916077 - Please may vpn_sheriff group have access to releng staging/dev buildbot masters

Status: VERIFIED FIXED

(Infrastructure & Operations :: Infrastructure: OpenVPN, task)

Description

[Ed Morley [:emorley]]

Bug 886078 gave the group vpn_sheriff access to:
{
srv.releng.scl3.mozilla.com
srv.releng.use1.mozilla.com
srv.releng.usw2.mozilla.com
buildbot-master45.build.scl1.mozilla.com
buildbot-master44.build.scl1.mozilla.com
buildbot-master43.build.scl1.mozilla.com
buildbot-master42.build.scl1.mozilla.com
buildbot-master29.build.scl1.mozilla.com
buildbot-master22.build.mtv1.mozilla.com
buildbot-master20.build.mtv1.mozilla.com
buildbot-master19.build.mtv1.mozilla.com
buildbot-master10.build.mtv1.mozilla.com
}

In order to help advise with failures being encountered in staging (eg recently bug 819963), it would be useful to be able to access the staging buildbot masters too (ie: those like dev-master01.build.scl1.mozilla.com)

Update list coming shortly.

Comment 1

[Ed Morley [:emorley]]

Attachment: Raw list of buildbot masters

Extracted from https://hg.mozilla.org/build/tools/file/tip/buildfarm/maintenance/production-masters.json

Comment 2

[Ed Morley [:emorley]]

Comment on attachment 804407 [details]
Raw list of buildbot masters

Ah dammit these don't include the staging masters (the clue was probably in the filename haha) - and all of them are already in the list in comment 0.

Is there a manifest listing the staging masters somewhere?

Comment 3

[Justin Dow [:jabba]]

Setting needinfo for anyone, but really I needinfo from someone in Releng before I can proceed with anything here. For my purposes, I just need a list of hosts to add to the ACL (coming from releng).

Comment 4

[Ed Morley [:emorley]]

(In reply to Ed Morley [:edmorley UTC+1] from comment #2)
> Is there a manifest listing the staging masters somewhere?

Comment 5

[Justin Wood (:Callek)]

(In reply to Ed Morley [:edmorley UTC+1] from comment #4)
> (In reply to Ed Morley [:edmorley UTC+1] from comment #2)
> > Is there a manifest listing the staging masters somewhere?

That would be just dev-master01 aiui.

dev-master01.build.scl1.mozilla.com has address 10.12.48.14

We just use multiple ports on that host. (so if the ACL is port-restricted here, make it any/any)

Comment 6

[Justin Dow [:jabba]]

Added 10.12.48.14 with any/any.

Comment 7

[Ed Morley [:emorley]]

Thank you; working well :-)