2025-05-05: Staging Change HTTP Router Rule Set to Session Token
Staging Change
Change Summary
This change enables session token routing for HTTP router component on staging environment.
Change Details
- Services Impacted - ServiceHttpRouter
-
Change Technician -
@vglafirov
- Change Reviewer - @sxuereb
- Time tracking - 120 minutes
- Scheduled Date and Time - 2025-05-05 10:00 UTC
- Downtime Component - none
Set Maintenance Mode in GitLab
If your change involves scheduled maintenance, add a step to set and unset maintenance mode per our runbooks. This will make sure SLA calculations adjust for the maintenance period.
Detailed steps for the change
Change Steps - steps to take to execute the change
Estimated Time to Complete (mins) - 180
-
Set label changein-progress /label ~change::in-progress
-
Merge MR -
Merge MR -
Trigger a pipeline in ops with CHANGE_LOCK_OVERRIDE=true
variable -
Wait for the deployment pipeline from to finish. -
Wait 15 min, and monitor -
Increase ROLLOUT_PERCENTAGES
from5
to25
👉 gitlab-com/gl-infra/cells/http-router-deployer!87 (merged) -
Wait 15 min, and monitor -
Increase ROLLOUT_PERCENTAGES
from25
to50
👉 gitlab-com/gl-infra/cells/http-router-deployer!88 (merged) -
Wait 15 min, and monitor -
Increase ROLLOUT_PERCENTAGES
from50
to75
👉 gitlab-com/gl-infra/cells/http-router-deployer!89 (merged) -
Wait 15 min, and monitor -
Increase ROLLOUT_PERCENTAGES
from75
to5 25 50 75 100"
👉 gitlab-com/gl-infra/cells/http-router-deployer!90 (merged)-
Remove CHANGE_LOCK_OVERRIDE
andOVERRIDE_LAST_PERCENTAGE
-
-
Set label changecomplete /label ~change::complete
Rollback
Rollback steps - steps to be taken in the event of a need to rollback this change
Estimated Time to Complete (mins) - 30
-
Merge MR -
Set label changeaborted /label ~change::aborted
Monitoring
Key metrics to observe
- Metric: General SLA
- Location: https://dashboards.gitlab.net/goto/JPksugDNg?orgId=1
- What changes to this metric should prompt a rollback: Drop in SLA percentage
- Metric: API Service Overview
- Location: https://dashboards.gitlab.net/goto/4pY8XRDNg?orgId=1
- What changes to this metric should prompt a rollback: APDEX and Error rate
- Metric: Web Service Overview
- Location: https://dashboards.gitlab.net/goto/FKglXRvHR?orgId=1
- What changes to this metric should prompt a rollback: APDEX and Error rate
- Metrics: Exception in HTTP Router
- Location: https://new-sentry.gitlab.net/organizations/gitlab/projects/http-router/?project=39
- What changes to this metric should prompt a rollback: Increase in error rate
- Metrics: CPU time for HTTP Router
- Location: https://dash.cloudflare.com/852e9d53d0f8adbd9205389356f2303d/workers/services/view/staging-gitlab-com-cells-http-router/production/metrics
- What changes to this metric should prompt a rollback: Increase on CPU time that is outside of out 50ms SLO
- Metrics: HTTP Router Error Ratio
- Location: https://dashboards.gitlab.net/d/http-router-main/http-router3a-overview?orgId=1&from=now-6h%2Fm&to=now%2Fm&timezone=utc&var-PROMETHEUS_DS=mimir-gitlab-ops&var-environment=gstg
- What changes to this metric should prompt a rollback: Increase in error ratio
- Metrics: Pingdom E2E latency
- Location: https://dashboards.gitlab.net/goto/CsfxXRDHg?orgId=1
- What changes to this metric should prompt a rollback: Increase in E2E latency
- Metric: Blackbox Latency
- Location: https://dashboards.gitlab.net/goto/EfSbuRDHg?orgId=1
- What changes to this metric should prompt a rollback: Increase in Blackbox latency
Change Reviewer checklist
-
Check if the following applies: - The scheduled day and time of execution of the change is appropriate.
- The change plan is technically accurate.
- The change plan includes estimated timing values based on previous testing.
- The change plan includes a viable rollback plan.
- The specified metrics/monitoring dashboards provide sufficient visibility for the change.
-
Check if the following applies: - The complexity of the plan is appropriate for the corresponding risk of the change. (i.e. the plan contains clear details).
- The change plan includes success measures for all steps/milestones during the execution.
- The change adequately minimizes risk within the environment/service.
- The performance implications of executing the change are well-understood and documented.
- The specified metrics/monitoring dashboards provide sufficient visibility for the change.
- If not, is it possible (or necessary) to make changes to observability platforms for added visibility?
- The change has a primary and secondary SRE with knowledge of the details available during the change window.
- The change window has been agreed with Release Managers in advance of the change. If the change is planned for APAC hours, this issue has an agreed pre-change approval.
- The labels blocks deployments and/or blocks feature-flags are applied as necessary.
Change Technician checklist
-
Check if all items below are complete: - The change plan is technically accurate.
- This Change Issue is linked to the appropriate Issue and/or Epic
- Change has been tested in staging and results noted in a comment on this issue.
- A dry-run has been conducted and results noted in a comment on this issue.
- The change execution window respects the Production Change Lock periods.
- For C1 and C2 change issues, the change event is added to the GitLab Production calendar.
- For C1 and C2 change issues, the SRE on-call has been informed prior to change being rolled out. (In #production channel, mention
@sre-oncall
and this issue and await their acknowledgement.) - For C1 and C2 change issues, the SRE on-call provided approval with the eoc_approved label on the issue.
- For C1 and C2 change issues, the Infrastructure Manager provided approval with the manager_approved label on the issue. Mention
@gitlab-org/saas-platforms/inframanagers
in this issue to request approval and provide visibility to all infrastructure managers. - Release managers have been informed prior to any C1, C2, or blocks deployments change being rolled out. (In #production channel, mention
@release-managers
and this issue and await their acknowledgment.) - There are currently no active incidents that are severity1 or severity2
- If the change involves doing maintenance on a database host, an appropriate silence targeting the host(s) should be added for the duration of the change.
Edited by Steve Xuereb