Expanding HLT Configuration Proxy Support and Adding Tunnel Support : 13_X #40454
Conversation
|
+code-checks Logs: https://cmssdt.cern.ch/SDT/code-checks/cms-sw-PR-40454/33612
|
|
A new Pull Request was created by @Sam-Harper (Sam Harper) for master. It involves the following packages:
@cmsbuild, @missirol, @Martin-Grunewald can you please review it and eventually sign? Thanks. cms-bot commands are listed here |
|
please test |
|
+1 Summary: https://cmssdt.cern.ch/SDT/jenkins-artifacts/pull-request-integration/PR-86f0b5/29837/summary.html Comparison SummarySummary:
|
|
+hlt
|
cmsbuild
added
fully-signed
hlt-approved
and removed
hlt-pending
pending-signatures
labels
|
This pull request is fully signed and it will be integrated in one of the next master IBs (tests are also fine). This pull request will now be reviewed by the release team before it's merged. @perrotta, @dpiparo, @rappoccio (and backports should be raised in the release meeting by the corresponding L2) |
|
+1 |
|
@Sam-Harper , do you still plan to backport this PR down to New 12_4_X and 12_6_X releases are expected soon, but maybe we could backport this PR in time for those. I can also take care of the backports, if it helps. |
|
yes, sorry was at a workshop today, just prepping them now |
PR description:
This is the reopening of #40436 as I had to apply changes on top of existing 13_X changes thus one branch doesnt work for all now
From #40436
Confdb access is restricted to within the CERN network and thus for users outside CERN they must connect via tunnels.
Currently hltGetConfiguration and hltConfigFromDB allow the use of a socks proxy to allow users outside CERN to download menus. However the IPs need to be harcoded due to DNS issues (an issue with Java which as far as we are aware is unsolvable).
Only the offline DB had its IPs hardcoded, we now add IPs for the online (p5 only) and online mirror (accessable outside p5) so users can also use a proxy for these dbs.
Finally to have a work around in the future, support for direct tunnels where a user specifically forwards a given port on their machine to a db has been added so we can always fall back on this.
Aim to back port to 12_4, 12_5, 12_6