Muehlenhoff has submitted this change and it was merged.
Change subject: Add ferm rules for Logstash/Elasticsearch
......................................................................
Add ferm rules for Logstash/Elasticsearch
Bug: T104964
Change-Id: I50a13427befd33b230416896cc8267bbefdc9a2b
---
M manifests/role/logstash.pp
1 file changed, 10 insertions(+), 0 deletions(-)
Approvals:
Muehlenhoff: Verified; Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/role/logstash.pp b/manifests/role/logstash.pp
index fba22c5..d80cc3d 100644
--- a/manifests/role/logstash.pp
+++ b/manifests/role/logstash.pp
@@ -107,6 +107,16 @@
sender => 'mediawiki',
increment => [ '%{channel}.%{level}' ],
}
+
+ ## Firewalling
+ $logstash_nodes = hiera('logstash::cluster_hosts')
+ $logstash_nodes_ferm = join($logstash_nodes, ' ')
+
+ ferm::service { 'logstash_elastic_internode':
+ proto => 'tcp',
+ port => 9300,
+ srange => "@resolve((${logstash_nodes_ferm}))",
+ }
}
# == Class: role::logstash::elasticsearch
--
To view, visit https://gerrit.wikimedia.org/r/227960
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I50a13427befd33b230416896cc8267bbefdc9a2b
Gerrit-PatchSet: 5
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Alexandros Kosiaris <[email protected]>
Gerrit-Reviewer: BryanDavis <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
