Muehlenhoff has submitted this change and it was merged.
Change subject: Enable base::firewall on rdb2001
......................................................................
Enable base::firewall on rdb2001
Initial host to enable ferm:
- The redis ports are granted via the redis-server-${port} ferm services
- ipsec/ike is granted via the ipsec-ike ferm service
The rest is covered by standard service rules from base::firewall or
explicitly unwanted (rpcbind).
Change-Id: I34b76b7d9ddd0fc38f60c757171817765cd7f7f7
---
M manifests/site.pp
1 file changed, 4 insertions(+), 0 deletions(-)
Approvals:
Muehlenhoff: Verified; Looks good to me, approved
diff --git a/manifests/site.pp b/manifests/site.pp
index 1040502..2e1bf1c 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -2307,6 +2307,10 @@
node /^rdb200[1-6]\.codfw\.wmnet/ {
role jobqueue_redis
+
+ if $::hostname == 'rdb2001' {
+ include base::firewall
+ }
}
# restbase eqiad cluster
--
To view, visit https://gerrit.wikimedia.org/r/282659
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I34b76b7d9ddd0fc38f60c757171817765cd7f7f7
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Elukey <[email protected]>
Gerrit-Reviewer: Giuseppe Lavagetto <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Ori.livneh <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
