1380548 - Create binarytransparencyworker-1.srv.releng.use1.mozilla.com

Status: RESOLVED FIXED

(Release Engineering :: General, enhancement, P1)

Description

[Nick Thomas [:nthomas] (UTC+12)]

Brandon's puppet work in bug 1374963 allows us to provision a dedicated box for a binary transparency worker, and we'll start with one in use1 with dev creds.

Comment 1

[Nick Thomas [:nthomas] (UTC+12)]

https://github.com/mozilla-releng/build-cloud-tools/pull/306 to add a security group
https://github.com/mozilla-releng/build-cloud-tools/pull/307 to add the instance config

Allocated DNS and added to inventory:
binarytransparencyworker-1.srv.releng.use1.mozilla.com   10.134.48.50

Comment 2

[Nick Thomas [:nthomas] (UTC+12)]

Merged those two PRs:
https://github.com/mozilla-releng/build-cloud-tools/commit/ed637e55625de6129ec1ff2e92fc86b0d9ec2118
https://github.com/mozilla-releng/build-cloud-tools/commit/336ec96cdf2f9938844035e26ae3740ad6e36fa2

Spun up an instance:
python cloud-tools/scripts/aws_create_instance.py \
  -s aws-releng  -k secrets/aws-secrets.json  --ssh-key ~/.ssh/aws-ssh-key \
  -r us-east-1  -c cloud-tools/configs/binarytransparencyworker \
  -i cloud-tools/instance_data/us-east-1.instance_data_server_linux64.json \
  binarytransparencyworker-1

We did get one puppet error:
Fri Jul 14 01:38:49 -0700 2017 /Stage[main]/Main/Resources[firewall] (err): Failed to generate additional resources using 'generate': Command ip6tables_save is missing 
This seems to be a common error on server class machines in puppet, at least until end of May, which bug 1367938 tried to fix. Need to dig more.

Ran a test job:
https://tools.taskcluster.net/groups/JUBclRc8TiSEn42orOPhnQ/tasks/JUBclRc8TiSEn42orOPhnQ/runs/0

Great success \o/