Wikimedia Release Engineering Team/SSD Sync Up/2019-05-28
Last Time: 2019-05-21
Deployment Pipeline
edit- CI arch doc
- Processing Antoine's feedback
- Seeking feedback from Krinkle
- on team's Google Docs now, will reach out to outsiders this week: who?
- SRE?
- MediaWiki devs?
- everyone?
- SRE asked about a "secure CI" to build Docker images, Debian packages
- separate from current Jenkins, which seems to not be sufficiently secure for them (understandable)
- should we do something or have Greg decide if we should take this on?
- Consensus: We probably shouldn't have lots of CIs, at least without talking to Greg first.
- There are many security aspects that need to be thought through carefully
- Also K8s maintenance questions.
- integration/config changes for .pipeline/config.yaml
- Dan: Trying to get blubber's pipeline/config.yaml working, surfacing bugs that weren't covered in unit tests (hard to test integration with k8s). Almost working.
- A high degree of duplication in blubber's pipeline config already. Maybe we need an `includes:` under each pipeline ala blubber variant includes?
- e.g. https://gerrit.wikimedia.org/r/c/blubber/+/511784/6/.pipeline/config.yaml
- Dan: Trying to get blubber's pipeline/config.yaml working, surfacing bugs that weren't covered in unit tests (hard to test integration with k8s). Almost working.
Local Development
editStill in-flight / pending work:
- Looking to start running `helm lint` in CI for local-charts.
- Various tasks created during Hackathon.
- Ubuntu: https://phabricator.wikimedia.org/T223715
- Windows: https://phabricator.wikimedia.org/T223659
- EventLogging: https://phabricator.wikimedia.org/T223643
- Redis: https://phabricator.wikimedia.org/T223642
- Xdebug: https://phabricator.wikimedia.org/T223641
- xhgui: https://phabricator.wikimedia.org/T223670