Follow-up from "feat: new configuration option cloneAccessAddresses to control port publishing for clone containers; restrict to 127.0.0.1 by default (#528)"

The following discussion from !786 (merged) should be addressed:

  • @vitabaks started a discussion: (+4 comments)

    Test 2

    DLE image: registry.gitlab.com/postgres-ai/database-lab/dblab-server:528-local-clone-host

    Deploy DLE

    related MR: dle-se-ansible!34 (merged)

    docker run --rm -it --env HCLOUD_API_TOKEN=${HCLOUD_API_TOKEN} \
      postgresai/dle-se-ansible:clone-access-addresses \
        ansible-playbook deploy_dle.yml --extra-vars \
        "provision='hetzner' \
        server_name='vitaliy-dle-test-clone-addresses' \
        server_type='CCX22' \
        server_image='ubuntu-22.04' \
        server_location='ash' \
        volume_size='60' \
        dle_verification_token='******' \
        dle_version='3.4.0-rc.7' \
        zpool_datasets_number='3' \
        dle_platform_org_key='*****' \
        dle_platform_url='https://v2.postgres.ai/api/general' \
        dle_platform_project_name='vitaliy-dle-test' \
        dle_image='registry.gitlab.com/postgres-ai/database-lab/dblab-server:528-local-clone-host'"
    

    Create and check clones for all images:

    root@vitaliy-dle-test-clone-addresses:~# docker ps -a | grep dblab_clone
    1ca30a493a4e   registry.gitlab.com/postgres-ai/se-images/google-cloud-sql:15                    "docker-entrypoint.s…"   15 seconds ago       Up 14 seconds               5432/tcp, 127.0.0.1:6007->6007/tcp   dblab_clone_6007
    c38bd3893a33   registry.gitlab.com/postgres-ai/se-images/aurora:15                              "docker-entrypoint.s…"   About a minute ago   Up About a minute           5432/tcp, 127.0.0.1:6006->6006/tcp   dblab_clone_6006
    19a8ce379429   registry.gitlab.com/postgres-ai/se-images/rds:15                                 "docker-entrypoint.s…"   2 minutes ago        Up 2 minutes                5432/tcp, 127.0.0.1:6005->6005/tcp   dblab_clone_6005
    995bdb15715e   registry.gitlab.com/postgres-ai/se-images/timescale-cloud:15                     "docker-entrypoint.s…"   33 minutes ago       Up 33 minutes               5432/tcp, 127.0.0.1:6004->6004/tcp   dblab_clone_6004
    653592edbd75   registry.gitlab.com/postgres-ai/se-images/heroku:15                              "docker-entrypoint.s…"   34 minutes ago       Up 34 minutes               5432/tcp, 127.0.0.1:6003->6003/tcp   dblab_clone_6003
    75da25f56fbb   registry.gitlab.com/postgres-ai/se-images/postgis:15                             "docker-entrypoint.s…"   38 minutes ago       Up 38 minutes               5432/tcp, 127.0.0.1:6002->6002/tcp   dblab_clone_6002
    4be753943b3f   postgresai/extended-postgres:15                                                  "docker-entrypoint.s…"   39 minutes ago       Up 39 minutes               5432/tcp, 127.0.0.1:6001->6001/tcp   dblab_clone_6001
    384b753d1dc7   registry.gitlab.com/postgres-ai/se-images/supabase:15                            "docker-entrypoint.s…"   46 minutes ago       Up 46 minutes (unhealthy)   5432/tcp, 127.0.0.1:6000->6000/tcp   dblab_clone_6000
    • listen 127.0.0.1 only
    root@vitaliy-dle-test-clone-addresses:~# psql "host=localhost port=6000 user=test dbname=test"
    Password for user test: 
    psql (15.3 (Ubuntu 15.3-1.pgdg22.04+1))
    Type "help" for help.
    
    test=# \l
                                                    List of databases
       Name    |  Owner   | Encoding |  Collate   |   Ctype    | ICU Locale | Locale Provider |   Access privileges   
    -----------+----------+----------+------------+------------+------------+-----------------+-----------------------
     postgres  | postgres | UTF8     | en_US.utf8 | en_US.utf8 |            | libc            | 
     template0 | postgres | UTF8     | en_US.utf8 | en_US.utf8 |            | libc            | =c/postgres          +
               |          |          |            |            |            |                 | postgres=CTc/postgres
     template1 | postgres | UTF8     | en_US.utf8 | en_US.utf8 |            | libc            | =c/postgres          +
               |          |          |            |            |            |                 | postgres=CTc/postgres
     test      | postgres | UTF8     | C.UTF-8    | C.UTF-8    |            | libc            | 
    (4 rows)
    
    test=# \q
    • connected via localhost
    root@vitaliy-dle-test-clone-addresses:~# psql "host=5.161.190.122 port=6000 user=test dbname=test"
    psql: error: connection to server at "5.161.190.122", port 6000 failed: Connection refused
    	Is the server running on that host and accepting TCP/IP connections?
    • unavailable at a public address

    passed