Dzahn has submitted this change and it was merged.
Change subject: silver/wikitech: allow mysql connection from tin
......................................................................
silver/wikitech: allow mysql connection from tin
T98682 says tin needs to be able to make mysql connections to silver.
We should do that instead of suggested work arounds on T107547 i think.
Bug:T98682
Change-Id: I727877c7f94435b57d1b42a6bcfa13fb1ba27167
---
M manifests/role/mariadb.pp
1 file changed, 7 insertions(+), 0 deletions(-)
Approvals:
jenkins-bot: Verified
Dzahn: Looks good to me, approved
diff --git a/manifests/role/mariadb.pp b/manifests/role/mariadb.pp
index 1c8cea1..c99dc3a 100644
--- a/manifests/role/mariadb.pp
+++ b/manifests/role/mariadb.pp
@@ -571,6 +571,13 @@
ferm::rule { 'mysql_tendril':
rule => "saddr 10.64.0.15 proto tcp dport (3306) ACCEPT;",
}
+
+ # mysql from tin (T98682)
+ ferm::service { 'mysql_tin':
+ proto => 'tcp',
+ port => '3306',
+ srange => '@resolve(tin.eqiad.wmnet)',
+ }
}
class role::mariadb::proxy(
--
To view, visit https://gerrit.wikimedia.org/r/232529
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I727877c7f94435b57d1b42a6bcfa13fb1ba27167
Gerrit-PatchSet: 5
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Alex Monk <[email protected]>
Gerrit-Reviewer: Andrew Bogott <[email protected]>
Gerrit-Reviewer: ArielGlenn <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Hoo man <[email protected]>
Gerrit-Reviewer: Jcrespo <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
