fedora-infrastructure

#5706 Allow qa taskotron client hosts port 80 and 443 access to dist-git.
Closed Opened by ralph.

Closed
Reopen Issue

It looks like the following hosts cannot access dist-git (prod and stg) due to RHIT firewall rules.

  • qa10.qa.fedoraproject.org
  • qa11.qa.fedoraproject.org
  • qa12.qa.fedoraproject.org
  • qa13.qa.fedoraproject.org

We need them to be able to access both staging dist-git and prod dist-git for taskotron checks that clone repos to run checks on specfiles, dockerfiles, and module files.

After looking for a while in vain, I could not find a place in our ansible configuration that would bar these hosts from accessing the dist-git nodes, so I assume that this is an RHIT firewall issue.

As for a request ticket with RHIT, I also do not know what IPs to use for these hosts since they have networking configuration that is unfamiliar to me.

The end goal is to be able to ssh to one of those nodes and do either a curl http://pkgs.stg.fedoraproject.org or curl https://src.stg.fedoraproject.org.

I wonder if this is the qa-isolated stuff in ansible. I thought that we had this use case taken care of, though.

I wonder if this is the qa-isolated stuff in ansible. I thought that we had this use case taken care of, though.

ok. This wasn't a firewall issue, but a dns one. ;)

It was trying to access those via their external ip's where it should be using the internal proxy ips.

I have corrected dns now and I think src and src.stg should all work now.

Please confirm.

:revolving_hearts:

Confirmed that I can curl both src and src.stg. Perfecto! :dollar: :crocodile: :rocket:

@ralph changed the status to Closed
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.