Wikimedia Release Engineering Team/Deployment pipeline/2017-07-11

2017-07-11

Who's here:

Last Time

US independence day means no meeting last time

2017-06-27

Next Time, Previous Time

We didn't do a Next Time last time we met :(

Updates on TODOs:

• Jenkins credentials store
  • Dan and Tyler met, looked at Jenkins security matrix
  • Proposal: https://phabricator.wikimedia.org/T169557
  • tl;dr: get rid of job create/modify and node create/modify permissions for everyone except "ci admins"

• Dan went to service's meeting

Topics

• operations/docker/images/production/images
  • so small!
  • such makefile!

• Paths inside the container images
  • RfC @ https://phabricator.wikimedia.org/T169998

• Pod Network policy
  • Draft proposal at https://phabricator.wikimedia.org/T170111
  • explicitly whitelists any connections to/from internet that a particular pod is making

Next Time

• releng
  • jenkins work (perms, credentials)
  • blubber bugs for mathoid build

• services
  • developer cli -- sync up with blubber work

• ops
  • networking draft proposal work
  • k8s upgrade to 1.5 (goal is 1.5+) https://phabricator.wikimedia.org/T170119
    • 1.7 just released and seems interesting
    • needs to be discussed with toollabs
    • hopefully be able to drop patches for version 1.4

As Always

• Release Pipeline Workboard
• Meeting notes