Muehlenhoff has submitted this change and it was merged.
Change subject: Add ferm rules for pybal SSH health checks
......................................................................
Add ferm rules for pybal SSH health checks
The use of INTERNAL as the srange is an interim solution, until 236519
(and followup commits for eqiad/esams/ulsfo) are merged. This allows
to already enable this on a few servers in codfw for some advance testing.
Change-Id: I7a100d38c58bbcd9f932a36f7cd48034f66908b4
---
M manifests/role/mediawiki.pp
1 file changed, 7 insertions(+), 0 deletions(-)
Approvals:
Filippo Giunchedi: Looks good to me, but someone else must approve
Muehlenhoff: Verified; Looks good to me, approved
diff --git a/manifests/role/mediawiki.pp b/manifests/role/mediawiki.pp
index b46215a..baab713 100644
--- a/manifests/role/mediawiki.pp
+++ b/manifests/role/mediawiki.pp
@@ -32,6 +32,13 @@
rule => 'proto tcp dport (6379 6380 11212) NOTRACK;',
}
+ ferm::service{ 'ssh_pybal':
+ proto => 'tcp',
+ port => '22',
+ srange => '$INTERNAL',
+ desc => 'Allow incoming SSH for pybal health checks',
+ }
+
if $::site == 'eqiad' {
monitoring::service { 'mediawiki-installation DSH group':
description => 'mediawiki-installation DSH group',
--
To view, visit https://gerrit.wikimedia.org/r/236734
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I7a100d38c58bbcd9f932a36f7cd48034f66908b4
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Rush <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
