T111654: Set up TLS for MariaDB replication

Phabricator Link	T111654
Status	resolved
Priority	Medium (orange)
Points
Phabricator Task Created	2015/09/06 05:02 PM
Wiki Page Created	2019/06/09 01:23 PM
Phabricator Task Last Modified	2017/07/11 04:15 PM
Wiki Page Last Updated	2021/04/22 06:43 PM
Phabricator Task Closed	2017/02/09 12:08 PM
Authored By	faidon (Faidon Liambotis)
Assigned To	jcrespo (Jaime Crespo)
Projects	DBA (Meta/Epic) Patch-For-Review SRE (Backlog)
Platform Engineering Initiative Column
Platform Team Workboards Column
Subtasks	T152595: Implement TLS expiration/validation checking for MariaDB certificates (duplicate) T156005: Reimage db1065 and db1066 (resolved) T152029: Rolling restart of parsercache servers for TLS certificate update (resolved) T151995: Rolling restart of external storage servers for TLS certificate update (resolved) T120122: Perform a rolling restart of all MySQL slaves (masters too for those services with low traffic) (resolved) T157702: Followup for TLS MariaDB server roll-out (open) T128077: Create a PKI that can be used by Puppet and for general purpose certificates (resolved) T152188: Restart pending mysql hosts with old TLS cert (resolved)
Parent Tasks	T134809: Apache mariadb SSL/TLS for cross-datacenter writes

Column Transitions: (Added project: ⇑, Removed project: ⇓,Entered column: ⇒, Exited column: ⇐)