1351654 - Add origin to CloudFront snippets.cdn.mozilla.net (prod-us-east)

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Giorgos Logiotatidis [:giorgos]]

+++ This bug was initially created as a clone of Bug #1345890 +++

Hi Ops!

We need to add another origin and behavior to CloudFront CDN

  snippets.cdn.mozilla.net (under it-cdn account)

New origin:

 - domain name: s3.amazonaws.com
 - path: snippets-prod-tokyo
 - id: s3-prod-tokyo

New behavior (place right before Default behavior):
 
 - tokyo/* -> s3-prod-tokyo

Behavior configuration:
 - Viewer Protocol Policy: HTTPS
 - Allowed HTTP Methods: GET, HEAD, OPTIONS
 - Cached HTTP Methods: GET, HEAD, OPTIONS
 - Forward Headers: None


See older bug 1260095 for reference

Comment 1

[Giorgos Logiotatidis [:giorgos]]

Correction:

New origin:

 - domain name: s3-ap-northeast-1.amazonaws.com
 - path: snippets-prod-tokyo
 - id: s3-prod-tokyo

New behavior (place right before Default behavior):
 
 - tokyo/* -> s3-prod-tokyo

Behavior configuration:
 - Viewer Protocol Policy: HTTPS
 - Allowed HTTP Methods: GET, HEAD, OPTIONS
 - Cached HTTP Methods: GET, HEAD, OPTIONS
 - Forward Headers: None

Comment 2

[Joey Krejci [:joeyk]]

As per IRC convo; will complete Monday 4/3

Comment 3

[:Atoll]

WebOps, you can safely ignore the long-term comments when doing the work.

We're having a conversation on IRC about what to do with this service vs. our ongoing work with securing the catchall Webops account. This one, however, is "it-cdn", not the usual Webops account, so whatever else is going on, this one needs to be handled specially. :jg is pursuing a more clear understanding of bug 1255067#c3 on the EE side, and I will see what I can uncover on our side. It may be that we MUST take no action, but I think we're more likely to discover that we *could* take action to make this better, long-term.

Comment 4

[Josh Mize [:jgmize]]

:joeyk was this completed on Monday as per comment #2?

Comment 5

[Joey Krejci [:joeyk]]

(In reply to Josh Mize [:jgmize] from comment #4)
> :joeyk was this completed on Monday as per comment #2?

Ah, no this missed my radar yesterday. Working on it today, will let you know when its finished. Sorry about that!

Comment 6

[Joey Krejci [:joeyk]]

Added Origin and Behavior, let me know if you need anything else!

CHG0011571 --> change request for reference.

Comment 7

[Giorgos Logiotatidis [:giorgos]]

Verified working, thanks!