Cloud Relay infrastructure operations

This document describes operational guidance for Cloud Relay infrastructure. This service is operated on the Managed Services Platform (MSP).

If you need assistance with MSP infrastructure, reach out to the Core Services team in #discuss-core-services.

Service overview

PROPERTYDETAILS
Service IDcloud-relay (specification)
Ownerscloud
Service kindCloud Run service
Environmentsprod
Docker imageus-central1-docker.pkg.dev/control-plane-5e9ee072/docker/cloud-relay
Source codehttps://github.com/sourcegraph/cloud-relay - .

Environments

prod

PROPERTYDETAILS
Project IDcloud-relay-prod-bd4c
Categoryinternal
Deployment typemanual
Resources
Slack notifications#alerts-cloud-relay-prod
AlertsGCP monitoring
ErrorsSentry cloud-relay-prod
Domaincloud-relay.sgdev.org
Cloudflare WAF

MSP infrastructure access needs to be requested using Entitle for time-bound privileges.

For Terraform Cloud access, see prod Terraform Cloud.

prod Cloud Run

The Cloud Relay prod service implementation is deployed on Google Cloud Run.

PROPERTYDETAILS
ConsoleCloud Run service
Service logsGCP logging
Service tracesCloud Trace
Service errorsSentry cloud-relay-prod

You can also use sg msp to quickly open a link to your service logs:

sg msp logs cloud-relay prod

prod Terraform Cloud

This service’s configuration is defined in sourcegraph/managed-services/services/cloud-relay/service.yaml, and sg msp generate cloud-relay prod generates the required infrastructure configuration for this environment in Terraform. Terraform Cloud (TFC) workspaces specific to each service then provisions the required infrastructure from this configuration. You may want to check your service environment’s TFC workspaces if a Terraform apply fails (reported via GitHub commit status checks in the sourcegraph/managed-services repository, or in #alerts-msp-tfc).

To access this environment’s Terraform Cloud workspaces, you will need to log in to Terraform Cloud and then request Entitle access to membership in the “Managed Services Platform Operator” TFC team. The “Managed Services Platform Operator” team has access to all MSP TFC workspaces.

The Terraform Cloud workspaces for this service environment are grouped under the msp-cloud-relay-prod tag, or you can use:

sg msp tfc view cloud-relay prod