Page MenuHomePhabricator

m5-master: setup for new keystone daemon
Closed, ResolvedPublic

Description

m5-master is currently holding the keystone database for the main cloud vps deployment. This database is mainly used from labcontrol1001.wikimedia.org and perhaps labcontrol1002.wikimedia.org.
Next monday (see parent task) we are going to merge this keystone database with the new eqiad1 deployment, so the m5-master keystone DB will be accessed by cloudcontrol1003.wikimedia.org (and perhaps cloudcontrol1004.wikimedia.org as a cold-standby server).

We need to check and review whether this is possible from the GRANTs point of view, also networking/ACL point of view.
Please, replicate all GRANTS/ACLs/other permissions that m5-master may have for labcontrol1001.wikimedia.org in a way that cloudcontrol1003.wikimedia.org can access it in the same conditions.