You are browsing a read-only backup copy of Wikitech. The primary site can be found at wikitech.wikimedia.org

Portal:Cloud VPS/Admin/Cloudinfra: Difference between revisions

From Wikitech-static
Jump to navigation Jump to search
imported>Alex Monk
No edit summary
 
imported>Majavah
 
(2 intermediate revisions by 2 users not shown)
Line 1: Line 1:
The <code>cloudinfra</code> project is a very special project intended to hold infrastructure relating to running the rest of Cloud VPS. Access to it is restricted under [[Help:Access policies]].
The <code>cloudinfra</code> project is a very special project intended to hold infrastructure relating to running the rest of Cloud VPS. Access to it is restricted under [[Help:Access policies]].
== Instances ==


Types of instances it contains currently:
Types of instances it contains currently:


== ntp ==
=== ntp ===
These instances are important! They serve the rest of Cloud VPS with NTP updates.
These instances serve the rest of Cloud VPS with NTP updates.
 
=== mx-out ===
These instances serve the rest of Cloud VPS with outbound mail handling.
 
=== cloud-puppetmaster ===
These instances serve as the puppet master for projects that do not use project-local puppet masters.
 
=== cloudinfra-db ===
These instances contain MariaDB databases that keep state for important Cloud VPS infrastructure hosted within Cloud VPS itself. Currently that only includes the Puppet ENC database (labspuppet).
 
We don't yet have regular backups of that cluster ([[:phab:T301640]]). :(


== mx-out ==
=== cloudinfra-internal-puppetmaster ===
These instances are important! They serve the rest of Cloud VPS with outbound mail handling.
This is a small [[Help:Standalone puppetmaster|project-local puppetmaster]] that keeps secrets (such as cumin ssh keys and enc database passwords) for some of the cloudinfra instances.


== cloud-puppetmaster ==
=== enc ===
These instances are a work in progress. See [[phab:T171188]]
These instances host the [[Portal:Cloud VPS/Admin/Hiera|Puppet ENC API]] that was previously hosted on the cloud-puppetmasters.


== cloudinfra-db ==
== DNS ==
These instances are a work in progress. See [[phab:T219428]]


They are currently m1.small. One will replicate from the other as a backup, it should not be on the same physical host.
This project also has an important role with regards to DNS. See [[Portal:Cloud_VPS/Admin/DNS]] for more info.


== cloudinfra-internal-puppetmaster ==
== codfw1dev ==
This instance is a work in progress. Will be a project-puppetmaster for (some of) the cloudinfra project instances. To be used to serve secrets to cloud-puppetmaster and cloudinfra-db hosts, and potentially mx-out in the event that e.g. DKIM keys are added there in future. No plans to be used with the ntp instances.


This is currently m1.small.
The equivalent of this project in the [[Portal:Cloud_VPS/Admin/Deployments#codfw1dev_deployment|codfw1dev deployment]] is called '''cloudinfra-codfw1dev''', and has the same role within the deployment.

Latest revision as of 07:44, 20 April 2022

The cloudinfra project is a very special project intended to hold infrastructure relating to running the rest of Cloud VPS. Access to it is restricted under Help:Access policies.

Instances

Types of instances it contains currently:

ntp

These instances serve the rest of Cloud VPS with NTP updates.

mx-out

These instances serve the rest of Cloud VPS with outbound mail handling.

cloud-puppetmaster

These instances serve as the puppet master for projects that do not use project-local puppet masters.

cloudinfra-db

These instances contain MariaDB databases that keep state for important Cloud VPS infrastructure hosted within Cloud VPS itself. Currently that only includes the Puppet ENC database (labspuppet).

We don't yet have regular backups of that cluster (phab:T301640). :(

cloudinfra-internal-puppetmaster

This is a small project-local puppetmaster that keeps secrets (such as cumin ssh keys and enc database passwords) for some of the cloudinfra instances.

enc

These instances host the Puppet ENC API that was previously hosted on the cloud-puppetmasters.

DNS

This project also has an important role with regards to DNS. See Portal:Cloud_VPS/Admin/DNS for more info.

codfw1dev

The equivalent of this project in the codfw1dev deployment is called cloudinfra-codfw1dev, and has the same role within the deployment.