These are the proxies being added in front of m5-master
Description
Description
Details
Details
Related Changes in Gerrit:
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| toolhub: Add egress to m5-master dbproxy nodes | operations/deployment-charts | master | +18 -7 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Marostegui | T288720 Failover m5 master (db1128) to db1132 to upgrade its kernel | |||
| Resolved | Marostegui | T288093 Place m5 proxies in codfw and eqiad | |||
| Resolved | • bd808 | T294437 Add egress rules for dbproxy1017 & dbproxy1021 |
Event Timeline
Comment Actions
Change 735031 had a related patch set uploaded (by BryanDavis; author: Bryan Davis):
[operations/deployment-charts@master] toolhub: Add egress to m5-master dbproxy nodes
Comment Actions
Change 735031 merged by jenkins-bot:
[operations/deployment-charts@master] toolhub: Add egress to m5-master dbproxy nodes
Comment Actions
After deploying the updated helm chart, the networkpolicy for the toolhub namespace in eqiad allows port 3306 outbound to:
- 10.64.48.43/32 (dbproxy1017.eqiad.wmnet)
- 10.64.32.180/32 (dbproxy1021.eqiad.wmnet)
- 10.192.48.47/32 (dbproxy2004.codfw.wmnet)
- 10.64.0.98/32 (db1128.eqiad.wmnet)
- 10.64.16.35/32 (db1132.eqiad.wmnet)
Checked with kube_env toolhub eqiad; kubectl describe networkpolicies toolhub-main from deploy1002.