Elasticsearch requires a few plugins in the context of Cirrus. Those plugins are at the moment deployed by trebuchet (migration to scap3 should happen at some point).
The relforge servers are in the labs-hosts1-a-eqiad subnet (10.64.4.0/24 - 2620:0:861:117::/64). As such they do not have access to redis on tin, which is required for trebuchet deployment.
I'm not entirely sure how to move forward on this. I can't find documentation on a trebuchet / scap server for labs. It might be that relforge servers should actually be labs-support servers (and not labs-hosts). Or that we need to change the way we deploy those plugins for relforge.
I understand from the initial discussion on T131184#2251477 that those relforge servers should actually be in labs-support, but I am very much confused by all of this and might well be wrong. @chasemp, @yuvipanda, since you were on that initial discussion, could you help me clarify? Thanks!