The WFLuxor blue network has DNS now#131
Draft
vmcj wants to merge 16 commits intoDOMjudge:wfluxorfrom
Draft
Conversation
We only need those on the domservers (& admin machines).
This is not possible (yet) for php_fpm but that one also exposes the least interesting metrics for people snooping. If we would want that we would need to do something with nginx for this. This is relevant for the online judge but also makes sense as teams can always query the node endpoint on domservers.
Alternative is to do the same as for the PHP-FPM exporter
Add intended final to naming, shortened naming for readability
There is not clean way to keep the playbooks the same and keep our generic variables. The structure: wf46 - domserver wf47 - domserver would get all variables from wf47 as that is the last defined hostgroup above domserver, putting the contest below would put all hosts (even judgehosts) in the domserver group. By symlinking we get the least worse solution as we have the variables, but for ansible those all look like new groups. Where possible we use the value from `all`, online is fully copied to make sure we don't pick any value from the onsite branch. Use default values for Luxor
We import our admin accounts in the analyst instance, using another password only makes this more difficult.
The replication password is set lower in the wf46/wf47 as besides the risk for leaking the database we would also setup replication on the analyst instance. The ICPC-tools variables are not relevant here as we at this point don't setup the CDS.
We still need to manually set our IP for the different instances for the keepalived (although we could ask the DNS for that value) but this is a start. This is not tested yet but should be relatively simple to test.
nickygerritsen
approved these changes
Apr 12, 2024
eldering
requested changes
Apr 13, 2024
Member
eldering
left a comment
eldering
left a comment
There was a problem hiding this comment.
Just a note to not merge this.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
We still need to manually set our IP for the different instances for the keepalived (although we could ask the DNS for that value) but this is a start. This is not tested yet but should be relatively simple to test.