Page MenuHomePhabricator

eqiad1: introduce cloud-private support
Closed, ResolvedPublic

Description

Introduce cloud-private network support, which includes at least:

  • network CIDR allocation
  • DNS integration w/ netbox
  • refresh puppet hiera to support per-row cloudsw FQDNs and vlan numbers
  • configure gateways, BGP, and other routing stuff in cloudsw devices

See also: T335759: cloud-private subnet: introduce new domain

Event Timeline

Change 935446 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/dns@master] private.eqiad.wikimedia.cloud: introduce support for new zone

https://gerrit.wikimedia.org/r/935446

Change 935446 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/dns@master] private.eqiad.wikimedia.cloud: introduce support for new zone

https://gerrit.wikimedia.org/r/935446

Before merging this change we need to 'bootstrap' the zone by adding some records to it, creating for example the cloudsw-xy addresses: https://netbox.wikimedia.org/ipam/ip-addresses/13611/
Then running the sre.dns.netbox cookbook for the files to exist.

Change 935446 merged by Arturo Borrero Gonzalez:

[operations/dns@master] private.eqiad.wikimedia.cloud: introduce support for new zone

https://gerrit.wikimedia.org/r/935446

Change 935721 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/puppet@production] wmcs: cloud_private_subnet: introduce per-rack cloudsw gw support

https://gerrit.wikimedia.org/r/935721

Change 935725 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/puppet@production] wmcs: cloud_private_subnet: introduce per-rack vlan_id support

https://gerrit.wikimedia.org/r/935725

Change 935721 merged by Arturo Borrero Gonzalez:

[operations/puppet@production] wmcs: cloud_private_subnet: introduce per-rack cloudsw gw support

https://gerrit.wikimedia.org/r/935721

Change 935725 merged by Arturo Borrero Gonzalez:

[operations/puppet@production] wmcs: cloud_private_subnet: introduce per-rack vlan_id support

https://gerrit.wikimedia.org/r/935725

aborrero updated the task description. (Show Details)
aborrero changed the task status from Open to In Progress.Jul 6 2023, 10:59 AM
aborrero reassigned this task from aborrero to cmooney.
aborrero triaged this task as Medium priority.
aborrero moved this task from Doing to Radar on the User-aborrero board.

Hey @cmooney could you please check the cloudsw devices @ eqiad to make sure they are correctly configured for cloud-private?

In parcitular:

  • vlan is defined in each rack, etc
  • per-subnet gateway is configured in each device
  • the routing / BGP / etc is correctly set up.

(note, we don't have any client or BGP peer as of the writing of this comment)

Change 940887 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[operations/puppet@production] network: data: add new cloud CIDRs for eqiad1

https://gerrit.wikimedia.org/r/940887

Change 940887 merged by Arturo Borrero Gonzalez:

[operations/puppet@production] network: data: add new cloud CIDRs for eqiad1

https://gerrit.wikimedia.org/r/940887