Muehlenhoff has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/270280

Change subject: Add ferm rules for maps/cassandra
......................................................................

Add ferm rules for maps/cassandra

The other bits of maps* are TDB in a second commit.

Change-Id: I73b958d392ae74d829ea00230346253577845942
---
M manifests/role/maps.pp
1 file changed, 25 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/80/270280/1

diff --git a/manifests/role/maps.pp b/manifests/role/maps.pp
index 0e5088c..8543e12 100644
--- a/manifests/role/maps.pp
+++ b/manifests/role/maps.pp
@@ -39,6 +39,31 @@
     file { '/var/log/postgresql/postgresql-9.4-main.log':
         group => 'maps-admins',
     }
+
+    $cassandra_hosts = hiera('cassandra::seeds')
+    $cassandra_hosts_ferm = join($cassandra_hosts, ' ')
+
+    # Cassandra intra-node messaging
+    ferm::service { 'maps-cassandra-intra-node':
+        proto  => 'tcp',
+        port   => '7000',
+        srange => "(${cassandra_hosts_ferm})",
+    }
+
+    # Cassandra JMX/RMI
+    ferm::service { 'maps-cassandra-jmx-rmi':
+        proto  => 'tcp',
+        # hardcoded limit of 4 instances per host
+        port   => '7199',
+        srange => "(${cassandra_hosts_ferm})",
+    }
+
+    # Cassandra CQL query interface
+    ferm::service { 'cassandra-cql':
+        proto  => 'tcp',
+        port   => '9042',
+        srange => "(${cassandra_hosts_ferm})",
+    }
 }
 
 # Sets up a maps server master

-- 
To view, visit https://gerrit.wikimedia.org/r/270280
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I73b958d392ae74d829ea00230346253577845942
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to