Confirmed users
1,201
edits
Auto-tools/Projects/Pulse: Difference between revisions
→To upgrade a ssl certificate on pulse.mozilla.org
| (6 intermediate revisions by 2 users not shown) | |||
| Line 197: | Line 197: | ||
= Admin Procedures = | = Admin Procedures = | ||
dustin and the taskcluster team have access to the Pulse cluster on CloudAMQP and the following related services: | |||
* PulseGuardian should be deleting queues that are too long. If you need to manually delete a queue, use the Management UI. Try to ping the queue owner first before killing if possible. | * PulseGuardian should be deleting queues that are too long. If you need to manually delete a queue, use the Management UI. Try to ping the queue owner first before killing if possible. | ||
| Line 203: | Line 203: | ||
== To upgrade a ssl certificate on pulse.mozilla.org == | == To upgrade a ssl certificate on pulse.mozilla.org == | ||
Open a bug with IT to generate a new certificate | Open a bug with IT to generate a new certificate https://bugzilla.mozilla.org/enter_bug.cgi?product=Infrastructure%20%26%20Operations&component=SSL%20Certificates | ||
{{bug|1532325}} | See {{bug|1532325}} for an example. | ||
IT needs to email support@cloudamqp.com with the new cert. The cloudampq support team will install it on all our of cloudampq nodes. After it has been installed, you can login to the administrative start the nodes one by one which will not result any downtime. (Ensure you wait for the node to restart before restarting another one.) Verify that the certs are installed on the nodes | IT needs to email support@cloudamqp.com with the new cert. The cloudampq support team will install it on all our of cloudampq nodes. After it has been installed, you can login to the administrative start the nodes one by one which will not result any downtime. (Ensure you wait for the node to restart before restarting another one.) Verify that the certs are installed on the nodes | ||
* https://sslanalyzer.comodoca.com/?url=pulse.mozilla.org | |||
https://sslanalyzer.comodoca.com/?url=pulse.mozilla.org | * https://sslanalyzer.comodoca.com/?url=orange-antelope-01.rmq.cloudamqp.com | ||
https://sslanalyzer.comodoca.com/?url=orange-antelope-01.rmq.cloudamqp.com | * https://sslanalyzer.comodoca.com/?url=orange-antelope-02.rmq.cloudamqp.com | ||
https://sslanalyzer.comodoca.com/?url=orange-antelope-02.rmq.cloudamqp.com | * https://sslanalyzer.comodoca.com/?url=orange-antelope-01.rmq.cloudamqp.com | ||
https://sslanalyzer.comodoca.com/?url=orange-antelope-01.rmq.cloudamqp.com | |||
This should show the dates for the new certificate and that the cert is trusted by Mozilla and Microsoft. | This should show the dates for the new certificate and that the cert is trusted by Mozilla and Microsoft. | ||
Cloudampq updated their web page since we last did this so that you should be able to upload the cert yourself and have it propagate. See the admin console under "Certificate". | |||
= More reading = | = More reading = | ||