Use static IPs for EPP endpoints (#2685)

These IPs are now provisioned by Terraform. Also delete the get-endpoints.py script as it is no longer necessary.
google · Feb 24, 2025 · bcf42bd · bcf42bd
1 parent ed95d19
commit bcf42bd
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 161 deletions.
diff --git a/db/src/main/resources/sql/schema/nomulus.golden.sql b/db/src/main/resources/sql/schema/nomulus.golden.sql
@@ -2,8 +2,8 @@
 -- PostgreSQL database dump
 --
 
--- Dumped from database version 17.3
--- Dumped by pg_dump version 17.3
+-- Dumped from database version 17.4
+-- Dumped by pg_dump version 17.4
 
 SET statement_timeout = 0;
 SET lock_timeout = 0;

diff --git a/jetty/get-endpoints.py b/jetty/get-endpoints.py
diff --git a/jetty/kubernetes/nomulus-frontend.yaml b/jetty/kubernetes/nomulus-frontend.yaml
@@ -110,6 +110,7 @@ metadata:
   annotations:
     cloud.google.com/l4-rbs: enabled
     networking.gke.io/weighted-load-balancing: pods-per-node
+    networking.gke.io/load-balancer-ip-addresses: "EPP-ipv6-main,EPP-ipv4-main"
 spec:
   type: LoadBalancer
   # Traffic is directly delivered to a node, preserving the original source IP.

diff --git a/release/cloudbuild-restart-proxies.yaml b/release/cloudbuild-restart-proxies.yaml
@@ -48,7 +48,9 @@ steps:
       gcloud container clusters get-credentials $name \
         --project $project_id --location $location
       kubectl rollout restart deployment/proxy-deployment
+      # Sleep for 20 min for the rollout to stabilize.
+      sleep 1200
     done < <(gcloud container clusters list --project $project_id | grep proxy-cluster)
-timeout: 3600s
+timeout: 7200s
 options:
   machineType: 'N1_HIGHCPU_8'