action #135191
closedQA - coordination #121720: [saga][epic] Migration to QE setup in PRG2+NUE3 while ensuring availability
QA - coordination #123800: [epic] Provide SUSE QE Tools services running in PRG2 aka. Prg CoLo
Migration of o3 VM to PRG2 - Use direct zabbix connection size:M
0%
Description
Motivation¶
The openQA webUI VM for o3 was moved to PRG2 but for zabbix we still use an "over old-ariel" connection. We should use a direct zabbix connection
Acceptance criteria¶
- AC1: o3 can monitor without relying on old-ariel
Suggestions¶
- Look into zabbix config https://zabbix.nue.suse.com/zabbix.php?action=host.edit&hostid=10923
- Try to find a zabbix proxy in the new prg2 based o3 network, maybe it already exists. Or ask Eng-Infra for help
- Reconfigure what was done for new o3 to talk to the local zabbix proxy instead of over the tunnel Take a look into
# grep -v '^#' /etc/zabbix/zabbix_agentd.conf | grep Server
Server=172.17.0.1
ServerActive=zabbix-proxy-opensuse
Updated by okurz 8 months ago
- Copied from action #133364: Migration of o3 VM to PRG2 - Decommission old-ariel in NUE1 as soon as we do not need it anymore added
Updated by dheidler 7 months ago
- Status changed from In Progress to Blocked
Currently there is a tunnel (tunX interface) between old-ariel and new-ariel using ssh.
There is an iptables rule on old-ariel to redirect incoming connections to port 10049 on old-ariel to new-ariel via the tunnel.
The zabbix-agent on new-ariel is configured to listen on that port.
So on old-ariel you can reach old-ariel zabbix agent on the 10050 default port and new-ariel on 10049.
There doesn't seem to be a proxy reachable from new-ariel at the moment.
So requesting assistance from infra:
https://sd.suse.com/servicedesk/customer/portal/1/SD-134603
Updated by dheidler 7 months ago
- Status changed from Blocked to In Progress
Infra is done:
firewall rules implemented. use proxy zabbix-proxy.dmz-prg2.suse.org.
As the default route on new-ariel goes via extern facing eth0, there is a static route needed to reach zabbix-proxy.dmz-prg2.suse.org. via eth1 (as it (10.151.15.2) is not part of the network attached to eth1, connection needs to go via gw at 10.150.1.254)
/etc/sysconfig/network/routes:
10.151.15.2/32 10.150.1.254 - -