Page MenuHomePhabricator

Several 'search' project instances not accessible via cloud-cumin
Open, Needs TriagePublic

Description

Hello! Currently there are several instances in the 'search' Cloud VPS project that do not seem to be accessible with cloud-cumin. The following VMs seem to be affected:

es65-710-[1-5].search.eqiad1.wikimedia.cloud

Additionally root keys that should be provisioned by Puppet do not seem to be working:

taavi@runko:~ $ ssh root@es65-710-2.search.eqiad1.wikimedia.cloud
root@es65-710-2.search.eqiad1.wikimedia.cloud: Permission denied (publickey).

At the moment, it is a requirement of Cloud VPS usage that VM authentication config is Puppetized and VMs are accessible with Cumin. (A more detailed rationale can be seen for example in T287269). Please fix those currently broken VMs. Thank you!

Event Timeline

Hello @Majavah , thanks for opening this ticket. I'm still troubleshooting this issue, but at the moment puppet runs fail with a not-helpful error, breaking LDAP in the process.