These hosts will be replacing icinga* hosts in parent task, namely:
alert1001.wikimedia.org has address 208.80.154.88 alert1001.wikimedia.org has IPv6 address 2620:0:861:3:208:80:154:88 alert2001.wikimedia.org has address 208.80.153.84 alert2001.wikimedia.org has IPv6 address 2620:0:860:3:208:80:153:84
Please add to network ACLs where needed, we'll followup with decom'ing icinga* hosts when the time comes, thanks!
| Project | Branch | Lines +/- | Subject | |
|---|---|---|---|---|
| operations/homer/public | master | +8 -0 | Add alert[12]001 to existing icinga ACL terms |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Stalled | None | T302086 Set scap minimum python version to 3.7 | |||
| Open | None | T247045 Migrate all of production metal and VMs to Buster or later | |||
| Resolved | lmata | T247966 Migrate role::alerting_host to Buster | |||
| Resolved | herron | T260533 Add alert[12]001 to network ACLs | |||
| Resolved | Jgreen | T262291 update nagios_nsca configuration in frack for new nsca servers | |||
| Restricted Task |
Change 620883 had a related patch set uploaded (by Ayounsi; owner: Ayounsi):
[operations/homer/public@master] Add alert[12]001 to existing icinga ACL terms
Change 620883 merged by jenkins-bot:
[operations/homer/public@master] Add alert[12]001 to existing icinga ACL terms
Thanks @ayounsi !
Reopening since we'll need to add these hosts to pfw devices as well, cc @Jgreen and @Dwisehaupt could you help with that ? Thanks!
@ayounsi looks like mgmt access isn't permitted yet, can't ping mgmt.eqiad.wmnet e.g.
alert1001# ping ps1-c1-eqiad.mgmt.eqiad.wmnet PING ps1-c1-eqiad.mgmt.eqiad.wmnet (10.65.0.48) 56(84) bytes of data. ^C --- ps1-c1-eqiad.mgmt.eqiad.wmnet ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 24ms
Mentioned in SAL (#wikimedia-operations) [2020-08-18T11:53:56Z] <XioNoX> add new icinga hosts to mr policies - T260533