748553 - Allow database access from cruncher.srv.releng.scl3.mozilla.com to b01-ro-vip.db.scl3.mozilla.com

Status: RESOLVED FIXED

(Data & BI Services Team :: DB: MySQL, task)

Description

[Chris Cooper [:coop] (he/him)]

I have scripts that are migrating from the old cruncher in sjc to the new instance in scl3. These scripts need access to databases that were previously available at tm-b01-slave01.mozilla.org, although I hear I should now be using b01-ro-vip.db.scl3.mozilla.com instead.

The two databases in question are:

* buildbot (user: buildbot_reader)
* buildslaves (user: buildslaves)

Can I please have access and/or network flows opened for those databases from the new cruncher? I currently receive the following error when I try to access them:

[coop@cruncher ~]$ mysql -u buildslaves -h b01-ro-vip.db.scl3.mozilla.com -p
Enter password: 
ERROR 1045 (28000): Access denied for user 'buildslaves'@'10.22.70.209' (using password: YES)

I'm not sure if the load balancer (10.22.70.209) is interfering here or not.

If those databases aren't available on the new db host, well, that's another bug, I guess.

Comment 1

[Dustin J. Mitchell [:dustin] (he/him)]

FYI the original ACLs were in bug 746991.  That bug doesn't mention user 'buildslaves', and is using cruncher's IP, not the lb.

Comment 2

[Mike Taylor [:bear]]

https://bugzilla.mozilla.org/show_bug.cgi?id=746991#c1 looks to include the user 'buildslaves' 

the IP is what mysql is trying to auth the request from, if it is not crunchers then why is the loadbalancer not passing thru the original IP?

basically the issue is this - what needs to be fixed so this can happen?

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

Ah, yes, I misread - so the problem is the flows.

This will need to be fixed  the cruncher downtime tomrorrow morning; I'm adjusting severity, but assigning to sheeri so it doesn't page (I hope).

Comment 4

[Sheeri Cabral [:sheeri]]

DB ACL has been made, can you try it now?

Comment 5

[Chris Cooper [:coop] (he/him)]

Still not working:

(last-build)[coop@cruncher last-build]$ mysql -u buildslaves  -h b01-ro-vip.db.scl3.mozilla.com -p
Enter password: 
ERROR 1045 (28000): Access denied for user 'buildslaves'@'10.22.70.209' (using password: YES)
(last-build)[coop@cruncher last-build]$ mysql -u buildbot_reader -h b01-ro-vip.db.scl3.mozilla.com -p
Enter password: 
ERROR 1045 (28000): Access denied for user 'buildbot_reader'@'10.22.70.209' (using password: YES)

Comment 6

[Chris Cooper [:coop] (he/him)]

WFM now. Thanks!