965329 - Expose private cluster to all MoCo and MoFo

Status: RESOLVED FIXED

(Infrastructure & Operations :: IT-Managed Tools, task, P4)

Description

[Kyle Lahnakoski [:ekyle]]

Please expose the "private cluster" https://bugzilla.mozilla.org/show_bug.cgi?id=922477#c3) to all MoCo and MoFo employees with LDAP.

http://elasticsearch4.bugs.scl3.mozilla.com:9200/
http://elasticsearch5.bugs.scl3.mozilla.com:9200/
http://elasticsearch6.bugs.scl3.mozilla.com:9200/

Curtis and Mark CCed for any comments.

Comment 1

[Daniel Maher [:phrawzty]]

What we've done in the past for these type of requests is to set up a Zeus front-end for the service, for example http://elasticsearch-zlb.webapp.scl3.mozilla.com:9200, which is set up on the internal load balancer in the (widely-accessible) webapp VLAN.

Would this be an acceptable solution for you ?

Comment 2

[Daniel Maher [:phrawzty]]

I should add that "widely-accessible" in this case refers to anybody connected to the Mozilla VPN, which pre-supposes a valid LDAP login.

Comment 3

[Kyle Lahnakoski [:ekyle]]

Sounds acceptable!  Thanks!

Comment 4

[Daniel Maher [:phrawzty]]

$ curl http://elasticsearch-private.bugs.scl3.mozilla.com:9200/
{
  "ok" : true,
  "status" : 200,
  "name" : "elasticsearch5_bugs_scl3",
  "version" : {
    "number" : "0.90.10",
    "build_hash" : "0a5781f44876e8d1c30b6360628d59cb2a7a2bbb",
    "build_timestamp" : "2014-01-10T10:18:37Z",
    "build_snapshot" : false,
    "lucene_version" : "4.6"
  },
  "tagline" : "You Know, for Search"
}

Let me know if you need anything else.  Have a great day !

Comment 5

[Kyle Lahnakoski [:ekyle]]

I am unable to connect to that address.  I am using the MozillaVPN (openvpn.scl3.mozilla.com, openvpn.scl3.mozilla.com:1194:tcp, openvpn.scl3.mozilla.com:443:tcp, openvpn.scl3.mozilla.com:80:tcp)

Comment 6

[Daniel Maher [:phrawzty]]

08:48:27 <ekyle> the public can access the public cluster from http://esfrontline1.bugs.scl3.mozilla.com:80
08:48:28 <ekyle> https://bugzilla.mozilla.org/show_bug.cgi?id=965323
08:48:38 <ekyle> which fubar is working on
08:49:23 <ekyle> elasticsearch-private.bugs.scl3.mozilla.com:9200 ==> elasticsearch[4-6].bugs.scl3   YES
08:50:39 <ekyle> elasticsearch-zlb.bugs.scl3 can be opened to all employees on VPN too (after all, there is a public access point anyway)
08:51:30 <phrawzty> ok
08:53:16 <phrawzty> both should be open now
08:53:27 <phrawzty> you may need to disconnect and reconnect to the VPN
08:54:24 <ekyle> ok, I will try in a sec
08:57:48 <ekyle> yea!! it works!!  :)


Both are now open to all employees via the VPN. Enjoy! :)