Maniphest T420360

Add proxy support to cumin openstack backend
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	fgiunchedi
	Mar 17 2026, 2:08 PM

Tags

Referenced Files

None

Subscribers

Description

This is a followup from T419996: cloudcumin not able to communicate with openstack.eqiad1.wikimediacloud.org:25000 anymore to enhance cumin's openstack backend to be able to use an http proxy to talk to the openstack APIs. Note that the proxy in this case will apply to the openstack backend, as cumin already supports having a proxy for all requests.

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	Revert "cr-cloud: allow cumin/cloudcumin traffic"	operations/homer/public	master	+0 -7
	cumin: use webproxy to connect to openstack APIs	operations/puppet	production	+3 -0
	webproxies: allow cloudcumin to openstack	operations/puppet	production	+18 -0
	openstack backend: add support for a proxy	operations/software/cumin	master	+29 -4

Customize query in gerrit

Related Objects

Mentioned In: rCUMIN40b0a10f517a: openstack backend: add support for a proxy
Mentioned Here: T419996: cloudcumin not able to communicate with openstack.eqiad1.wikimediacloud.org:25000 anymore

Event Timeline

fgiunchedi created this task.Mar 17 2026, 2:08 PM

Restricted Application added a project: Infrastructure-Foundations. · View Herald TranscriptMar 17 2026, 2:08 PM

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Volans claimed this task.Mar 23 2026, 11:29 AM

Volans triaged this task as Medium priority.

Change #1260082 had a related patch set uploaded (by Volans; author: Volans):

[operations/software/cumin@master] openstack backend: add support for a proxy

https://gerrit.wikimedia.org/r/1260082

gerritbot added a project: Patch-For-Review.Mar 24 2026, 7:39 PM

Change #1260082 merged by jenkins-bot:

[operations/software/cumin@master] openstack backend: add support for a proxy

https://gerrit.wikimedia.org/r/1260082

Maintenance_bot removed a project: Patch-For-Review.Mar 25 2026, 11:31 AM

Volans mentioned this in rCUMIN40b0a10f517a: openstack backend: add support for a proxy.Mar 25 2026, 11:50 AM

Change #1266885 had a related patch set uploaded (by Volans; author: Volans):

[operations/puppet@production] webproxies: allow cloudcumin to openstack

https://gerrit.wikimedia.org/r/1266885

gerritbot added a project: Patch-For-Review.Apr 2 2026, 7:49 AM

Change #1266885 merged by Volans:

[operations/puppet@production] webproxies: allow cloudcumin to openstack

https://gerrit.wikimedia.org/r/1266885

Maintenance_bot removed a project: Patch-For-Review.Apr 2 2026, 8:31 AM

Change #1266956 had a related patch set uploaded (by Volans; author: Volans):

[operations/puppet@production] cumin: use webproxy to connect to openstack APIs

https://gerrit.wikimedia.org/r/1266956

gerritbot added a project: Patch-For-Review.Apr 2 2026, 9:46 AM

Change #1266963 had a related patch set uploaded (by Volans; author: Volans):

[operations/homer/public@master] Revert "cr-cloud: allow cumin/cloudcumin traffic"

https://gerrit.wikimedia.org/r/1266963

Change #1266956 merged by Volans:

[operations/puppet@production] cumin: use webproxy to connect to openstack APIs

https://gerrit.wikimedia.org/r/1266956

Change #1266963 merged by jenkins-bot:

[operations/homer/public@master] Revert "cr-cloud: allow cumin/cloudcumin traffic"

https://gerrit.wikimedia.org/r/1266963

Maintenance_bot removed a project: Patch-For-Review.Apr 2 2026, 2:31 PM

The cloudcumin hosts are now using the webproxies to connect to the openstack APIs and the firewall rule has been reverted. Resolving.