Muehlenhoff has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/225851

Change subject: Add ferm rules for dbproxy hosts
......................................................................

Add ferm rules for dbproxy hosts

Add a ferm::service definition for the haproxy setup on dbproxy*. The other
services running on dbproxy* (like NRPE) are covered by the base ferm rules.

Note that this is currently a NOP since none of the dbproxy* hosts includes
base::firewall.

Bug: T104699
Change-Id: Ibb5cc13d6aa6c30d927ed14ce21c340c645f4e72
---
M manifests/role/mariadb.pp
1 file changed, 7 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/51/225851/1

diff --git a/manifests/role/mariadb.pp b/manifests/role/mariadb.pp
index c0db98b..97a2266 100644
--- a/manifests/role/mariadb.pp
+++ b/manifests/role/mariadb.pp
@@ -589,6 +589,13 @@
         description  => 'haproxy failover',
         nrpe_command => "/usr/lib/nagios/plugins/check_haproxy 
--check=failover",
     }
+
+    ferm::service { 'mariadb-haproxy':
+        proto  => 'tcp',
+        port   => 3306,
+        desc   => 'HAProxy setup for dbproxy* systems',
+        srange => '$INTERNAL',
+    }
 }
 
 class role::mariadb::proxy::slaves(

-- 
To view, visit https://gerrit.wikimedia.org/r/225851
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ibb5cc13d6aa6c30d927ed14ce21c340c645f4e72
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to