801729 - real mobile-imaging to staging an prod db's

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps: DC ACL Request, task)

Description

[Dustin J. Mitchell [:dustin] (he/him)]

mobile-imaging-001.p1.releng.scl1.mozilla.com
mobile-imaging-002.p2.releng.scl1.mozilla.com
mobile-imaging-003.p3.releng.scl1.mozilla.com
mobile-imaging-004.p4.releng.scl1.mozilla.com
mobile-imaging-005.p5.releng.scl1.mozilla.com
mobile-imaging-006.p6.releng.scl1.mozilla.com
mobile-imaging-007.p7.releng.scl1.mozilla.com
mobile-imaging-008.p8.releng.scl1.mozilla.com
mobile-imaging-009.p9.releng.scl1.mozilla.com
mobile-imaging-010.p10.releng.scl1.mozilla.com
 -> {stage-rw-vip,stage-ro-vip,buildbot-rw-vip,buildbot-ro-vip}.db.scl3.mozilla.com:tcp/3306

I'm not sure if this *actually* depends on bug 797593, but I thought I'd get it in place all the same.

Comment 1

[casey ransom [:casey]]

the implementation doesn't matter, though testing it is hard. feel free to punt back if it's not open when the depend is resolved.

Comment 2

[casey ransom [:casey]]

(yes, this it means it's done)

Comment 3

[Dustin J. Mitchell [:dustin] (he/him)]

This works for most, but not all, VLANs!

mobile-imaging-004.p4.releng.scl1.mozilla.com seems unable to reach the VIP.

Comment 4

[casey ransom [:casey]]

weird... must have had a bad paste.
[e-mail]# show | compare 
[edit security zones security-zone dc address-book]
       address buildbot-master49.srv.releng.scl3 { ... }
+      address mobile-imaging-004.p4.releng.scl1 10.12.131.33/32;
[edit security zones security-zone dc address-book address-set mobile-imaging.p.releng.scl1]
        address mobile-imaging-010.p10.releng.scl1 { ... }
+       address mobile-imaging-004.p4.releng.scl1;


added in the missing #4.