Alexandros Kosiaris has submitted this change and it was merged.
Change subject: kafkatee: webstats-collector, add ferm service
......................................................................
kafkatee: webstats-collector, add ferm service
The webstats-collector opens the TCP port configured in $collector_port
which is currently 3815. There is no ferm service configured
for this yet though, so we can't apply base::firewall on the nodes
that are using this because it has a default DROP policy.
To be able to merge I5859dbce6da06a5e27, and then entirely get rid
of the old iptables class, we need to add ferm services for all (TCP)
services that are running on hosts that also have udp2log.
This is one of them, see the comments on the linked change for others.
Change-Id: Ibf3af60a8932325f12bf3bf97499459c454abba7
---
M manifests/role/analytics/kafkatee.pp
1 file changed, 6 insertions(+), 0 deletions(-)
Approvals:
Ottomata: Looks good to me, but someone else must approve
Alexandros Kosiaris: Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/role/analytics/kafkatee.pp
b/manifests/role/analytics/kafkatee.pp
index 7b34979..c668e85 100644
--- a/manifests/role/analytics/kafkatee.pp
+++ b/manifests/role/analytics/kafkatee.pp
@@ -244,6 +244,12 @@
require => Package['webstatscollector'],
}
+ ferm::service { 'webstats-collector':
+ proto => 'tcp',
+ port => $collector_port,
+ srange => '$ALL_NETWORKS',
+ }
+
# Gzip pagecounts files hourly.
cron { 'webstats-dumps-gzip':
# 2014-10-30 turning of webstatscollector here while we
--
To view, visit https://gerrit.wikimedia.org/r/179429
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ibf3af60a8932325f12bf3bf97499459c454abba7
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>
Gerrit-Reviewer: Alexandros Kosiaris <akosia...@wikimedia.org>
Gerrit-Reviewer: Faidon Liambotis <fai...@wikimedia.org>
Gerrit-Reviewer: Matanya <mata...@foss.co.il>
Gerrit-Reviewer: Ottomata <o...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
