Configurations to run Zoekt server in production
- Architecture blueprint https://docs.gitlab.com/ee/architecture/blueprints/code_search_with_zoekt/
- Reliability tracker issue: https://gitlab.com/gitlab-com/gl-infra/reliability/-/issues/17297
- Readiness Review: gitlab-com/gl-infra/readiness#65 (closed)
- Infrasec review issue: https://gitlab.com/gitlab-com/gl-security/security-operations/infrastructure-security/bau/-/issues/404
Todo
-
Find new home for docker images gitlab-org/build/CNG!1320 (merged) -
Get a helm chart repo created ht tps://gitlab.com/gitlab-com/team-member-epics/access-requests/-/issues/20786 -
Get a code review of the helm chart from Reliability and Delivery gitlab-org/cloud-native/charts/gitlab-zoekt!1 (merged) -
Add a .gitlab-ci.yml
to the helm chart to push tocharts.gitlab.io
gitlab-org/cloud-native/charts/gitlab-zoekt!4 (merged) -
Add an internal load balancer with a stable prereservered IP address using the chart per gitlab-com/gl-infra/charts!61 (comment 1281120395) -
Update chart to use new images from gitlab-org/build/CNG!1320 (merged) -
Include in gitlab/gitlab
chart via requirements as optional dependency gitlab-org/charts/gitlab!3018 (merged) -
Add the network security policy to the gitlab-zoekt
chart gitlab-org/cloud-native/charts/gitlab-zoekt!7 (merged) -
Add support for configuring LoadBalancer service to the gitlab-zoekt
chart gitlab-org/cloud-native/charts/gitlab-zoekt!8 (merged) -
Bump the version of gitlab-zoekt
to0.0.2
and update the dependency in the maingitlab/gitlab
chart gitlab-org/charts/gitlab!3049 (merged) -
Get a static IP address assigned for Zoekt on GSTG and GPRD https://ops.gitlab.net/gitlab-com/gl-infra/config-mgmt/-/merge_requests/5329 - GSTG:
10.224.34.112
- GPRD:
10.216.8.36
- GSTG:
-
Install Zoekt on staging via configuring the gitlab chart dependency gitlab-com/gl-infra/k8s-workloads/gitlab-com!2618 (merged) gitlab-com/gl-infra/production#8598 (closed) -
This should be also reviewed by infrasec for the security policies gitlab-com/gl-infra/readiness!146 (comment 1314653358)
-
-
Install Zoekt on production via configuring the gitlab chart dependency
Edited by Dylan Griffith