staging: Migrate swh-web to elastic infra
Status:
- static node: rp0.internal.s.s.n -> webapp.internal.s.s.n
- Exposed publicly at https://webapp.staging.swh.network
Migration:
- Add new CNAME webapp-postgresql to target the cluster staging ingress
- Deploy webapp staging in elastic cluster
- Drop ips restriction since it's publicly exposed
- webapp.staging: Stop gunicorn-swh-webapp, swh-webapp*timer, apache (to ensure what's actually serving is the new infra)
- swh/infra/puppet/puppet-swh-site!651 (merged): Adapt reverse proxy to target the proper elastic backends
- swh/infra/puppet/puppet-swh-site!653 (merged): Install static webapp icinga checks for webapp.staging.swh.network
End-goal:
- the following services should be publicly exposed:
- keycloak authentication in the staging realm
- Add forge now moderation ui ok
- Save code now moderation ui ok
- Deposit moderation ui ok
Post-migration:
- swh/infra/puppet/puppet-swh-site!652 (merged): Clean up/Decommission webapp.staging
- swh/infra/puppet/puppet-swh-site!652 (merged): Drop rules about graphql redirections in puppet