staging: Migrate swh-web to elastic infra

Status:

• static node: rp0.internal.s.s.n -> webapp.internal.s.s.n
• Exposed publicly at https://webapp.staging.swh.network

Migration:

• Add new CNAME webapp-postgresql to target the cluster staging ingress
• Deploy webapp staging in elastic cluster
• Drop ips restriction since it's publicly exposed
• webapp.staging: Stop gunicorn-swh-webapp, swh-webapp*timer, apache (to ensure what's actually serving is the new infra)
• swh/infra/puppet/puppet-swh-site!651 (merged): Adapt reverse proxy to target the proper elastic backends
• swh/infra/puppet/puppet-swh-site!653 (merged): Install static webapp icinga checks for webapp.staging.swh.network

End-goal:

• the following services should be publicly exposed:
  • https://webapp.staging.swh.network/
  • https://webapp.staging.swh.network/graphql/
  • https://graphql.staging.swh.network/
• keycloak authentication in the staging realm
• Add forge now moderation ui ok
• Save code now moderation ui ok
• Deposit moderation ui ok

Post-migration:

• swh/infra/puppet/puppet-swh-site!652 (merged): Clean up/Decommission webapp.staging
• swh/infra/puppet/puppet-swh-site!652 (merged): Drop rules about graphql redirections in puppet