Pavlo Tkach and GitHub
19e03dbd2e
Update proxy and nomulus cluster resources ( #2858 )
2025-10-24 20:19:41 +00:00
Pavlo Tkach and GitHub
6bbd7a2290
Update proxy resources, increase ssl handshake timeout ( #2819 )
2025-09-05 18:09:55 +00:00
Pavlo Tkach and GitHub
5e1cd0120f
Adjust proxy resource allocation and update nomulus compute class ( #2814 )
2025-08-28 18:49:16 +00:00
gbrodman and GitHub
bdaab9daa5
Tag more junit versions to <6.0 ( #2809 )
...
We're still picking up some 6.0.0-M2 jars which are causing failures at
least for me when trying to run individual tests in IDEA.
2025-08-22 02:55:59 +00:00
Weimin Yu and GitHub
7c92928f2c
Update gradle dependency locks ( #2806 )
...
Also emoved Junit-4.
2025-08-19 16:17:47 +00:00
Pavlo Tkach and GitHub
de8d205657
Make k8s adjustments ( #2803 )
...
This increases hikari fetch size to 40 from 20 in order to decrease the
amount of round trips
This also sets lower CPU as we seem to have overshot CPU consumtion
This also set min replicas to 8 for EPP and max to 16 as we've been
running on 8-10 for the last week
2025-08-19 14:24:11 +00:00
Pavlo Tkach and GitHub
cc347264f1
Revert "Remove nodeSelector from k8s deployments ( #2798 )" ( #2799 )
...
This reverts commit 5cef2dd8b5 .
We faced CPU quota issue with standard machine type, so rolling back to c4
for now to monitor server performance and decide if we want to try to
downgrade again in the future.
2025-08-13 15:05:54 +00:00
Pavlo Tkach and GitHub
5cef2dd8b5
Remove nodeSelector from k8s deployments ( #2798 )
...
nodeSelector can limit scheduling capabilities of k8s, which leads to delays in assigning new workloads. Since we do not require and particular machine for execution it can be removed.
2025-08-10 16:16:48 +00:00
gbrodman and GitHub
62b2585220
Fix load-testing URL in backend routing k8s file ( #2797 )
2025-08-08 20:20:40 +00:00
Pavlo Tkach and GitHub
18614ba11e
Update resource allocation for all Nomulus GKE deployments ( #2796 )
...
ALl deployments received update to averageUtilization cpu. This should allow us to stay ahead of the curve of traffic and create instances before we cpu reached the limit.
Frontend cpu allocation has caused "noise neighbors" problem with pods assigned to nodes where there's not enough bursting capacity, so I increased it.
Adjusted rest of the deployments according to their utilization.
2025-08-08 17:55:08 +00:00
Pavlo Tkach and GitHub
b17125ae9a
Disable k8s whois routing ( #2740 )
2025-04-17 15:20:32 +00:00
Pavlo Tkach and GitHub
dfef733360
Incerase memory request for pubapi and frontend to 1Gi ( #2743 )
2025-04-11 16:17:43 +00:00
Pavlo Tkach and GitHub
03872b508f
Exclude prober endoint from sed command canary ( #2739 )
2025-04-07 21:13:13 +00:00
Pavlo Tkach and GitHub
1096f201cd
Add GKE readiness probe ( #2735 )
2025-04-04 21:33:43 +00:00
Lai Jiang and GitHub
af321fb65e
Make frontend deployment auto scale ( #2736 )
...
Now that we have effective global sessions thanks to #2734 , there is no
longer a need to keep the number of pods on the EPP service static.
We are also not vulnerable to random pod restarts. K8s never guarantees
perpetual pod lifetime anyway, and not having to be at its mercy is
certainly a relief.
2025-04-02 18:58:52 +00:00
Lai Jiang and GitHub
a64dc21f96
make the deploy task deploy to GKE ( #2734 )
...
Also always pulls the latest images from repos instead of relying on
local cases. This makes it so that a local docker build is always fresh.
2025-03-31 22:38:53 +00:00
Pavlo Tkach and GitHub
0381533a35
Set grace period to 1s for immediate pods restart ( #2733 )
2025-03-31 19:15:13 +00:00
Lai Jiang and GitHub
4999a72d96
Save session data directly in a cookie ( #2732 )
2025-03-31 16:21:50 +00:00
Pavlo Tkach and GitHub
2d072c3844
Update jetty console static files cache policies ( #2731 )
2025-03-28 19:53:02 +00:00
Pavlo Tkach and GitHub
c15dec4419
Downgrade node type for pubapi and console, enable bursting for frontend and backend ( #2723 )
2025-03-28 19:14:33 +00:00
Lai Jiang and GitHub
11702bc940
Revert "Add a redirect for the console bare domain ( #2718 )" ( #2724 )
...
This reverts commit 2a01c12b14 .
2025-03-19 22:48:31 +00:00
Lai Jiang and GitHub
2d82646421
Uncap Dagger version ( #2721 )
...
The latest version of Dagger (2.55) now supports jakarta.inject.
2025-03-17 14:51:04 +00:00
Lai Jiang and GitHub
50260dca5f
Upgrade to Gradle 8.13 ( #2720 )
2025-03-15 00:30:32 +00:00
Lai Jiang and GitHub
2a01c12b14
Add a redirect for the console bare domain ( #2718 )
2025-03-14 18:16:25 +00:00
Lai Jiang and GitHub
92ebd0dedb
Build different console versions for different environments ( #2715 )
...
