65a1f5b6-a15d-4bac-bba8-492bbaf1688a | integration-slave-docker-1043 | ACTIVE | public=10.68.22.120 |
a85357b9-8b28-4af3-abe5-123ee9d841c4 | integration-slave-docker-1041 | ACTIVE | public=10.68.19.23 |
abfb4d28-22f2-41fb-b379-db72e903d04e | integration-slave-docker-1040 | ACTIVE | public=10.68.19.167 |
6b72d7ee-b5b9-46b3-b301-b4e0814f23d1 | integration-slave-docker-1038 | ACTIVE | public=10.68.17.241 |
b5e22c89-a815-4187-aaa4-f8693fbfa28c | integration-slave-docker-1037 | ACTIVE | public=10.68.21.155 |
7c4a6cef-b3ee-493a-b8e6-df7e9ab6960e | integration-slave-docker-1034 | ACTIVE | public=10.68.23.35 |
d64194fa-b42c-497c-a1a7-472edfaf940d | integration-slave-docker-1021 | ACTIVE | public=10.68.22.8 |
0490ca9c-22c9-4451-8d5a-a91ecbc09652 | integration-cumin | ACTIVE | public=10.68.18.238 |
3d33c860-f462-480d-a4a0-29354f6d022b | webperformance | ACTIVE | public=10.68.20.166 |
58ae7fe9-c832-4bf3-b51e-6bce06ed8b30 | castor02 | ACTIVE | public=10.68.20.186 |
6042250a-3af0-40b6-bf11-71616492982a | integration-r-lang-01 | ACTIVE | public=10.68.20.232 |
6f261093-b0be-48f0-adc6-c0f2e7957dfe | jenkinstest | ACTIVE | public=10.68.22.228 |
a4b5cdc8-8692-4814-84d5-0804e39d810b | saucelabs-03 | ACTIVE | public=10.68.23.100 |
b4064edb-10c7-410a-b11c-4df8f358526f | saucelabs-02 | ACTIVE | public=10.68.22.247 |
b83af49a-4eaf-469a-818f-e5e984f5fc65 | saucelabs-01 | ACTIVE | public=10.68.21.186 |
6d6449bd-87ee-4108-b444-43b88ec61113 | integration-publishing | ACTIVE | public=10.68.23.254 |
6da0fbd1-3b97-4a2f-9669-81507a04b3f1 | integration-puppetmaster01 | ACTIVE | public=10.68.22.41 |
a64e731e-c987-4b84-85b9-cf450275d26d | integration-slave-jessie-android | ACTIVE | public=10.68.19.239 |
641c9a74-fcb7-49ea-b550-5f6cd5dcc893 | integration-slave-jessie-1002 | ACTIVE | public=10.68.16.199 |
4a7b7e39-8dee-4388-befd-96a763f5d0fa | integration-slave-jessie-1001 | ACTIVE | public=10.68.16.72 |
I expect that it will be disruptive to CI to have these offline, but I also suspect that e.g. the docker cluster can function across regions just fine. So I propose that for a start:
- Someone in releng adjust security groups and firewall rules to allow ingress to 172.16.0.0/21 for docker things
- Someone at releng depools integration-slave-docker-1043 and pings me
- I move integration-slave-docker-1043 to the new region
- Someone at releng repools integration-slave-docker-1043 and confirms that it works.
If that all goes well then we can move the other docker nodes over in pairs without disruption.
I have no idea if the other things in that project can be similarly staged or if we should just plan a sprint during a low-traffic time. I'm open to suggestions.