Per T186993#4929163:
- cpjobqueue is configured to talk to http://deployment-jobrunner03.deployment-prep.eqiad.wmflabs:9005/rpc/RunSingleJob.php
- deployment-jobrunner03 only accepts health checks on port 9005
- port 9006, where jobs are accepted, is only exposed to localhost
- in production there would be an nginx instance performing tls termination and forwarding to 9006, but that is gated on having LVS which beta cluster does not.