Change Details

m5-master is currently holding the keystone database for the main cloud vps deployment. This database is mainly used from `labcontrol1001.wikimedia.org` and perhaps `labcontrol1002.wikimedia.org`. Next monday (see parent task) we are going to merge this keystone database with the new `eqiad1` deployment, so the m5-master keystone DB will be accessed by `cloudcontrol1003.wikimedia.org` (and perhaps `cloudcontrol1004.wikimedia.org as a cold-standby server). We need to check and review whether this is possible from the GRANTs point of view, also networking/ACL point of view. Please, replicate all GRANTS/ACLs/other permissions that m5-master may have for labcontrol1001.wikimedia.org in a way that cloudcontrol1003.wikimedia.org can access it in the same conditions.

m5-master is currently holding the keystone database for the main cloud vps deployment. This database is mainly used from `labcontrol1001.wikimedia.org` and perhaps `labcontrol1002.wikimedia.org`. Next monday (see parent task) we are going to merge this keystone database with the new `eqiad1` deployment, so the m5-master keystone DB will be accessed by `cloudcontrol1003.wikimedia.org` (and perhaps `cloudcontrol1004.wikimedia.org` as a cold-standby server). We need to check and review whether this is possible from the GRANTs point of view, also networking/ACL point of view. Please, replicate all GRANTS/ACLs/other permissions that m5-master may have for labcontrol1001.wikimedia.org in a way that cloudcontrol1003.wikimedia.org can access it in the same conditions.

m5-master is currently holding the keystone database for the main cloud vps deployment. This database is mainly used from `labcontrol1001.wikimedia.org` and perhaps `labcontrol1002.wikimedia.org`. Next monday (see parent task) we are going to merge this keystone database with the new `eqiad1` deployment, so the m5-master keystone DB will be accessed by `cloudcontrol1003.wikimedia.org` (and perhaps `cloudcontrol1004.wikimedia.org` as a cold-standby server). We need to check and review whether this is possible from the GRANTs point of view, also networking/ACL point of view. Please, replicate all GRANTS/ACLs/other permissions that m5-master may have for labcontrol1001.wikimedia.org in a way that cloudcontrol1003.wikimedia.org can access it in the same conditions.