Muehlenhoff has submitted this change and it was merged.
Change subject: Add ferm rules for local carbon relay
......................................................................
Add ferm rules for local carbon relay
After enabling base::firewall on graphite2001, traffic towards port
1903 from graphite1001 was dropped. This patch adds the necessary
ferm access rules.
Change-Id: Iace95f62d2416e314a05070eb589901ff6aa06ed
---
M modules/role/manifests/graphite/production.pp
1 file changed, 12 insertions(+), 0 deletions(-)
Approvals:
Filippo Giunchedi: Looks good to me, but someone else must approve
Muehlenhoff: Verified; Looks good to me, approved
diff --git a/modules/role/manifests/graphite/production.pp
b/modules/role/manifests/graphite/production.pp
index 27aad08..e62c8aa 100644
--- a/modules/role/manifests/graphite/production.pp
+++ b/modules/role/manifests/graphite/production.pp
@@ -15,5 +15,17 @@
],
}
}
+
+ ferm::service { 'carbon_c_relay-local_relay_udp':
+ proto => 'udp',
+ port => '1903',
+ srange => '@resolve((graphite1001.eqiad.wmnet
graphite2001.codfw.wmnet:1903))',
+ }
+
+ ferm::service { 'carbon_c_relay-local_relay_tcp':
+ proto => 'tcp',
+ port => '1903',
+ srange => '@resolve((graphite1001.eqiad.wmnet
graphite2001.codfw.wmnet:1903))',
+ }
}
--
To view, visit https://gerrit.wikimedia.org/r/276413
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Iace95f62d2416e314a05070eb589901ff6aa06ed
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
