Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Delete the legacy VPN vpn.jenkins.io related resources #3689

Closed
dduportal opened this issue Jul 27, 2023 · 9 comments
Closed

Delete the legacy VPN vpn.jenkins.io related resources #3689

dduportal opened this issue Jul 27, 2023 · 9 comments

Comments

@dduportal
Copy link
Contributor

This issue tracks the work to remove the resources used by the service vpn.jenkins.io which is to be sunset once #3688 is done, as no other services will be requiring this legacy VPN.

Elements to remove:

@dduportal
Copy link
Contributor Author

Following #3688, the VPN VM was shut down to check if we forgot a usage somewhere or not

@dduportal dduportal added this to the infra-team-sync-2023-09-05 milestone Aug 29, 2023
@dduportal dduportal removed the triage Incoming issues that need review label Aug 31, 2023
@dduportal dduportal self-assigned this Aug 31, 2023
@dduportal
Copy link
Contributor Author

#3688 has been completed: there is no more usages requiring the former prodvpn machine (service vpn.jenkins.io). Let's roll!

@dduportal
Copy link
Contributor Author

Update: revoked and cleaned the puppet certificate on puppet.jenkins.io VM:

puppetserver ca revoke --certname vpn.jenkins.io
puppetserver ca clean --certname vpn.jenkins.io

@dduportal
Copy link
Contributor Author

Update:

  • status.jenkins.io services definition updated in jenkins-infra/status@a2fb33e
  • Started to remove (manually managed) Azure resource of the prodvpn resource group:

Capture d’écran 2023-08-31 à 13 48 02

@dduportal
Copy link
Contributor Author

Update:

  • Remove the resources, then their resource group prodvpn
  • Removed the DNS record vpn.jenkins.io which was pointing to 104.209.251.202

dduportal added a commit to jenkins-infra/kubernetes-management that referenced this issue Aug 31, 2023
…list (#4302)

cleanup(ldap) remove IP of `vpn.jenkins.io` legacy VM from the allow list

Ref jenkins-infra/helpdesk#3689
@dduportal
Copy link
Contributor Author

@dduportal
Copy link
Contributor Author

@dduportal
Copy link
Contributor Author

Update:

  • docker-openvpn image deployed after cleanup

@dduportal
Copy link
Contributor Author

Finished, we can close

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant