Unable to ssh onto image scalers
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Reedy
	Jun 14 2015, 2:17 AM

Description

Not sure if something changed, or when, but I don't seem to be able to SSH into the image scalers anymore. Standard MW app servers seem ok

Useful to be able to do so for checking packages and such installed (among other testing)

Details

	Subject	Repo	Branch	Lines +/-
	Fix deployers access to imagescaler boxes	operations/puppet	production	+2 -0

Customize query in gerrit

Related Objects

Mentioned In: rOPUP3e076641693a: Fix deployers access to imagescaler boxes
T35186: Provide a well-performing API to rotate an image

Event Timeline

Reedy created this task.Jun 14 2015, 2:17 AM

Reedy raised the priority of this task from to Needs Triage.

Reedy updated the task description. (Show Details)

Reedy added a project: acl*sre-team.

Reedy subscribed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 14 2015, 2:17 AM

Reedy mentioned this in T35186: Provide a well-performing API to rotate an image.Jun 14 2015, 2:39 AM

I looked at this briefly. reedy has no key deployed in /etc/ssh/userkeys/ on mw1153 (one of the imagescalers). He does have a key defined in puppet in general, which works on some other hosts elsewhere. Probably he's either recently been dropped from some applicable user group, or the user groups on the host have changed. That or something of that nature happened a while back, but didn't take pragmatic effect for his logins until the key location change. I can't make heads or tails of how groups are applied to machines this evening, though.

Reedy triaged this task as Low priority.Jun 14 2015, 3:02 AM

Reedy set Security to None.

Krenair subscribed.Jun 14 2015, 2:11 PM

Isn't there supposed to be something like this in hieradata/role/common/mediawiki/imagescaler.yaml?