Skip to content

Add pheidi config#420

Merged
podviaznikov merged 12 commits intomasterfrom
add-pheidi
Apr 14, 2016
Merged

Add pheidi config#420
podviaznikov merged 12 commits intomasterfrom
add-pheidi

Conversation

@podviaznikov
Copy link
Copy Markdown
Member

@podviaznikov podviaznikov commented Apr 12, 2016

Introduce new service

https://github.com/CodeNow/pheidi

It will live on the dock-services for now since it needs to talk to Mongo. We can move it to app-services later

Reviewers

Tests

Test any modifications on one of our environments.

  • tested on environment by someone

Deployment (post-merge)

Ensure that all environments have the given changes.

  • deployed to epsilon
  • deployed to gamma
  • deployed to delta

Comment thread ansible/pheidi.yml Outdated
rollbar_token: "{{ pheidi_rollbar_token }}"
tags: [ notify ]
- { role: builder, tags: [build] }
# - { role: tls-client, tls_service: mongodb, tags: [ tls ] }
Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

not sure if this line is important. API has it, khronos doesn't

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

since you talk to mongodb, yes, you want this.

@anandkumarpatel
Copy link
Copy Markdown

LGTM

@bkendall
Copy link
Copy Markdown
Contributor

if it's going to talk to mongo, but not the docks, it can live on app-services

Comment thread ansible/delta-hosts/variables Outdated
palantiri_rollbar_key=f675e9090d6f483ca4e742af2c7f2f83

[pheidi:vars]
pheidi_mongo_auth=api:72192e5a-a5e1-11e5-add9-0270db32f7ad
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is this a new user or did you copy it from somewhere?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I copied it. Both API and Khronos use the same pair

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we shouldn't... at least not for delta... does this do any writes at all?

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

no, it's have read-only access

@podviaznikov
Copy link
Copy Markdown
Member Author

Yeah, we were discussing it with @anandkumarpatel. The problem is that SG don't allow connection from app-services to the mongo. We were thinking that it's easier to deploy this service to dock-services for now. But we can update SG also. Not sure how to do that? Can it be done in Ansible or only though AWS dashboard?

Comment thread ansible/group_vars/alpha-pheidi.yml Outdated
-e MONGO_CACERT=/opt/ssl/mongo-client/ca.pem
-e MONGO_CERT=/opt/ssl/mongo-client/cert.pem
-e MONGO_KEY=/opt/ssl/mongo-client/key.pem
{% endif %}
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this blocking mechanic doesn't work. check out group_vars/alpha-navi.yml for how to do it (line by line - it sucks, but it adds a newline where it shouldn't)

@bkendall
Copy link
Copy Markdown
Contributor

move it to app-services. no reason to have it on the incorrect box. it doesn't talk to docker - doesn't need to be on dock services.

look in roles/ec2/sg_configure/tasks/main.yml for the security groups - gets run by the sg_configure.yml role. search for "MongoDB SG", and add an appropriate block for app services to be able to talk to mongo. :)

@podviaznikov
Copy link
Copy Markdown
Member Author

@bkendall applied all your comments. It't now deployed to epsilon-app-services and still works.

@bkendall
Copy link
Copy Markdown
Contributor

yay! looks good. best of luck getting it everywhere!

@bkendall
Copy link
Copy Markdown
Contributor

(merge and then deploy to delta!)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants