Known Issue: codereview.chromium.org is unreachable

11 views
Skip to first unread message

Aaron Gable

unread,
Oct 18, 2016, 1:57:40 PM10/18/16
to infra-a...@chromium.org
This is, unfortunately, the same as yesterday's problems with bugs.chromium.org. Today the affected sites (and available workarounds) are:
crashpad.chromium.org -> crashpad-home.appspot.com

This is due to bad interactions with the fact that we serve both SNI and VIP, and the new Google Cloud Console isn't letting us set the VIP correctly.

friedman@ is working on the fix again today. The tracking issue is 657064. Further communication will be in this thread when we have more information.

Aaron

Apologies for the spam if you have received this message multiple times; due to communicating both internally and externally, sometimes multiple messages have to be sent.

Daniel Jacques

unread,
Oct 18, 2016, 2:30:04 PM10/18/16
to Aaron Gable, infra-a...@chromium.org
For code review uploading and interfacing, you can use the (new) flag, "--force-codereview-server", to override your repository's code review server during the outage. You will have to update "depot_tools" to access the new flag and re-authenticate with the new server URL.

The flag to use for "codereview.chromium.org" is: --force-codereview-server=https://chromiumcodereview.appspot.com

Note that this will not work with "git cl try".

--
You received this message because you are subscribed to the Google Groups "infra-announce" group.
To unsubscribe from this group and stop receiving emails from it, send an email to infra-announc...@chromium.org.
To post to this group, send email to infra-a...@chromium.org.
To view this discussion on the web visit https://groups.google.com/a/chromium.org/d/msgid/infra-announce/CAH58R2coFY2ktn0gdQEsCUq%3DA-5V-jwL%3Dc52fPR-Q3r%2BQ7_J_A%40mail.gmail.com.

Aaron Gable

unread,
Oct 18, 2016, 2:35:04 PM10/18/16
to Daniel Jacques, infra-a...@chromium.org
30 minute update:

The issue is due to the deprecation of VIP, which our forwarding of various .chromium.org subdomains relied upon. friedman@ is working with the Cloud teams to either manually re-enable VIP for us, or to do an ahead-of-schedule DNS push to remove VIP from our configuration and only use SNI instead. The former will end the outage sooner but will require more work in the future; the latter is future-proof but slower.

Another update forthcoming in half an hour.

Aaron

Prathmesh Prabhu Chromium

unread,
Oct 18, 2016, 2:47:30 PM10/18/16
to aga...@chromium.org, Daniel Jacques, infra-a...@chromium.org, chromiu...@chromium.org
+Chromium OS dev 
I think we should subscribe chromium-os-dev to infra-a...@chromium.org (just like chromium-dev) so that these announcements automatically get there too.

Aaron Gable

unread,
Oct 18, 2016, 2:58:38 PM10/18/16
to Prathmesh Prabhu Chromium, aga...@chromium.org, Daniel Jacques, infra-a...@chromium.org, chromiu...@chromium.org
Final update: a new VIP has been set (the former option mentioned before), and the immediate issue has been resolved. Everyone should have access to codereview.chromium.org again.

A postmortem will be written in the next couple days. Hopefully it won't contain any internal-only information, and we'll be able to share it publicly as well.

Thanks for your patience,
Aaron

Aaron Gable

unread,
Oct 18, 2016, 8:36:16 PM10/18/16
to Aaron Gable, Prathmesh Prabhu Chromium, Daniel Jacques, infra-a...@chromium.org, chromiu...@chromium.org
Followup: As part of the cleanup after the outage, another piece of configuration was just changed. The codereview.chromium.org site is still up, but 'git cl upload' (and potentially other 'git cl' commands) is temporarily broken. We're tracking this aftershock in this bug: https://bugs.chromium.org/p/chromium/issues/detail?id=657216

Aaron

Thiago Farina

unread,
Oct 18, 2016, 8:48:07 PM10/18/16
to aga...@chromium.org, Prathmesh Prabhu Chromium, Daniel Jacques, infra-a...@chromium.org, chromiu...@chromium.org


On Tuesday, October 18, 2016, Aaron Gable <aga...@chromium.org> wrote:
Followup: As part of the cleanup after the outage, another piece of configuration was just changed. The codereview.chromium.org site is still up, but 'git cl upload' (and potentially other 'git cl' commands) is temporarily broken. We're tracking this aftershock in this bug: https://bugs.chromium.org/p/chromium/issues/detail?id=657216

Yeah, I'm unable to upload right now. Thanks for the notice.



