EBernhardson has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/344517 )

Change subject: Allow search clusters to reindex from eachother
......................................................................

Allow search clusters to reindex from eachother

Whitelists the following potential reindex source/destinations
with the elasticsearch reindex API:

* codfw -> eqiad
* codfw -> relforge
* eqiad -> codfw
* eqiad -> relforge

Change-Id: I2670f5a5fbaa2940a84e7bb20b5ce66856edc7ce
---
M hieradata/role/codfw/elasticsearch/cirrus.yaml
M hieradata/role/common/elasticsearch/relforge.yaml
M hieradata/role/eqiad/elasticsearch/cirrus.yaml
M modules/elasticsearch/templates/elasticsearch_5.yml.erb
4 files changed, 15 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/17/344517/1

diff --git a/hieradata/role/codfw/elasticsearch/cirrus.yaml 
b/hieradata/role/codfw/elasticsearch/cirrus.yaml
index cd68fb5..ea3f184 100644
--- a/hieradata/role/codfw/elasticsearch/cirrus.yaml
+++ b/hieradata/role/codfw/elasticsearch/cirrus.yaml
@@ -63,3 +63,6 @@
 
 elasticsearch::https::certificate_name: 'search.svc.codfw.wmnet'
 profile::base::dns_alt_names:           'search.svc.codfw.wmnet'
+
+# Allow reindex from eqiad to codfw
+elasticsearch::reindex_remote_whitelist: 'search.svc.eqiad.wmnet:9200'
diff --git a/hieradata/role/common/elasticsearch/relforge.yaml 
b/hieradata/role/common/elasticsearch/relforge.yaml
index f2138f7..086ec0c 100644
--- a/hieradata/role/common/elasticsearch/relforge.yaml
+++ b/hieradata/role/common/elasticsearch/relforge.yaml
@@ -17,3 +17,6 @@
 # once all elasticsearch clusters are upgraded to version 5, we will move
 # elasticsearch to our main repo and remove this configuration
 apt::use_experimental: true
+
+# Allow reindex from eqiad or codfw to relforge
+elasticsearch::reindex_remote_whitelist: 
'search.svc.eqiad.wmnet:9200,search.svc.codfw.wmnet:9200'
diff --git a/hieradata/role/eqiad/elasticsearch/cirrus.yaml 
b/hieradata/role/eqiad/elasticsearch/cirrus.yaml
index 65765c2..dce74b2 100644
--- a/hieradata/role/eqiad/elasticsearch/cirrus.yaml
+++ b/hieradata/role/eqiad/elasticsearch/cirrus.yaml
@@ -64,3 +64,6 @@
 
 elasticsearch::https::certificate_name: 'search.svc.eqiad.wmnet'
 profile::base::dns_alt_names:           'search.svc.eqiad.wmnet'
+
+# Allow reindex from eqiad to codfw
+elasticsearch::reindex_remote_whitelist: 'search.svc.codfw.wmnet:9200'
diff --git a/modules/elasticsearch/templates/elasticsearch_5.yml.erb 
b/modules/elasticsearch/templates/elasticsearch_5.yml.erb
index 87aea61..e2d0bc9 100644
--- a/modules/elasticsearch/templates/elasticsearch_5.yml.erb
+++ b/modules/elasticsearch/templates/elasticsearch_5.yml.erb
@@ -426,3 +426,9 @@
 index.load_fixed_bitset_filters_eagerly: false
 
 <% end -%>
+
+##
+# Hosts allowed as data sources for reindexing
+<% if reindex_remote_whitelist %>
+reindex.remote.whitelist: "<%= @reindex_remote_whitelist %>"
+<% end %>

-- 
To view, visit https://gerrit.wikimedia.org/r/344517
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I2670f5a5fbaa2940a84e7bb20b5ce66856edc7ce
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: EBernhardson <ebernhard...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to