974556 - 403 on affiliates-dev

Status: VERIFIED FIXED

(Infrastructure & Operations Graveyard :: WebOps: Engagement, task)

Description

[Stephen Donner [:stephend] Not actively reading bugmail]

Getting a 403 on https://affiliates-dev.allizom.org/

Comment 1

[Stephen Donner [:stephend] Not actively reading bugmail]

Attachment: affiliates.png

Comment 2

[Chris Turra [:cturra]]

dropping the priority here. this is the result of some recent work to move affiliates off of the old engagement cluster and put it onto the generic cluster. it looks like traffic for affiliates-dev is routing to the stage nodes, which is why you're seeing this 403. will investigate further and get this routing to -dev correctly.

Comment 3

[Chris Turra [:cturra]]

looks like the DNS records were in place, but did not have the correct views selected. i submitted the view change and we should be good.

$ dig +short affiliates-dev.allizom.org
generic-dev.zlb.phx.mozilla.net.
63.245.217.82

$ curl -IL https://affiliates-dev.allizom.org
HTTP/1.1 301 MOVED PERMANENTLY
Server: Apache
Vary: Accept-Language,X-Mobile,User-Agent
Vary: Accept-Encoding
X-Backend-Server: generic1.dev.webapp.phx1.mozilla.com
X-Content-Security-Policy: allow 'self'; options eval-script inline-script; img-src 'self' data: https://affiliates-cdn.mozilla.org https://secure.gravatar.com https://graph.facebook.com https://*.fbcdn.net https://*.akamaihd.net http://*.google-analytics.com https://*.google-analytics.com; script-src 'self' https://browserid.org https://login.persona.org http://*.google-analytics.com https://*.google-analytics.com; frame-src 'self' https://browserid.org https://login.persona.org; font-src 'self' https://www.mozilla.org
Content-Type: text/html; charset=utf-8
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
P3P: CP="Mozilla's privacy practices are described at https://mozilla.org/privacy"
Date: Wed, 19 Feb 2014 22:42:02 GMT
Location: https://affiliates-dev.allizom.org/en-US/
Transfer-Encoding: chunked
Connection: Keep-Alive
x-frame-options: DENY

HTTP/1.1 200 OK
Server: Apache
Vary: Cookie,X-Mobile,User-Agent
Vary: Accept-Encoding
X-Backend-Server: generic1.dev.webapp.phx1.mozilla.com
X-Content-Security-Policy: allow 'self'; options eval-script inline-script; img-src 'self' data: https://affiliates-cdn.mozilla.org https://secure.gravatar.com https://graph.facebook.com https://*.fbcdn.net https://*.akamaihd.net http://*.google-analytics.com https://*.google-analytics.com; script-src 'self' https://browserid.org https://login.persona.org http://*.google-analytics.com https://*.google-analytics.com; frame-src 'self' https://browserid.org https://login.persona.org; font-src 'self' https://www.mozilla.org
Content-Type: text/html; charset=utf-8
Strict-Transport-Security: max-age=15768000 ; includeSubDomains
P3P: CP="Mozilla's privacy practices are described at https://mozilla.org/privacy"
Date: Wed, 19 Feb 2014 22:42:03 GMT
Transfer-Encoding: chunked
Connection: Keep-Alive
Set-Cookie: anoncsrf=7ad0f460ca4534454ed68aeec37faab6; expires=Thu, 20-Feb-2014 00:42:05 GMT; httponly; Max-Age=7200; Path=/; secure
x-frame-options: DENY

Comment 4

[Stephen Donner [:stephend] Not actively reading bugmail]

Thx; verified FIXED; manual and automated tests pass.