create a new static-master-chi server in the gnt-chi cluster
in ci-templates#8 (closed) we have identified issues with the performance of the review apps (and possibly all static shim) deployments. but diagnostics are pretty hard because the master server is getting hammered by many other deployments, namely dist.tpo and tbb-nightlies, which take up a lot of IO and make it harder to see what's going on.
create a new master in the gnt-chi cluster, called static-master-chi-02.torproject.org
, which will process, for now, only the review apps static site. this will involve following the new-machine procedure:
https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/new-machine
you will likely need to follow the "new ganeti instance" procedure, there's an example for the gnt-chi cluster here:
https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/ganeti#other-examples
depending on disk requirements (something similar to the current static-master-fsn box), you might need to create the VM with disks in the SAN, which is documented one section below:
https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/ganeti#iscsi-integration
that should get you a "basic" box with nothing configured. then you'll need to configure it as a static master. that procedure is undocumented. we have a procedure for configuring a mirror which could serve as inspiration:
https://gitlab.torproject.org/tpo/tpa/team/-/wikis/howto/static-component/#installation
the procedure should end up documented above of course. my guess is that you won't need to install apache (which is only needed on mirrors). you might need to add some allowedGroups
in LDAP (check the current master for an example), and will definitely need a class in puppet, although I'm not sure the gets triggered
hack is necessary, because it's just a master and won't be active until it's added into modules/roles/misc/static-components.yaml
.
do let me know if you have any concerns or questions about the master procedure. i don't believe I have performed it myself: @weasel did the last deploy, but i should be familiar enough with the setup to find out what's missing, if anything.