657764 - enable mysql access from buildbot-master{11..14}.build.scl1.m.c and buildbot-master{07..10}.build.sjc1.m.c to buildbot_schedulers & buildbot dbs on tm-b01-master01

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps, task)

Description

[Chris AtLee [:catlee]]

Probably need both mysql ACLs and firewall access granted.

Comment 1

[Dave Miller [:justdave]]

These need the same access as the existing buildbot user that's on from several other hosts?

Comment 2

[Nick Thomas [:nthomas] (UTC+12)]

That's right, actually accessing both the buildbot_schedulers and buildbot DBs.

Comment 3

[Armen [:armenzg]]

Any ETA?

Comment 4

[Dave Miller [:justdave]]

ok, so the affected hosts are:

buildbot-master07.build.sjc1.mozilla.com   10.2.71.132
buildbot-master08.build.sjc1.mozilla.com   10.2.71.133
buildbot-master09.build.sjc1.mozilla.com   10.2.71.134
buildbot-master10.build.sjc1.mozilla.com   10.2.71.142
buildbot-master11.build.scl1.mozilla.com   10.12.49.11
buildbot-master12.build.scl1.mozilla.com   10.12.49.12
buildbot-master13.build.scl1.mozilla.com   10.12.49.13
buildbot-master14.build.scl1.mozilla.com   10.12.49.14

Comment 5

[Dave Miller [:justdave]]

GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.2.71.132';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.2.71.132';
GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.2.71.133';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.2.71.133';
GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.2.71.134';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.2.71.134';
GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.2.71.142';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.2.71.142';
GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.250.48.246';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.250.48.246';
GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.12.49.11';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.12.49.11';
GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.12.49.12';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.12.49.12';
GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.12.49.13';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.12.49.13';
GRANT ALL PRIVILEGES ON `buildbot_schedulers`.* TO 'buildbot'@'10.12.49.14';
GRANT ALL PRIVILEGES ON `buildbot`.* TO 'buildbot'@'10.12.49.14';

Same password as used by the buildbot user from elsewhere.

Netops, need the following opened on the firewall:

10.2.71.132 -> 10.2.70.105:3306
10.2.71.132 -> 10.2.70.106:3306
10.2.71.133 -> 10.2.70.105:3306
10.2.71.133 -> 10.2.70.106:3306
10.2.71.134 -> 10.2.70.105:3306
10.2.71.134 -> 10.2.70.106:3306
10.2.71.142 -> 10.2.70.105:3306
10.2.71.142 -> 10.2.70.106:3306
10.12.49.11 -> 10.2.70.105:3306
10.12.49.11 -> 10.2.70.106:3306
10.12.49.12 -> 10.2.70.105:3306
10.12.49.12 -> 10.2.70.106:3306
10.12.49.13 -> 10.2.70.105:3306
10.12.49.13 -> 10.2.70.106:3306
10.12.49.14 -> 10.2.70.105:3306
10.12.49.14 -> 10.2.70.106:3306

Comment 6

[Dave Miller [:justdave]]

(all TCP of course)

Comment 7

[Armen [:armenzg]]

Thanks!

Comment 8

[Arzhel Younsi [:XioNoX]]

Opened

[root@buildbot-master11 ~]# telnet 10.2.70.105 3306
Trying 10.2.70.105...
Connected to tm-b01-master01.mozilla.org (10.2.70.105).


etc...