--
Thiago Farina

Aaron Gable

unread,
Oct 18, 2016, 8:52:15 PM10/18/16
to infra-a...@chromium.org
Investigation shows that this is due to a DNS change which removed the VIP from our CNAME, causing clients to use SNI directly. Theoretically this would have prevented us from ever running into this morning's problems again. However, it turns out that the vast majority of our developer machines -- and our buildbot fleet -- don't actually support SNI (everyone uses Python 2.7.6; Python only added native SNI support in 2.7.9). This is resulting in massive breakage.

The DNS change is being rolled back, but doing so may take a very long time (the change which caused this outage took over 6 hours to propagate). Further updates will be forthcoming.

Aaron

Paul Jensen

unread,
Oct 18, 2016, 8:55:48 PM10/18/16
to Thiago Farina, aga...@chromium.org, Prathmesh Prabhu Chromium, Daniel Jacques, infra-a...@chromium.org, chromiu...@chromium.org
FWIW I successfully uploaded by rolling back my depot_tools prior to the revert of the "--force-codereview-server" option (with "git checkout a8fb3a28") and using "git cl upload --force-codereview-server=https://chromiumcodereview.appspot.com"

--
You received this message because you are subscribed to the Google Groups "infra-announce" group.
To unsubscribe from this group and stop receiving emails from it, send an email to infra-announce+unsubscribe@chromium.org.

To post to this group, send email to infra-a...@chromium.org.

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev+unsubscribe@chromium.org.

Anton Vayvod

unread,
Oct 18, 2016, 9:37:46 PM10/18/16
to paulj...@google.com, Thiago Farina, aga...@chromium.org, Prathmesh Prabhu Chromium, Daniel Jacques, infra-a...@chromium.org, chromiu...@chromium.org
I wonder why the change was reverted so far (or at all), it seems pretty small and harmless.

On Tue, Oct 18, 2016 at 8:56 PM Paul Jensen <paulj...@chromium.org> wrote:
FWIW I successfully uploaded by rolling back my depot_tools prior to the revert of the "--force-codereview-server" option (with "git checkout a8fb3a28") and using "git cl upload --force-codereview-server=https://chromiumcodereview.appspot.com"

On Tue, Oct 18, 2016 at 8:48 PM, Thiago Farina <tfa...@chromium.org> wrote:


On Tuesday, October 18, 2016, Aaron Gable <aga...@chromium.org> wrote:
Followup: As part of the cleanup after the outage, another piece of configuration was just changed. The codereview.chromium.org site is still up, but 'git cl upload' (and potentially other 'git cl' commands) is temporarily broken. We're tracking this aftershock in this bug: https://bugs.chromium.org/p/chromium/issues/detail?id=657216

Yeah, I'm unable to upload right now. Thanks for the notice.



--
Thiago Farina

--
You received this message because you are subscribed to the Google Groups "infra-announce" group.
To unsubscribe from this group and stop receiving emails from it, send an email to infra-announc...@chromium.org.

To post to this group, send email to infra-a...@chromium.org.

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev...@chromium.org.

--
You received this message because you are subscribed to the Google Groups "infra-announce" group.
To unsubscribe from this group and stop receiving emails from it, send an email to infra-announc...@chromium.org.

To post to this group, send email to infra-a...@chromium.org.

--
--
Chromium Developers mailing list: chromi...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-dev
---
You received this message because you are subscribed to the Google Groups "Chromium-dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-dev...@chromium.org.

Daniel Jacques

unread,
Oct 18, 2016, 9:39:14 PM10/18/16
to Anton Vayvod, paulj...@google.com, Thiago Farina, aga...@chromium.org, Prathmesh Prabhu Chromium, infra-a...@chromium.org, chromiu...@chromium.org
It was reverted because it was a temporary hack that was not thoroughly integrated into the tools. A new change has landed that supersedes that one and automatically does the mapping.

Aaron Gable

unread,
Oct 18, 2016, 9:39:20 PM10/18/16
to Aaron Gable, infra-a...@chromium.org
A change has been landed in depot_tools which should un-break developers (primarily 'git cl upload') and un-break the trybots (which use 'apply_issue'). Please update your depot_tools to pick up the change.

If you're still seeing errors locally after getting the change, please update the tracking bug.

Aaron

Aaron Gable

unread,
Oct 18, 2016, 10:14:58 PM10/18/16
to infra-a...@chromium.org, chri...@chromium.org
We believe the situation to be resolved, and you shouldn't expect any further updates on this thread. In case updates are needed, I am handing off communication on this to chrishall@, part of our wonderful Sydney crew.

Thanks again for your patience,
Aaron
Reply all
Reply to author
Forward
0 new messages