Page MenuHomePhabricator

Enable cumin2001 in router ACLs
Closed, ResolvedPublic

Description

cumin2001.codfw.wmnet will replace sarin.codfw.wmnet. Please

  • enable it in the ACls which grant access to the management interfaces (which was added in T199074)
  • Allow access to the WMCS subnets (currently Cumin on cumin2001 fails to connect to cloudnet1003/1004, labnet1001/1002, labnodepool1001, labvirt* and cloudvirt*

Removing sarin is for later, we'll keep it for a few more weeks as the switchover back to eqiad will still be done with the jessie-based hosts (the new hosts are using Stretch).

Event Timeline

Restricted Application added a project: Operations. · View Herald TranscriptSep 18 2018, 3:31 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Mentioned in SAL (#wikimedia-operations) [2018-09-18T15:53:37Z] <XioNoX> add cumin2001 to mr* security policies - T204730

ayounsi closed this task as Resolved.Sep 18 2018, 4:23 PM
ayounsi claimed this task.
ayounsi added a subscriber: ayounsi.

Done!