Switch sync_cloudsql_access.py to use external IPs |
||||||||
Issue descriptionOne approach to solving https://crbug.com/839028 is to switch to the TKO DBs external IP address (aka Primary IP, aka V2 IP). If we update sync_cloudsql_access.py to use external IP addresses for our Ganeti instances when whitelisting them, this is feasible. The challenges are: 1) We have to discover the external IPs ourselves with a mechanism like: runlocalssh ansible -i bin/di shard -a "curl -s -4 myexternalip.com/raw" 2) Those IPs can change without warning. 3) TKO "migrate" user accounts will not work via the V2 IP address. 2/3 may or may not be significant issues.
,
May 3 2018
,
May 3 2018
I believe nxia@ is working on this? Anyway, I also suggest that we augment it to use both external and internal IPs, rather than switch it. That makes it possible to migrate back and forth between v1 and v2 tko address. Chase-Pending in case this isn't already resolved by next week.
,
May 3 2018
,
May 4 2018
The following revision refers to this bug: https://chrome-internal.googlesource.com/chromeos/chromeos-admin/+/260c46bf7a8e20c861aa6a853c9230551ecd9454 commit 260c46bf7a8e20c861aa6a853c9230551ecd9454 Author: Ningning Xia <nxia@google.com> Date: Fri May 04 05:01:13 2018
,
May 4 2018
nxia@'s CLs for this have been run (and updated the TKO whitelist), but have not yet landed. Since the lab has been less affected by this issue today/last night, we will hold off on switches TKO IPs today. https://crrev.com/i/620845
,
May 7 2018
,
May 7 2018
https://chromium-review.googlesource.com/c/chromiumos/third_party/autotest/+/1042874 CL is still in CQ. will close the bug after the CL is merged.
,
May 8 2018
The following revision refers to this bug: https://chromium.googlesource.com/chromiumos/third_party/autotest/+/aeb8b63f700b3015745233923b482161f55e6397 commit aeb8b63f700b3015745233923b482161f55e6397 Author: Ningning Xia <nxia@google.com> Date: Tue May 08 03:46:00 2018 Fetch server external ips for sync_cloudsql_access BUG= chromium:839520 TEST=None CQ-DEPEND=CL:*620407 Change-Id: If8fe9c36fc856fad1912fec5266fcf4df25709e3 Reviewed-on: https://chromium-review.googlesource.com/1042874 Commit-Ready: ChromeOS CL Exonerator Bot <chromiumos-cl-exonerator@appspot.gserviceaccount.com> Tested-by: Ningning Xia <nxia@chromium.org> Reviewed-by: Don Garrett <dgarrett@chromium.org> [modify] https://crrev.com/aeb8b63f700b3015745233923b482161f55e6397/site_utils/sync_cloudsql_access.py
,
May 8 2018
|
||||||||
►
Sign in to add a comment |
||||||||
Comment 1 by dgarr...@chromium.org
, May 3 2018