Currently logstash's kibana interface is defined directly in varnish as a pool of randomized backend hostnames. There should be a real service hostname for the internal service like logstash.svc.eqiad.wmnet, which is defined in LVS with pybal controlling the pooling of the 3x backends, and then varnish's configuration should be updated to use that hostname rather than enumerating the backends directly. This involves a handful of complex puppet changes and LVS new-service deploys are always a bit "special" (requiring careful manual restarts).
Description
Details
Status | Subtype | Assigned | Task | ||
---|---|---|---|---|---|
Resolved | BBlack | T147844 Standardize varnish applayer backend definitions | |||
Resolved | Gehel | T132458 Move logstash.wikimedia.org (kibana) to an LVS service |
Event Timeline
This might be something to look at doing as part of T138328: Upgrade kibana to 4.5.0+.
Change 312342 had a related patch set uploaded (by Gehel):
logstash - DNS entries for LVS service
Change 315675 had a related patch set uploaded (by Gehel):
kibana - move to an LVS service
Change 315676 had a related patch set uploaded (by Gehel):
kibana - activate icinga check on new LVS service
Change 315677 had a related patch set uploaded (by Gehel):
kibana - configure varnish to use new LVS service as backend
Change 316771 had a related patch set uploaded (by Gehel):
kibana - allow access to both /status and /api/status
Change 316772 had a related patch set uploaded (by Gehel):
kibana - change probe URL to /api/status
Change 316773 had a related patch set uploaded (by Gehel):
kibana - only allow unauthenticated access to /api/status
Change 316774 had a related patch set uploaded (by Gehel):
kibana - move to an LVS service
Change 316775 had a related patch set uploaded (by Gehel):
kibana - activate icinga check on new LVS service
Change 316776 had a related patch set uploaded (by Gehel):
kibana - configure varnish to use new LVS service as backend
Change 315677 abandoned by Gehel:
kibana - configure varnish to use new LVS service as backend
Reason:
Abandonned in favor of https://gerrit.wikimedia.org/r/#/c/316771/
Change 315676 abandoned by Gehel:
kibana - activate icinga check on new LVS service
Reason:
Abandonned in favor of https://gerrit.wikimedia.org/r/#/c/316771/
Change 315675 abandoned by Gehel:
kibana - move to an LVS service
Reason:
Abandonned in favor of https://gerrit.wikimedia.org/r/#/c/316771/
Change 316773 merged by Gehel:
kibana - only allow unauthenticated access to /api/status
Mentioned in SAL (#wikimedia-operations) [2016-10-20T16:26:57Z] <gehel> deploying new LVS service for kibana - T132458
Change 316776 merged by Gehel:
kibana - configure varnish to use new LVS service as backend