Page MenuHomePhabricator

labnet-users group can no more access labnet1001 / labnet1002
Closed, ResolvedPublic

Description

T133992 created a labnet-users group so we can get access to Nova API logs on labnet1001.eqiad.wmnet / labnet1002.eqiad.wmnet

However when I try to ssh to them, I get a Password: prompt.

Related commits:

b893d369413b7553d77b46c6144103df5cfab6a1
38524ea49f760171e5248d4b36481d6c62f07602

Event Timeline

I had noticed the lack of access for a few weeks already.

In puppet site.pp, both hosts have the role labs::openstack::nova::api which supposedly is feeded by:

hieradata/role/common/labs/openstack/nova/api.yaml
admin::groups:
  - labnet-users
openstack::log_group: labnet-users
debdeploy::grains:
  debdeploy-nova-api:
    value: standard

admin::groups:
  - wmcs-roots

Note the extra admin::groups. It has been introduced by 76546db4c8e954cb3122d24715779772ed27815c for T162404 which mass edited a lot of yaml files.

Change 361786 had a related patch set uploaded (by Hashar; owner: Hashar):
[operations/puppet@production] Restore labnet-users access to nova hosts

https://gerrit.wikimedia.org/r/361786

Broken since April 10th, but apparently I am the sole user relying on it from time to time. So there is no hurry :]

Change 361786 merged by Andrew Bogott:
[operations/puppet@production] Restore labnet-users access to nova hosts

https://gerrit.wikimedia.org/r/361786

@Andrew I have regained access on both labnet1001 and labnet1002. Thank you!