Project

General

Profile

Actions
Copy link

action #119446

closed

coordination #121720: [saga][epic] Migration to QE setup in PRG2+NUE3 while ensuring availability

coordination #116623: [epic] Migration of SUSE Nbg based openQA+QA+QAM systems to new security zones

Conduct the migration of SUSE openQA+QA systems from Nbg SRV2 to new security zones

Added by okurz about 2 years ago. Updated about 1 year ago.

Status:
Resolved
Priority:
Low
Assignee:
okurz
Target version:
openQA Project (public) - Ready
Start date:
2022-09-15
Due date:
% Done:

0%

Estimated time:
Tags:
infra

Description

Motivation

See parent #116623

Acceptance criteria

  • AC1: All QA machines in Nbg SRV2 are in new security zones
  • AC2: All QA machines in Nbg SRV2 are fully usable in production

Suggestions

Related issues 3 (1 open — 2 closed)

Related to openQA Infrastructure (public) - action #120651: [openQA][infra][ipmi][worker][api] The expected pattern CMD_FINISHED-xxxxx returned but did not show up in serial log (wait_serial timed out) size:MNew2022-11-17

Actions
Copied from QA (public) - action #119443: Conduct the migration of SUSE openQA systems from Nbg SRV1 to new security zones size:MResolvedokurz2022-11-17

Actions
Copied to QA (public) - action #119449: Conduct the migration of SUSE openQA+QA systems from Nbg QA labs to new security zonesResolvedokurz2022-09-15

Actions
Actions
Copy link
 #1

Updated by okurz about 2 years ago

  • Copied from action #119443: Conduct the migration of SUSE openQA systems from Nbg SRV1 to new security zones size:M added
Actions
Copy link
 #2

Updated by okurz about 2 years ago

  • Copied to action #119449: Conduct the migration of SUSE openQA+QA systems from Nbg QA labs to new security zones added
Actions
Copy link
 #3

Updated by okurz about 2 years ago

  • Description updated (diff)
Actions
Copy link
 #4

Updated by xlai about 2 years ago

@okurz Hi Oliver, FYI, we suggest to hold on this task of SRV2 migration to security zone until https://progress.opensuse.org/issues/120651 is fixed. Otherwise ipmi jobs will be impacted a lot, because in that ticket it reports that serial log can't be got after security zone migration (all xx_script_run impacted).

Actions
Copy link
 #5

Updated by okurz almost 2 years ago

  • Related to action #120651: [openQA][infra][ipmi][worker][api] The expected pattern CMD_FINISHED-xxxxx returned but did not show up in serial log (wait_serial timed out) size:M added
Actions
Copy link
 #6

Updated by okurz almost 2 years ago

  • Category set to Infrastructure
  • Priority changed from Normal to Low

xlai wrote:

@okurz Hi Oliver, FYI, we suggest to hold on this task of SRV2 migration to security zone until https://progress.opensuse.org/issues/120651 is fixed. Otherwise ipmi jobs will be impacted a lot, because in that ticket it reports that serial log can't be got after security zone migration (all xx_script_run impacted).

Yes, I agree. Blocked by #120651 and #119449

Actions
Copy link
 #7

Updated by okurz over 1 year ago

  • Target version changed from Ready to future
Actions
Copy link
 #8

Updated by okurz about 1 year ago

  • Status changed from Blocked to Resolved
  • Target version changed from future to Ready

With NUE1 decommissioned all active systems are in new security zones and I guess machines that are brought (back) into production will also end up in new security zones. No specific work for improving error reporting here was done and I don't think we need to improve that further. We need to rely on SUSE-IT to monitor their firewall accordingly.

Actions
Copy link

Also available in: Atom PDF