MySQL security group #269
Replies: 3 comments 3 replies
-
|
It sounds like this security group would be added to the mysql host (to open 3306 on the mysql host), not to magic castle. Is that correct? If so, this security group probably shouldn't go into the mc template, and it should be scripted with a different template or even external script. Security groups are attached to vms that need to be accessed or restricted. |
Beta Was this translation helpful? Give feedback.
-
|
I would like both the mysql host and the mc cluster to both be in the security group so the login node can connect to the mysql host.
…________________________________
From: Edwin Skidmore ***@***.***>
Sent: Monday, July 29, 2024 6:24 PM
To: microbiomedata/nmdc-edge ***@***.***>
Cc: Flynn, Mark C ***@***.***>; Author ***@***.***>
Subject: [EXTERNAL] Re: [microbiomedata/nmdc-edge] MySQL security group (Discussion #269)
It sounds like this security group would be added to the mysql host (to open 3306 on the mysql host), not to magic castle. Is that correct? If so, this security group probably shouldn't go into the mc template, and it should be scripted with a different template or even script.
—
Reply to this email directly, view it on GitHub<https://urldefense.com/v3/__https://github.com/microbiomedata/nmdc-edge/discussions/269*discussioncomment-10184900__;Iw!!Bt8fGhp8LhKGRg!AokuryPZq1AKhVuqRpvi3jvYuvOfv-My2DLMDhXD9fYYW5ceGcDczHSdfdKhCo4v8bZBtgFcKvA_znUE1SeG_b4c$>, or unsubscribe<https://urldefense.com/v3/__https://github.com/notifications/unsubscribe-auth/AEXIUF34JDWM3OPAMCTCSYTZO3MLJAVCNFSM6AAAAABLVIVOGWVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTAMJYGQ4TAMA__;!!Bt8fGhp8LhKGRg!AokuryPZq1AKhVuqRpvi3jvYuvOfv-My2DLMDhXD9fYYW5ceGcDczHSdfdKhCo4v8bZBtgFcKvA_znUE1bYQegBs$>.
You are receiving this because you authored the thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
Sorry, I edited my original response to provide a clarification, but it looks like you responded before seeing it. The security group applies to the mysql host based on your description of what needs to be accessed. |
Beta Was this translation helpful? Give feedback.
-
|
As an alternative, does accessing the mysql host using the private ip grant unrestricted access from the login node? |
Beta Was this translation helpful? Give feedback.
-
|
It might be the case that you're growing out of the standard Magic Castle template, and you might consider extending the template to adapt it to your own needs i.e. adding additional security rules etc. Do you have someone on your team with terraform experience? If so, this should be relatively easy to instruct them on how to do this and import that custom template into CACAO. |
Beta Was this translation helpful? Give feedback.
-
|
I have the most terraform experience, lol
…________________________________
From: Edwin Skidmore ***@***.***>
Sent: Tuesday, July 30, 2024 5:45 PM
To: microbiomedata/nmdc-edge ***@***.***>
Cc: Flynn, Mark C ***@***.***>; Author ***@***.***>
Subject: [EXTERNAL] Re: [microbiomedata/nmdc-edge] MySQL security group (Discussion #269)
It might be the case that you're growing out of the standard Magic Castle template, and you might consider extending the template to adapt it to your own needs i.e. adding additional security rules etc. Do you have someone on your team with terraform experience? If so, this should be relatively easy to instruct them on how to do this and import that custom template into CACAO.
—
Reply to this email directly, view it on GitHub<https://urldefense.com/v3/__https://github.com/microbiomedata/nmdc-edge/discussions/269*discussioncomment-10195555__;Iw!!Bt8fGhp8LhKGRg!GK4buX8fdvfvJG0PG0WY5uhcMcEPdsMu8d3rDsjNkyN3uUlzuBeUHIggrgj-r0dyJyeKJ-Vfc7jlAsN76AgurOGj$>, or unsubscribe<https://urldefense.com/v3/__https://github.com/notifications/unsubscribe-auth/AEXIUF3TSCQ77TFWVFKC6PLZPAQP7AVCNFSM6AAAAABLVIVOGWVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTAMJZGU2TKNI__;!!Bt8fGhp8LhKGRg!GK4buX8fdvfvJG0PG0WY5uhcMcEPdsMu8d3rDsjNkyN3uUlzuBeUHIggrgj-r0dyJyeKJ-Vfc7jlAsN76JHiM0la$>.
You are receiving this because you authored the thread.Message ID: ***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
@edwins Would it be possible to create a security group. The new security group would include the the MySQL VM and open port 3306. I would like to use this security group for the new MC cluster instead of MC creating a new one It would help connecting the MySQL VM to MC cluster.
Beta Was this translation helpful? Give feedback.
All reactions