21165: Adds extra state to uninstall wb1's package from workbench node. I opted for specifically uninstalling the package instead of adding the arvados.workbench.package.clean state, because that state also removes packages that might be needed for other services. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
21285: Fixes worker & nofile calculations on nginx config. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
21285: Updates overview dashboard to include concurrent reqs queue names. At the moment we have 2 queues: "api" & "tunnel", I think this change will allow the dashboard to adapt to potential new queues (instead of hardcoding queue names in the query) Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
21285: Adds MaxGatewayTunnels' value to nginx's request queue size. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
21278: Remove the '/search.*' to '/search-results' redirect It produces an infinite loop and I don't think the /search endpoint is really compatible with the /search-results endpoint anyway, and it's less likely for people to have old hyperlinks to search results than to projects or collections. Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
20690: Bring back the WorkbenchSecretKey config as a dummy value. Also, make config-check non-strict, to support deprecated config knobs on the config.yml file. Eventually, the arvados-formula will require updating but we have to make sure that a proper branch strategy is in use, as changing it now would break existing deployments. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
20690: Sets nginx snippets on its own pillar sls file. Because we're not using the nginx passenger pillar on non controller nodes anymore, we needed a way of requesting the ssl hardening snippet independently. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
20953: Don't make prominent the SSL cert expiration normal status. In order to not be distracting, the "green status" on the main Dashboard is now colored with a transparent background. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
20953: Sets sensible coloring thresholds on cert expire dates. If using Let's Encrypt certificates, the max lifetime is 3 months, so it'll show green if the expiration is >2 months out, yellow if it's >1. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
20953: Adds blackbox-exporter HTTP probes and SSL Monitor grafana dashboard. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>
20969: Reloads nginx when custom TLS cert and key files change. The way it's implemented may appear overly complicated, but we do the extra check to avoid restarting nginx with a crt file that doesn't correspond to the key file. This will happen otherwise, as 'cmd.run' will get executed on any of the files listed inside 'onchanges'. Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>