Remove neodymium/sarin from router ACLs
Closed, ResolvedPublic

Description

neodymium.eqiad.wmnet and sarin.codfw.wmnet are special-cased in our router configs:

  • They have full access to the management interfaces (as it was added in T199074)
  • They have access to the WMCS subnets (see T205513) which can be removed

These hosts have been replaced by cumin1001/cumin2001, so those rules can now be removed.

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptWed, Nov 28, 2:49 PM

Mentioned in SAL (#wikimedia-operations) [2018-11-29T19:42:03Z] <XioNoX> remove neodymium/sarin from mgmt routers - T210612

ayounsi closed this task as Resolved.Thu, Nov 29, 7:49 PM
ayounsi claimed this task.
ayounsi added a subscriber: ayounsi.

Removed!

Mentioned in SAL (#wikimedia-operations) [2018-12-04T22:46:57Z] <XioNoX> remove neodymium/sarin from term labs-in4 on cr1/2-eqiad - T210612