Remove flows from Treeherder and OrangeFactor to the main ElasticSearch instance

RESOLVED FIXED

Status

Infrastructure & Operations
NetOps: DC ACL Request
--
minor
RESOLVED FIXED
3 years ago
3 years ago

People

(Reporter: emorley, Assigned: dcurado)

Tracking

Details

(Reporter)

Description

3 years ago
OrangeFactor has now switched to it's own ElasticSearch instance, as part of bug 1142538. As such, we no longer need flows to the instance used by everyone else.

The instance we no longer need access to is:
elasticsearch-zlb.webapp.scl3.mozilla.com

The instance we are now using (so must be left as is):
of-elasticsearch-zlb.webapp.scl3.mozilla.com

This is all for port 9200.

The affected hosts are:

brasstacks1.dmz.scl3.mozilla.com
treeherder-rabbitmq1.private.scl3.mozilla.com
treeherder-rabbitmq1.stage.private.scl3.mozilla.com
treeherder1.webapp.scl3.mozilla.com
treeherder2.webapp.scl3.mozilla.com
treeherder3.webapp.scl3.mozilla.com
treeherder1.stage.webapp.scl3.mozilla.com
treeherder2.stage.webapp.scl3.mozilla.com
treeherder3.stage.webapp.scl3.mozilla.com

No rush with this, just thought it would be good cleanup (I didn't realise some of my old OrangeFactor scripts were still using the old ES instance for a while; a timeout would have made this clearer :-))
(Assignee)

Comment 1

3 years ago
OK, I believe I have cleaned this up (and not broken anything).

I stumbled across this policy in the process, does "brasstacks" still require this?

policy elasticsearch-zlb-dev-vlan81-phx1--elasticsearch {
   match {
       source-address brasstacks1;
       destination-address elasticsearch-zlb.dev.vlan81.phx1;
       application elasticsearch;
   }
   then {
        permit;
   }


Thanks,
Dave
Assignee: network-operations → dcurado
Status: NEW → UNCONFIRMED
Ever confirmed: false
Flags: needinfo?(emorley)
(Reporter)

Comment 2

3 years ago
Ah that's the dev ES instance from the looks of it (flow was added in bug 869627). We're not using that either (bug 860256, bug 779644), so it can be removed.

Thanks! :-)
Flags: needinfo?(emorley)
(Assignee)

Comment 3

3 years ago
OK, I removed that policy as well.
Dave
Status: UNCONFIRMED → RESOLVED
Last Resolved: 3 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.