BBlack has uploaded a new change for review.
https://gerrit.wikimedia.org/r/146090
Change subject: beta::natfix removal step 1
......................................................................
beta::natfix removal step 1
beta::natdestrewrite is only used by beta::natfix. Switching
it to ensure => absent first to remove the rules from the hosts
pending removal of the role/class. This functionality was
replaced with dnsmasq hacks in:
aee21e6 Add public->private mappings for labs to dnsmasq aliases
Bonus upside: if anything breaks due to this, it's trivial to
revert.
Change-Id: Ie8d66c462abdb35c566f1c53607a0d07d84b2d62
---
M modules/beta/manifests/natdestrewrite.pp
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/90/146090/1
diff --git a/modules/beta/manifests/natdestrewrite.pp
b/modules/beta/manifests/natdestrewrite.pp
index 022b63f..1f78ecd 100644
--- a/modules/beta/manifests/natdestrewrite.pp
+++ b/modules/beta/manifests/natdestrewrite.pp
@@ -4,6 +4,7 @@
# iptables -t nat -I OUTPUT --dest $public_ip -j DNAT --to-dest $private_ip
ferm::rule { "nat_rewrite_for_${name}":
+ ensure => 'absent',
table => 'nat',
chain => 'OUTPUT',
domain => 'ip',
--
To view, visit https://gerrit.wikimedia.org/r/146090
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie8d66c462abdb35c566f1c53607a0d07d84b2d62
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
