the new maintain-dbusers.py script will be hosted on cloudcontrol1005 and the replica config api will be hosted on both labstore1004 and paws-nfs-1. We need to be able to send requests from cloudcontrol1005 to labstore1004 but right now labstore1004 firewall is blocking any such request.
this is a blocker to T303663
Description
Description
Details
Details
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| labstore1004: allow incoming HTTP connections from cloudcontrol servers | operations/puppet | production | +15 -8 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Open | None | T272395 Cloud: reduce NAT exceptions from cloud to production | |||
| Resolved | Andrew | T291405 [NFS] Reduce or eliminate bare-metal NFS servers | |||
| Resolved | Andrew | T301280 Move project-specific NFS mounts onto project-local NFS servers | |||
| Resolved | dcaro | T303663 Split maintain-dbusers.py into two parts, one to run on cloudcontrol nodes and one to run on an NFS server VM | |||
| Resolved | None | T330916 Ensure that labstore1004.eqiad.wmnet accept http requests from cloudcontrol1005.wikimedia.org |
Event Timeline
Comment Actions
Change 893514 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):
[operations/puppet@production] labstore1004: allow incoming HTTP connections from cloudcontrol servers
Comment Actions
Change 893514 merged by Arturo Borrero Gonzalez:
[operations/puppet@production] labstore1004: allow incoming HTTP connections from cloudcontrol servers