Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/280213
Change subject: Enable base::firewall on neodymium
......................................................................
Enable base::firewall on neodymium
Salt master ports are granted via the Ferm services salt_master_job_publisher
and salt_master_minion_returns. The remaining ports are covered by standard
rules provided by base::firewall or unwanted (like rpcbind).
This will be merged with a little headsup since minions take up to a few
minutes to reconnect.
Change-Id: Ic215a42b792f39ed2f9c988300006976e4e1341f
---
M manifests/site.pp
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/13/280213/1
diff --git a/manifests/site.pp b/manifests/site.pp
index cd88e36..80ff944 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -2160,6 +2160,7 @@
role salt::masters::production, deployment::salt_masters,
debdeploy::master, ipmi, access_new_install, mariadb::client
include standard
+ include base::firewall
}
# Icinga
--
To view, visit https://gerrit.wikimedia.org/r/280213
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic215a42b792f39ed2f9c988300006976e4e1341f
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