TESTED=deployed to alpha
2025-03-11 23:39:28 +00:00
Pavlo Tkach and GitHub
ea1e8d5cc5
Add console gzip compression to js,css and html files ( #2696 )
2025-02-27 22:52:10 +00:00
Lai Jiang and GitHub
bcf42bd287
Use static IPs for EPP endpoints ( #2685 )
...
These IPs are now provisioned by Terraform. Also delete the
get-endpoints.py script as it is no longer necessary.
2025-02-24 16:38:47 +00:00
Lai Jiang and GitHub
97fc2c0b66
Add an annotation to the deployment ( #2683 )
...
This allows us to easily tell which tag was deployed.
Also set the gateway to use named address so they are stable, and so
that we can attach an IPv6 record to it. Auto-provisioned addresses are
IPv4 only.
2025-02-21 16:30:32 +00:00
Lai Jiang and GitHub
3f2a42ab8d
Expose EPP via saidcar proxy ( #2680 )
2025-02-19 18:57:25 +00:00
Lai Jiang and GitHub
6f7ae1eabc
Redirect HTTP to HTTPS ( #2679 )
...
This opens up port 80 on the load balancer IP and upgrades all HTTP
request to HTTPS.
TESTED=tested on alpha.
2025-02-18 16:57:18 +00:00
Lai Jiang and GitHub
eb978ebbd5
Let nomulus tool connect to sandbox GKE by default ( #2674 )
2025-02-16 18:10:03 +00:00
Lai Jiang and GitHub
538260521b
Update Nomulus deployment script ( #2677 )
...
We only deploy to the us-central1 cluster in order to minimize database
locality issue.
2025-02-14 17:31:18 +00:00
Lai Jiang and GitHub
a63812160e
Upgrade to Gradle 8.12.1 ( #2671 )
2025-02-07 15:23:02 +00:00
Lai Jiang and GitHub
8a36fb5f1f
Update Cloud Scheduler and Cloud Tasks deployment process ( #2666 )
2025-02-06 18:53:50 +00:00
Lai Jiang and GitHub
b775e4a178
Pull credentials from fleet for all clusters ( #2647 )
...
All clusters have switched to using private APIs.
2025-01-22 16:58:56 +00:00
Lai Jiang and GitHub
799f0449ad
Only pull credential from the fleet on crash ( #2645 )
...
Only crash has the policy controller installed for now.
2025-01-21 18:40:52 +00:00
Lai Jiang and GitHub
9f22f2e8ae
Pull nomulus cluster credentials from the fleet ( #2643 )
...
After private endpoint is enabled, we cannot pull the credentials
directly via `gcloud containers cluster get-credentials`.
2025-01-16 15:06:02 +00:00
Lai Jiang and GitHub
cea3da01a0
Expose Web WHOIS redirects ( #2634 )
...
We are required to respond to HTTP(S) requests on port 80/443 on the
same domain where we serve port 43 WHOIS requests. The proxy already
does this by redirecting to the web WHOIS lookup page on the marketing
website.
This PR makes it so that requests to port 80/443 can be routed to the
proxy for redirect.
TESTED=tested on crash and the redirect works.
2025-01-10 17:25:16 +00:00
Lai Jiang and GitHub
1cbbc660d2
Explicity specify deployment order for queues and scheduler tasks ( #2631 )
...
If we deploy Nomulus, we should do that before queues and the scheduler
tasks are updated.
2025-01-08 21:11:24 +00:00
Lai Jiang and GitHub
e0bbff827e
Upgrade to Gradle 8.12 ( #2630 )
2025-01-08 18:43:10 +00:00
Lai Jiang and GitHub
7641b05f12
Expose EPP and WHOIS endpoints on reginal load balancers ( #2627 )
...
k8s does not have a way to expose a global load balancer with TCP
endpoints, and setting up node port-based routing is a chore, even with
Terraform (which is what we did with the standalone proxy).
We will use Cloud DNS's geolocation routing policy to ensure that
clients connect to the endpoint closest to them.
2024-12-26 15:25:02 +00:00
Lai Jiang and GitHub
c9c61e4f17
Write GKE metrics with the apprioate labels ( #2626 )
...
Also makes preperations to expose the sidecar proxy.
2024-12-18 16:15:54 +00:00
Lai Jiang and GitHub
da8df1f4d9
Make GKE the default in alpha and qa ( #2624 )
2024-12-17 17:40:03 +00:00
Lai Jiang and GitHub
f9d2839590
Add necessary changes to provision QA with Terraform ( #2618 )
...
Also programmatically determine backend service IDs.
2024-12-12 18:39:18 +00:00
Lai Jiang and GitHub
cb3738d540
Upgrade to Gradle 8.11.1 ( #2619 )
2024-12-09 18:29:57 +00:00
Lai Jiang and GitHub
a9ba770bfa
Add canary service to GKE ( #2594 )
2024-10-22 17:12:00 +00:00
Lai Jiang and GitHub
4d96e5a6b1
Remove cap on soy ( #2592 )
...
We still need to cap the protobuf version that soy depends on, but the
rest of nomulus can use the latest version of protobuf.
2024-10-18 17:21:26 +00:00
Lai Jiang and GitHub
1171c5cfcb
Delete legacy console ( #2579 )
2024-10-17 20:48:10 +00:00
Lai Jiang and GitHub
5e41e84b8d
Upgrade avro version ( #2587 )
...
Per b/371714822.
2024-10-07 15:43:53 +00:00
Lai Jiang and GitHub
72dd8658cf
Upgrade to Gradle 8.10.2 ( #2571 )
2024-09-26 17:53:45 +00:00