Ryan Lane has submitted this change and it was merged.
Change subject: Add http/https to ferm rules on wikitech
......................................................................
Add http/https to ferm rules on wikitech
Change-Id: If8ea4d161aa3ee6ff3cf7cedfd7fff48999c3bc3
---
M manifests/openstack.pp
1 file changed, 5 insertions(+), 0 deletions(-)
Approvals:
Ryan Lane: Verified; Looks good to me, approved
Andrew Bogott: Looks good to me, but someone else must approve
diff --git a/manifests/openstack.pp b/manifests/openstack.pp
index 069fd78..141f595 100644
--- a/manifests/openstack.pp
+++ b/manifests/openstack.pp
@@ -12,6 +12,11 @@
$other_master = '208.80.152.32'
}
+ # Wikitech HTTP/HTTPS
+ ferm::rule { 'http_public':
+ rule => 'saddr (0.0.0.0/0) proto tcp dport (http https) ACCEPT;',
+ }
+
# LDAP
ferm::rule { 'ldap_private_labs':
rule => 'saddr (10.0.0.0/8 208.80.152.0/22) proto tcp dport (ldap
ldaps) ACCEPT;',
--
To view, visit https://gerrit.wikimedia.org/r/114431
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: If8ea4d161aa3ee6ff3cf7cedfd7fff48999c3bc3
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ryan Lane <[email protected]>
Gerrit-Reviewer: Andrew Bogott <[email protected]>
Gerrit-Reviewer: Ryan Lane <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
