jamesfredley commented on code in PR #16301: URL: https://github.com/apache/grails-core/pull/16301#discussion_r3919929210
########## grails-forge/docs/aws-elastic-beanstalk.md: ########## @@ -163,15 +167,23 @@ curl --fail --show-error --silent \ "https://${SLOT_HOSTNAME}/versions"; ``` -Repeat for all five hostnames. Success proves certificate selection, SNI, the host rule, and target reachability. Public DNS already CNAME's these hostnames to the ALB, so the same check works without `--connect-to`. +Repeat for all seven hostnames. Success proves certificate selection, SNI, the host rule, and target reachability. Public DNS already CNAME's these hostnames to the ALB, so the same check works without `--connect-to`. Review Comment: Agreed. Changed to CNAMEs in the follow-up commit. ########## grails-forge/docs/aws-elastic-beanstalk.md: ########## @@ -163,15 +167,23 @@ curl --fail --show-error --silent \ "https://${SLOT_HOSTNAME}/versions"; ``` -Repeat for all five hostnames. Success proves certificate selection, SNI, the host rule, and target reachability. Public DNS already CNAME's these hostnames to the ALB, so the same check works without `--connect-to`. +Repeat for all seven hostnames. Success proves certificate selection, SNI, the host rule, and target reachability. Public DNS already CNAME's these hostnames to the ALB, so the same check works without `--connect-to`. ## Cloudflare DNS -The five API hostnames already have DNS-only CNAME records targeting the shared ALB. Keep them unproxied. Do not create or change `start.grails.org`. To reverse traffic, restore the previous CNAME targets. Keep GCP available through the observation window so that reversal remains possible. - -## Optional Future Route 53 DNS +Cloudflare is authoritative for the seven API hostnames. Configure each as a DNS-only (grey-cloud, not proxied) CNAME targeting the shared ALB DNS name: -Do not deploy `grails-forge/infrastructure/dns.yaml` while Cloudflare remains authoritative. After authoritative DNS moves to Route 53, it can create the five A alias records with only `SharedStackName` and `HostedZoneId`. The current template creates A aliases only; it does not create AAAA records. It deliberately does not modify `start.grails.org`. +| Hostname | Record type | Target | Proxy status | +| --- | --- | --- | --- | +| `latest.grails.org` | CNAME | `grails-Share-VlKo5OeswX04-1769683670.us-east-1.elb.amazonaws.com` | DNS only | Review Comment: Valid for a runbook that outlives a particular ALB. The table now uses the SharedLoadBalancerDnsName export instead of a hardcoded hostname. Current production still CNAMEs at that same ALB; operators should copy the live export if it is ever replaced. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
