action #119446
closedcoordination #121720: [saga][epic] Migration to QE setup in PRG2+NUE3 while ensuring availability
coordination #116623: [epic] Migration of SUSE Nbg based openQA+QA+QAM systems to new security zones
Conduct the migration of SUSE openQA+QA systems from Nbg SRV2 to new security zones
0%
Description
Motivation¶
See parent #116623
Acceptance criteria¶
- AC1: All QA machines in Nbg SRV2 are in new security zones
- AC2: All QA machines in Nbg SRV2 are fully usable in production
Suggestions¶
- Wait for #119443 to finish
- Continue the migration. okurz suggest to start with currently unused machines ix64ph1079.qa.suse.de, ix64ph1080.qa.suse.de, ix64ph1081.qa.suse.de
- Ensure machines are reachable over SSH and IPMI at least
- Document changes in our infrastructure documentation, e.g. progress.opensuse.org/projects/openqav3/wiki/, https://wiki.suse.net/index.php/OpenQA, https://gitlab.suse.de/openqa/salt-pillars-openqa/-/blob/master/openqa/workerconf.sls
- Rinse and repeat for the other machines
- Ensure machines are usable
Updated by okurz almost 2 years ago
- Copied from action #119443: Conduct the migration of SUSE openQA systems from Nbg SRV1 to new security zones size:M added
Updated by okurz almost 2 years ago
- Copied to action #119449: Conduct the migration of SUSE openQA+QA systems from Nbg QA labs to new security zones added
Updated by xlai almost 2 years ago
@okurz Hi Oliver, FYI, we suggest to hold on this task of SRV2 migration to security zone until https://progress.opensuse.org/issues/120651 is fixed. Otherwise ipmi jobs will be impacted a lot, because in that ticket it reports that serial log can't be got after security zone migration (all xx_script_run impacted).
Updated by okurz almost 2 years ago
- Related to action #120651: [openQA][infra][ipmi][worker][api] The expected pattern CMD_FINISHED-xxxxx returned but did not show up in serial log (wait_serial timed out) size:M added
Updated by okurz almost 2 years ago
- Category set to Infrastructure
- Priority changed from Normal to Low
xlai wrote:
@okurz Hi Oliver, FYI, we suggest to hold on this task of SRV2 migration to security zone until https://progress.opensuse.org/issues/120651 is fixed. Otherwise ipmi jobs will be impacted a lot, because in that ticket it reports that serial log can't be got after security zone migration (all xx_script_run impacted).
Updated by okurz 11 months ago
- Status changed from Blocked to Resolved
- Target version changed from future to Ready
With NUE1 decommissioned all active systems are in new security zones and I guess machines that are brought (back) into production will also end up in new security zones. No specific work for improving error reporting here was done and I don't think we need to improve that further. We need to rely on SUSE-IT to monitor their firewall accordingly.