ArielGlenn has submitted this change and it was merged.
Change subject: role::parsoid::beta must allow port 8000
......................................................................
role::parsoid::beta must allow port 8000
When adding role::beta:natfixup on parsoid2 instance, it started
refusing connection on port 8000. The reason being that the ferm rules
come with a default policy of DROP.
bug: 45868
Change-Id: I36f2bcbeacedf24aa6deaa9739669ca86cd8820c
---
M manifests/role/parsoid.pp
1 file changed, 8 insertions(+), 0 deletions(-)
Approvals:
ArielGlenn: Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/role/parsoid.pp b/manifests/role/parsoid.pp
index cf34429..dcccff8 100644
--- a/manifests/role/parsoid.pp
+++ b/manifests/role/parsoid.pp
@@ -91,4 +91,12 @@
group => wikidev,
mode => '2775',
}
+
+ # Beta parsoid server has some ferm DNAT rewriting rules (bug 45868) so we
+ # have to explicitly allow parsoid port 8000
+ ferm::service { 'http':
+ proto => 'tcp',
+ port => '8000'
+ }
+
}
--
To view, visit https://gerrit.wikimedia.org/r/101210
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I36f2bcbeacedf24aa6deaa9739669ca86cd8820c
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Hashar <[email protected]>
Gerrit-Reviewer: ArielGlenn <[email protected]>
Gerrit-Reviewer: jenkins-bot
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
