search

BCDevOps / OpenShift4-RollOut

This is the primary board for all activities related to the roll out of OpenShift 4
Apache License 2.0
0 stars 2 forks source link

OCP KLAB2 - Firewall request for external API access #487

Closed wmhutchison closed 3 years ago

wmhutchison commented 3 years ago

Describe the issue For allowing external API access to the new KLAB2 cluster, a firewall access request will need to be submitted.

Which Sprint Goal is this issue related to?

Additional context

Definition of done Checklist (where applicable)

wmhutchison commented 3 years ago

Will be able to get this fired off this sprint.

wmhutchison commented 3 years ago

Leaving this in Sprint Backlog. Available time didn't present itself during Sprint 23 to tackle this at all due to work on initial bootstrapping of the cluster has eaten up all available time.

Am expecting a small lull in the cluster-bootstrap efforts to arise in the next few days, so will remain in Sprint Backlog with the intent of pushing this out the door during Sprint 24.

wmhutchison commented 3 years ago

Moving to Blocked for now. There's been some recent network IP range changes to the KLAB2 project, and before we carve out a proper firewall request, want to make sure we have properly solidified on what is taking place so that the firewall rule requests will be accurate.

wmhutchison commented 3 years ago

Moving from Blocked to Sprint Backlog for now. The development churn on KLAB2 appears to have subsided so we can safely plan on getting firewall rules implemented. Will push this out early in this upcoming sprint, but not right away (some remaining work on KLAB2 takes precedence).

wmhutchison commented 3 years ago

Will confirm with Dan Deane when he's back in office next week as to how much of this can be fielded by NSX-T changes since the production interface for KLAB2 is now 100% within the control of NSX-T for firewall access.

wmhutchison commented 3 years ago

Remains in Sprint Backlog, but should be finally fulfilled in the upcoming Sprint 26 due to other dependencies also seeking resolution during that Sprint period.

wmhutchison commented 3 years ago

Backlogging this entirely for now. Too many other things for KLAB2 need to be figured out first and resolved before getting this done, so we avoid having to file multiple firewall requests. Dan's currently cooking up a big firewall request to resolve a bunch of operational issues.

wmhutchison commented 3 years ago

Can proceed with this task in Sprint 27.

wmhutchison commented 3 years ago

Firewall access request form filled out, internal request submitted under ticket RITM0092838.

wmhutchison commented 3 years ago

Firewall change planned for evening of Monday May 10th, will confirm once work is announced as completed.

wmhutchison commented 3 years ago

Setup completed, access confirmed with external network test against API.