Page MenuHomePhabricator

[terraform] Make Tunnelbroker discoverable for Identity
ClosedPublic

Authored by bartek on Dec 18 2023, 3:58 AM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Oct 22, 9:19 AM
Unknown Object (File)
Tue, Oct 22, 8:58 AM
Unknown Object (File)
Tue, Oct 22, 5:31 AM
Unknown Object (File)
Tue, Oct 22, 5:31 AM
Unknown Object (File)
Sep 22 2024, 4:29 PM
Unknown Object (File)
Sep 7 2024, 9:55 AM
Unknown Object (File)
Sep 7 2024, 9:26 AM
Unknown Object (File)
Sep 7 2024, 9:26 AM
Subscribers

Details

Summary

Noticed that there are multiple error logs on staging that Identity wasn't able to ask the device for more one-time keys because it couldn't reach Tunnelbroker.
This diff exposes Tunnelbroker gRPC port to the ECS Service Connect and updates the Identity configuration to use it.

Test Plan

Tested on staging, @kamil confirmed that he was able to get the "refresh request" message:

image.png (114×1 px, 76 KB)

Diff Detail

Repository
rCOMM Comm
Lint
Lint Not Applicable
Unit
Tests Not Applicable