[08:45:15] <marostegui>	 arturo: I have stopped haproxy on dbproxy1017, which is m5 proxy, which isn't used by any database, but I saw on the yaml some entries for cloudcontrol hosts, which I believe were added by andrewbogott but I have no idea if those are used for anything
[08:46:01] <marostegui>	 arturo: https://github.com/wikimedia/puppet/blob/production/hieradata/hosts/dbproxy1017.yaml
[08:46:07] <arturo>	 looking
[08:46:11] <marostegui>	 thanks
[08:47:43] <arturo>	 in general I think we hardcode m5-master.eqiad.wmnet everywhere in our openstack config marostegui
[08:48:11] <marostegui>	 arturo: yeah, that was I also thought, but wanted to double check as those lines are new to me there
[08:48:24] <marostegui>	 ss didn't show any different connection on dbproxy1017 as well
[08:48:29] <arturo>	 might be a mistake/leftover from previous operations by andrew
[08:48:56] <marostegui>	 arturo: I will leave haproxy stopped for 15-30 minutes just in case, before reimagining
[08:49:05] <arturo>	 ack
[08:49:06] <marostegui>	 just in case you see something broken
[08:49:12] <arturo>	 thanks for the heads up!
[08:49:42] <arturo>	 I'm unsure about other stuff using m5 though. Wikitech, and friends? Not sure how is that configured
[08:49:58] <marostegui>	 so m5-master points to the DB, not to the proxy
[08:50:08] <marostegui>	 which is not desired, but it is the way it is
[08:50:39] <marostegui>	 arturo: but as those lines are new to me there, I wanted to double check with you that nothing really uses the proxy specifically
[08:53:05] <arturo>	 honestly, I'm not sure if those hiera keys are used by the DB anywhere to set up iptables rules perhaps?
[08:53:24] <arturo>	 I'm not very familiar with the DB setup
[08:53:38] <arturo>	 or just for generating the grants file from a template?
[08:54:07] <marostegui>	 arturo: https://gerrit.wikimedia.org/r/c/operations/puppet/+/595220
[08:54:27] <marostegui>	 https://gerrit.wikimedia.org/r/c/operations/puppet/+/595210
[08:55:05] <arturo>	 I assume db1133 is m5-master, right?
[08:55:08] <marostegui>	 yep
[08:55:54] <marostegui>	 arturo: I assume nothing is using dbproxy1017 directly, as it has been stopped for around 10 minutes, but it would be good to know what those extra lines on dbproxy1017 are :)
[08:56:14] <arturo>	 so the original question here is if we are using the proxy for anything inside openstack. My answer to that is no, we use m5-master.eqiad.wmnet directly (no proxy as you said)
[08:56:27] <arturo>	 and for those hiera lines, a cleanup patch might be in order :-)
[08:57:14] <marostegui>	 arturo: cool, so I will reimage the host. And if you could talk to andrewbogott to see if they are needed or not, that'd be nice too so we don't run into confusions in the future
[08:57:23] <arturo>	 ok
[08:57:26] <marostegui>	 thank you!
[08:59:41] <arturo>	 noted!
[09:00:18] <marostegui>	 thanks
[12:43:28] <moritzm>	 any ongoing installations? otherwise I'd reboot the install* servers in 10m