pyrmont: expose REST API at insecura.nimbus.team

Inteded for tests of public insecure API access for Jacek.

Signed-off-by: Jakub Sokołowski <jakub@status.im>

ansible/group_vars/nimbus.pyrmont.yml

@@ -24,7 +24,7 @@ beacon_node_dist_validators_end: '{{ node.end | mandatory }}'
 nodes_layout:
   'metal-01.he-eu-hel1.nimbus.pyrmont': # 4000 validators each
     - { branch: 'stable',   start: 0,     end:  4000, build_frequency: '*-*-* 11:00:00' }
-    - { branch: 'unstable', start: 4000,  end:  8000, build_frequency: '*-*-* 13:00:00' }
+    - { branch: 'unstable', start: 4000,  end:  8000, build_frequency: '*-*-* 13:00:00' } # Public Beacon API
     - { branch: 'testing',  start: 8000,  end: 12000, build_frequency: '*-*-* 15:00:00' }
     - { branch: 'libp2p',   start: 12000, end: 16000, build_frequency: '*-*-* 17:00:00' }
   'metal-02.he-eu-hel1.nimbus.pyrmont': # 989  validators each

ansible/host_vars/metal-01.he-eu-hel1.nimbus.pyrmont.yml

@@ -0,0 +1,14 @@
+---
+# Communityu test REST API endpoint.
+beacon_node_rest_address: '0.0.0.0'
+
+# WARNING: This will change if number of nodes changes.
+redirect_ports:
+  # beacon-node-pyrmont-unstable-01
+  - { src: 80, dst: 9301, comment: 'Test Beacon API (80->9301/tcp)' }
+
+# Open Ports
+open_ports_default_comment: 'Test Beacon API'
+open_ports_list:
+  - { port: 80 }
+

ansible/pyrmont.yml

@@ -15,6 +15,7 @@
   hosts:
     - nimbus-pyrmont-metal
   roles:
+    - { role: redirect-ports,     tags: redirect-ports     }
     - { role: get-geth-web3-urls, tags: get-geth-web3-urls }
   tasks:
     - include_role: name=infra-role-beacon-node-linux

pyrmont.tf

@@ -18,3 +18,12 @@ module "nimbus_nodes_pyrmont_hetzner" {
     "65.21.196.48",
   ]
 }
+
+/* Community test REST API endpoints. */
+resource "cloudflare_record" "unstable_pyrmont_beacon_api" {
+  zone_id = local.zones["nimbus.team"]
+  name    = "insecura"
+  value   = module.nimbus_nodes_pyrmont_hetzner.public_ips[0]
+  type    = "A"
+  proxied = false
+}