Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/223537
Change subject: Add ferm rules for swift proxies
......................................................................
Add ferm rules for swift proxies
Change-Id: I9b5d098878a3fd21621c706a55be62eae8cab6bb
---
M manifests/swift.pp
1 file changed, 15 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/37/223537/1
diff --git a/manifests/swift.pp b/manifests/swift.pp
index 9afe6f9..8a8d26c 100644
--- a/manifests/swift.pp
+++ b/manifests/swift.pp
@@ -154,6 +154,21 @@
mode => '0444',
}
+ ferm::service { 'swift-proxy':
+ proto => 'tcp',
+ port => '80',
+ }
+
+ $swift_frontends = hiera('cluster: swift')
+ $swift_frontends_ferm = join($swift_frontends, ' ')
+
+ # Access to memcached from swift frontends
+ ferm::service { 'swift-memcached':
+ proto => 'tcp',
+ port => '11211',
+ srange => "@resolve(($swift_frontends_ferm)",
+ }
+
rsyslog::conf { 'swift-proxy':
source => 'puppet:///files/swift/swift-proxy.rsyslog.conf',
priority => 30,
--
To view, visit https://gerrit.wikimedia.org/r/223537
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I9b5d098878a3fd21621c706a55be62eae8cab6bb
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
