Designate-sink, running on cloudservices nodes, connects to the puppetmaster to clean certs for deleted VMs.
Right now that doesn't work from cloudservices1006.
2023-09-05 15:22:53.649 4140106 WARNING wmf_sink.base [None req-6ebffc2f-0319-4c31-a048-0c303b8e653f - - - all - -] Remote command ['/usr/bin/ssh', '-o', 'StrictHostKeyChecking=no', '-lcertmanager', '185.15.56.64', 'sudo puppet cert clean fullstackd-20230905140741.admin-monitoring.eqiad.wmflabs'] failed with output b'' and err b'ssh: connect to host 185.15.56.64 port 22: Connection timed out\r\n' 2023-09-05 15:22:53.654 4140106 WARNING wmf_sink.base [None req-e6784487-32f3-404c-96ed-6e38c44f9fb5 - - - - - -] Remote command ['/usr/bin/ssh', '-o', 'StrictHostKeyChecking=no', '-lcertmanager', '185.15.56.64', 'sudo puppet cert clean fullstackd-20230905144625.admin-monitoring.eqiad.wmflabs'] failed with output b'' and err b'ssh: connect to host 185.15.56.64 port 22: Connection timed out\r\n'