Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/240070
Change subject: snapshots: Allow SSH from deployment hosts
......................................................................
snapshots: Allow SSH from deployment hosts
Change-Id: I35261ed6a51de865a30f4398cea8d09ef2adb075
---
M manifests/role/snapshot.pp
1 file changed, 5 insertions(+), 3 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/70/240070/1
diff --git a/manifests/role/snapshot.pp b/manifests/role/snapshot.pp
index 4f073e2..41e2bc0 100644
--- a/manifests/role/snapshot.pp
+++ b/manifests/role/snapshot.pp
@@ -1,9 +1,11 @@
class role::snapshot::common {
include role::dataset::systemusers
-
- # No additional ferm rules need to be declared, the dumps are
- # directly written to an NFS mount from dataset1001
include base::firewall
+
+ # Allow SSH from deployment hosts
+ ferm::rule { 'deployment-ssh':
+ rule => 'proto tcp dport ssh saddr $DEPLOYMENT_HOSTS ACCEPT;',
+ }
}
class role::snapshot::cron::primary {
--
To view, visit https://gerrit.wikimedia.org/r/240070
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I35261ed6a51de865a30f4398cea8d09ef2adb075
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
