Yuvipanda has uploaded a new change for review.
https://gerrit.wikimedia.org/r/185614
Change subject: deployment: Open up redis port on deployment masters
......................................................................
deployment: Open up redis port on deployment masters
base::firewall is applied on deployment-bastion, so things
can't seem to deploy in beta because the redis port isn't
accessible. Adding in prod too since it is a good practice,
even if prod machines don't have base::firewall yet.
In a glorious future, these two roles would be unified
Change-Id: I617b780a9cc7c5859e93b2b1d506909582106e62
---
M manifests/role/deployment.pp
1 file changed, 10 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/14/185614/1
diff --git a/manifests/role/deployment.pp b/manifests/role/deployment.pp
index 8777571..85510b7 100644
--- a/manifests/role/deployment.pp
+++ b/manifests/role/deployment.pp
@@ -207,6 +207,11 @@
monitor => true,
}
+ ferm::rule { 'deployment-redis':
+ proto => 'tcp',
+ port => '6379',
+ }
+
package { 'percona-toolkit':
ensure => latest,
}
@@ -284,6 +289,11 @@
monitor => false,
}
+ ferm::rule { 'deployment-redis':
+ proto => 'tcp',
+ port => '6379',
+ }
+
sudo::group { "project_${::instanceproject}_deployment_server":
group => "project-${::instanceproject}",
privileges => [
--
To view, visit https://gerrit.wikimedia.org/r/185614
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I617b780a9cc7c5859e93b2b1d506909582106e62
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Yuvipanda <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
