Per IRC conversation with @dcausse , we have a couple of issues with the graph split hosts:
Change 989186 had a related patch set uploaded (by DCausse; author: DCausse):
[operations/puppet@production] wdqs: disable query throttling on test servers
Change 989186 merged by Bking:
[operations/puppet@production] wdqs: disable query throttling on test servers
Per pairing session with @BTullis , the wdqs test hosts are not running envoy, so only the cleartext ports are available. If TLS is required, we can enable it in puppet by inculding the profile::tlsproxy::envoy profile, as we do in modules/role/manifests/wdqs/public.pp.
dcausse let us know if you think we should enable TLS. If not, feel free to close out this ticket.
Update: We're going to take a stab at this for a couple of reasons:
Change 989236 had a related patch set uploaded (by Bking; author: Bking):
[operations/puppet@production] wdqs: Enable TLS for test tier
Change 989244 had a related patch set uploaded (by Bking; author: Bking):
[operations/puppet@production] wdqs-test: Enable PKI
Change 989236 abandoned by Bking:
[operations/puppet@production] wdqs: Enable TLS for test tier
Reason:
superseded by 989244
Merging/applying the above patch added TLS to the test hosts, using the domain "wdqs-test.eqiad.wmnet". You can also access individual hosts by their FQDN (such as https://wdqs1022.eqiad.wmnet). Closing...