s/salt/__salt__
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
All Stories
Apr 2 2023
Update environment for the concept of feature flags. See https://help.penpot.app/technical-guide/configuration/. Bump PostgreSQL and Redis versions. Add Exim container so we can send mail.
A Kafka offset reset was needed:
If one of the two topics lag, we'd have:
$ notification-push --project Nasqueron --group ops --service monitoring --type autoheal.kafka_offset.start --text "Containers sentry_post_process_forwarder_ have an issue. Identified as Kafka offet issue. Starting automatic healing procedure." $ notification-push --project Nasqueron --group ops --service monitoring --type autoheal.kafka_offset.done --text "Containers sentry_post_process_forwarder_ automatic healing one. Containers should be alive."
We don't use uptime anymore.
Configuration looks good to me, matches GitHub and Vault content, and is ready to be deployed this Sunday.
Provisioned new secrets to Vault under ops/secrets/nasqueron/penpot/
We want to try to build a status page, so Penpot could be a nice tool for that.
We've an UX project for it, to design our status page solution.
Apr 1 2023
In T1755#24731, @dereckson wrote:DNS configuration
notifications.notifications-test.nasqueron.org. 86400 IN CNAME www3.nasqueron.org.
orange-rabbit.notifications-test.nasqueron.org. 86400 IN CNAME www3.nasqueron.org.
vault.notifications-test.nasqueron.org. 86400 IN CNAME www3.nasqueron.org.
Use "integration" to better stress on the functional role of this environment, to integrate new features.
Scope for this change: Docker containers + nginx config
Rebased. Addressed some of the comments.
Code is ready both for Notifications and keruald/dockerhub, should be tested with the next build we want to promote before merging.
Missing trailing comma in array
The nasqueron/notifications image took from D2958, so we're done:
Mar 31 2023
chmod ; s/authgrove/auth-grove/
+vault_mount_paths
Vault part is OK by adding apps to vault_mount_paths.
Simplify Vault path by bypassing this prefix thing
Vault policy
Last tweaks, e.g. read durable parameters and adjust permissions like currently deployed
declare wearg-notifications as durable
So if someone needs more recent ICU, the cleaner way would be a custom Bullseye build of the icu source package. We'll include it in packages.nasqueron.org, and from there, the repository can then be used in the image both for libxml2 and PHP itself.
"Fun" fact: libxml requires libicu, and pulls the system one of course:
Debian images will lag too much, review https://icu.unicode.org/download, we're at 71, Debian Bullseye is stuck at 67.
For shellserver and devserver role, the intl extension is already installed, per bdd61c48. MediaWiki is quoted as example of application using it.