17 2024, 5:14 PM
will added a comment to D12725: [terraform] add Tunnelbroker configuration variable to self-host.

Going to make turning tunnelbroker url and identity socket address into json objects into a follow up

Jul 17 2024, 4:47 PM
will updated the diff for D12724: [keyserver] add `aws` proxy type for self-hosted keyservers.

rebase for landing

Jul 17 2024, 4:43 PM
will retitled D12725: [terraform] add Tunnelbroker configuration variable to self-host from [terraform] add terraform configuration variable to self-host to [terraform] add Tunnelbroker configuration variable to self-host.
Jul 17 2024, 4:42 PM
will updated the diff for D12711: [terraform] Introduce secondary keyserver service.

rebase

Jul 17 2024, 4:23 PM
will updated the diff for D12711: [terraform] Introduce secondary keyserver service.

rebase

Jul 17 2024, 4:05 PM
will added a comment to D12688: [terraform] make aws rds instance class configurable for self-hosting.

If you could remind me to make sure I set db.m6g.large when we set up my keyserver, that would be great!

Jul 17 2024, 3:42 PM
will updated the diff for D12687: [keyserver] use yarn instead of npm for running prod.

feedback

Jul 17 2024, 3:41 PM
will closed D12475: [keyserver] upgrade redis to version 7 on docker based keyserver.
Jul 17 2024, 3:29 PM
will committed rCOMM841f99f84dc2: [keyserver] upgrade redis to version 7 on docker based keyserver (authored by will).
[keyserver] upgrade redis to version 7 on docker based keyserver
Jul 17 2024, 3:29 PM
will closed D12458: [terraform] initial Redis terraform config.
Jul 17 2024, 3:29 PM
will closed D12457: [terraform] Upgrade AWS Terraform provider to 5.32.0.
Jul 17 2024, 3:29 PM
will committed rCOMMf4eee22671f3: [terraform] initial Redis terraform config (authored by will).
[terraform] initial Redis terraform config
Jul 17 2024, 3:29 PM
will committed rCOMM7c8726a6d4fe: [terraform] Upgrade AWS Terraform provider to 5.32.0 (authored by will).
[terraform] Upgrade AWS Terraform provider to 5.32.0
Jul 17 2024, 3:29 PM
will closed D12339: [terraform] Use default vpc, subnets, and internet gateway for self-host.
Jul 17 2024, 3:29 PM
will committed rCOMM5391d6ca6ca6: [terraform] Use default vpc, subnets, and internet gateway for self-host (authored by will).
[terraform] Use default vpc, subnets, and internet gateway for self-host
Jul 17 2024, 3:29 PM
will updated the summary of D12558: [keyserver] add health check route to keyserver for use by load balancer.
Jul 17 2024, 3:23 PM
will updated the summary of D12558: [keyserver] add health check route to keyserver for use by load balancer.
Jul 17 2024, 3:19 PM
will updated the diff for D12711: [terraform] Introduce secondary keyserver service.

rebase

Jul 17 2024, 3:08 PM
will updated the diff for D12710: [terraform] add authoritative keyserver id as a user-specified variable.

make authoritative id variable a config json object

Jul 17 2024, 3:04 PM
will updated the diff for D12711: [terraform] Introduce secondary keyserver service.

rebase

Jul 17 2024, 2:42 PM
will updated the diff for D12531: [terraform] initial ecs setup for keyserver primary.

configure user credentials as json object variable instead of individual string variables

Jul 17 2024, 2:35 PM
will added a comment to D12730: [terraform] Ensure that the primary service is running before deploying secondary service.

Looks like @will figured out a solution within the bash script in D12731

I think this can be solved with some smart load balancer & network configuration (IIRC there is a way to prioritize health checks traffic in AWS), but I need to research on what's the best way of doing that. I think we can figure it out later.

This sounds like potentially a better solution, but the current solution in D12731 works for now – agree we can address it later. @will maybe you can create a follow-up task before landing to investigate @bartek's proposal here?

Jul 17 2024, 12:49 PM
will added inline comments to D12725: [terraform] add Tunnelbroker configuration variable to self-host.
Jul 17 2024, 12:38 PM
will added inline comments to D12731: [terraform] Migration script for for self-hosted keyserver.
Jul 17 2024, 12:31 PM
will added inline comments to D12731: [terraform] Migration script for for self-hosted keyserver.
Jul 17 2024, 12:04 PM
will updated the diff for D12731: [terraform] Migration script for for self-hosted keyserver.

review feedback, additional checks and comments

Jul 17 2024, 10:05 AM
will added inline comments to D12689: [terraform] create comm database on aws rds startup.
Jul 17 2024, 9:02 AM
will updated the diff for D12689: [terraform] create comm database on aws rds startup.

remove timestamp trigger, running only on first rds creation

Jul 17 2024, 9:00 AM
will updated the test plan for D12475: [keyserver] upgrade redis to version 7 on docker based keyserver.
Jul 17 2024, 8:46 AM
will updated the test plan for D12475: [keyserver] upgrade redis to version 7 on docker based keyserver.
Jul 17 2024, 8:46 AM
will added inline comments to D12731: [terraform] Migration script for for self-hosted keyserver.
Jul 17 2024, 6:33 AM
will added inline comments to D12731: [terraform] Migration script for for self-hosted keyserver.
Jul 17 2024, 6:28 AM
will added a comment to D12711: [terraform] Introduce secondary keyserver service.

@bartek thanks for catching that

Jul 17 2024, 6:19 AM
will updated the diff for D12711: [terraform] Introduce secondary keyserver service.

remove copy of keyserver_secondary.tf from root

Jul 17 2024, 6:18 AM