On 11/26/19 1:43 AM, Alex Monk wrote:
So if I recall correctly, and this may be hopelessly
outdated arcane information
from 3+ years ago at this point, historically the labtest realm had access to
the production private network (and in fact the only way to SSH in was by using
production hosts as a bastion), and this may have been a solution to that.
That makes sense, thanks.
I think we can replicate the model we have in eqiad1: create a bastion VM.
This should be also a good excessive for some newer folks in our environment, it
allows to learn how CloudVPS works in general, and replicate the setup in codfw1dev.
regards-
--
Arturo Borrero Gonzalez
SRE / Wikimedia Cloud Services
Wikimedia Foundation