1234300 - Deploy fix to encrypt jenkins login

Status: RESOLVED FIXED

(Infrastructure & Operations :: Change Requests, task)

Description

[Richard Weiss [:r2]]

This change will fix bug 1234271. It is covered by https://github.com/nubisproject/nubis-ci/issues/89

We will deploy the fix to the CI instance in the Plan B Akama eDNS AWS account and test it against the stage environment.

Comment 1

[Richard Weiss [:r2]]

    date, time, duration of maintenance: 
    system(s) affected: Akamai eDNS slave running in AWS
    end-user impact: Should be none as this is a redundant copy and we should not be touching the production instance
    maintenance plan and timeline (link to a wiki or etherpad is fine): https://docs.google.com/a/mozilla.com/spreadsheets/d/1AlfZ0P2hEUxxA9GWEFFAWz5_TqaB8oxq-ahQAfCKZ8o/edit?usp=sharing
    rollback plan / rollback point (at which point will you determine to roll back): if testing fails we first attempt to troubleshoot and then redeploy the previous version.
    notification mechanisms: bug and email to MOC.
    who will be point, who else will be involved: point is r2. gozer and digi will execute.

Comment 2

[Richard Weiss [:r2]]

terrform changes to be executed:

    ~ aws_autoscaling_group.ci
        launch_configuration:      "terraform-hjq53oosyraufaqu27ezptwvia" => "${aws_launch_configuration.ci.name}"
        wait_for_capacity_timeout: "" => "10m"
     
    ~ aws_elb.ci
        listener.379001870.instance_port:       "" => "8080"
        listener.379001870.instance_protocol:   "" => "http"
        listener.379001870.lb_port:             "" => "443"
        listener.379001870.lb_protocol:         "" => "https"
        listener.379001870.ssl_certificate_id:  "" => "arn:aws:iam::604263479206:server-certificate/us-east-1.plan-b-akamai-edns-slave.nubis.allizom.org"
        listener.3931999347.instance_port:      "8080" => "0"
        listener.3931999347.instance_protocol:  "http" => ""
        listener.3931999347.lb_port:            "80" => "0"
        listener.3931999347.lb_protocol:        "http" => ""
        listener.3931999347.ssl_certificate_id: "" => ""
     
    -/+ aws_launch_configuration.ci
        associate_public_ip_address: "false" => "0"
        ebs_block_device.#:          "0" => "<computed>"
        ebs_optimized:               "false" => "<computed>"
        enable_monitoring:           "true" => "1"
        iam_instance_profile:        "ci-akamai-admin-us-east-1" => "ci-akamai-admin-us-east-1"
        image_id:                    "ami-67fd840d" => "ami-67fd840d"
        instance_type:               "m3.medium" => "m3.medium"
        key_name:                    "nubis" => "nubis"
        name:                        "terraform-hjq53oosyraufaqu27ezptwvia" => "<computed>"
        root_block_device.#:         "0" => "<computed>"
        security_groups.#:           "3" => "3"
        security_groups.1475740659:  "sg-9dbbfdfa" => "sg-9dbbfdfa"
        security_groups.2486292865:  "sg-9ebbfdf9" => "sg-9ebbfdf9"
        security_groups.31022124:    "sg-d11053b6" => "sg-d11053b6"
        user_data:                   "72d7d29113a85d1f1fee10f6f3d8196d286c6896" => "06701c2e62a093ea183fd0e8c47abb981c553545" (forces new resource)
     
    ~ aws_security_group.elb
        ingress.2214680975.cidr_blocks.#:     "1" => "0"
        ingress.2214680975.cidr_blocks.0:     "0.0.0.0/0" => ""
        ingress.2214680975.from_port:         "80" => "0"
        ingress.2214680975.protocol:          "tcp" => ""
        ingress.2214680975.security_groups.#: "0" => "0"
        ingress.2214680975.self:              "0" => "0"
        ingress.2214680975.to_port:           "80" => "0"
        ingress.2617001939.cidr_blocks.#:     "0" => "1"
        ingress.2617001939.cidr_blocks.0:     "" => "0.0.0.0/0"
        ingress.2617001939.from_port:         "" => "443"
        ingress.2617001939.protocol:          "" => "tcp"
        ingress.2617001939.security_groups.#: "0" => "0"
        ingress.2617001939.self:              "" => "0"
        ingress.2617001939.to_port:           "" => "443"
     
     
    Plan: 1 to add, 3 to change, 1 to destroy.

Comment 3

[Richard Weiss [:r2]]

Change complete and tested.