Page MenuHomePhabricator

CloudVPS: codfw1dev: missing bits
Open, NormalPublic

Description

This task is to track missing bits related to the codfw1dev CloudVPS deployment https://wikitech.wikimedia.org/wiki/Portal:Cloud_VPS/Admin/Deployments#codfw
The goal is to have a deployment "mostly" usable that serves as a place to test more stuff related to our openstack setup.

  • DNS. There is no DNS support for VMs in this deployment. Ideally we would introduce the new naming scheme https://wikitech.wikimedia.org/wiki/Wikimedia_Cloud_Services_team/EnhancementProposals/DNS_domain_usage#Resolution
  • Bastions. We don't have a setup for jumping using SSH as we do in eqiad1. Having this setup in place would be really interesting for testing stuff inside VMs (although we can use the virsh console anyway)
  • LDAP. There are some missing bits in the LDAP setup. I don't even know which is missing, but last time I checked they were no LDAP users in VMs in codfw1dev.
  • Glance images. We don't have same glance images as we have in eqiad1. We have some glance images hardcoding a root password (which nobody knows) which is something to avoid. This is probably related to the LDAP thing. -- No production glance images work fine in codfw1dev.
  • Horizon. Long time ago we used to have a testing horizon setup for codfw. Now we don't have one. This is more optional that the other bullet points.

Event Timeline

aborrero created this task.Jul 31 2019, 4:17 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 31 2019, 4:17 PM

Change 534657 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] codf1dev: move the puppetmaster enc database to cloudb2001-dev

https://gerrit.wikimedia.org/r/534657

Change 534657 merged by Andrew Bogott:
[operations/puppet@production] codf1dev: move the puppetmaster enc database to cloudb2001-dev

https://gerrit.wikimedia.org/r/534657

Change 534850 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] codfw1dev: disable the mwyaml backend

https://gerrit.wikimedia.org/r/534850

Change 534850 merged by Andrew Bogott:
[operations/puppet@production] codfw1dev: disable the mwyaml backend

https://gerrit.wikimedia.org/r/534850

Change 534851 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] codfw1dev: update labtest.hiera.yaml to use codfw1dev resources

https://gerrit.wikimedia.org/r/534851

Change 534851 merged by Andrew Bogott:
[operations/puppet@production] codfw1dev: update labtest.hiera.yaml to use codfw1dev resources

https://gerrit.wikimedia.org/r/534851

Andrew updated the task description. (Show Details)Fri, Sep 6, 7:44 PM

Change 534938 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] realm.pp: Update certname validation for cloud VMs

https://gerrit.wikimedia.org/r/534938

Change 534938 merged by Andrew Bogott:
[operations/puppet@production] realm.pp: Update certname validation for cloud VMs

https://gerrit.wikimedia.org/r/534938

Andrew updated the task description. (Show Details)Sun, Sep 8, 3:14 AM
Andrew added a comment.Sun, Sep 8, 3:16 AM

I have instance designate/dns working now on codfw1dev with the .cloud tld:

root@testinstance-18:~# hostname -f
testinstance-18.devtest.codfw1dev.cloud
root@testinstance-18:~# dig +short testinstance-18.devtest.codfw1dev.cloud
172.16.128.21
root@testinstance-18:~# dig +short -x 172.16.128.21
testinstance-18.devtest.codfw1dev.cloud.

Change 536672 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] codfw1dev: First pass at buildingout cloudweb2001-dev

https://gerrit.wikimedia.org/r/536672

Change 536672 merged by Andrew Bogott:
[operations/puppet@production] codfw1dev: First pass at building out cloudweb2001-dev

https://gerrit.wikimedia.org/r/536672

Change 537127 had a related patch set uploaded (by Andrew Bogott; owner: Andrew Bogott):
[operations/puppet@production] cloudweb2001-dev: remove wikitech profiles

https://gerrit.wikimedia.org/r/537127

Change 537127 merged by Andrew Bogott:
[operations/puppet@production] cloudweb2001-dev: remove wikitech profiles

https://gerrit.wikimedia.org/r/537127