Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/297376
Change subject: logstash: Use DOMAIN_NETWORKS
......................................................................
logstash: Use DOMAIN_NETWORKS
Using DOMAIN_NETWORKS allows us to restrict access to the production
logstash cluster to production hosts.
The logstash cluster in beta doesn't base::firewall at the
moment (some further hanges would be needed), but that would also allow
to restrict access to the labs network (or maybe to a specific project
like deployment-prep) at some point.
Change-Id: I6d1d2fcd86de096c44ec780e2c60b39ed28195a1
---
M manifests/role/logstash.pp
1 file changed, 5 insertions(+), 5 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/76/297376/1
diff --git a/manifests/role/logstash.pp b/manifests/role/logstash.pp
index 336ee51..8bfa813 100644
--- a/manifests/role/logstash.pp
+++ b/manifests/role/logstash.pp
@@ -27,7 +27,7 @@
proto => 'udp',
port => '8324',
notrack => true,
- srange => '$ALL_NETWORKS',
+ srange => '$DOMAIN_NETWORKS',
}
logstash::input::syslog { 'syslog':
@@ -38,7 +38,7 @@
proto => 'udp',
port => '10514',
notrack => true,
- srange => '$ALL_NETWORKS',
+ srange => '$DOMAIN_NETWORKS',
}
ferm::service { 'grafana_dashboard_definition_storage':
@@ -55,7 +55,7 @@
proto => 'udp',
port => '12201',
notrack => true,
- srange => '$ALL_NETWORKS',
+ srange => '$DOMAIN_NETWORKS',
}
logstash::input::udp { 'logback':
@@ -67,7 +67,7 @@
proto => 'udp',
port => '11514',
notrack => true,
- srange => '$ALL_NETWORKS',
+ srange => '$DOMAIN_NETWORKS',
}
## Global pre-processing (15)
@@ -233,7 +233,7 @@
ferm::service { 'logstash_tcp_json':
proto => 'tcp',
port => '5229',
- srange => '$ALL_NETWORKS',
+ srange => '$DOMAIN_NETWORKS',
}
# lint:ignore:puppet_url_without_modules
--
To view, visit https://gerrit.wikimedia.org/r/297376
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I6d1d2fcd86de096c44ec780e2c60b39ed28195a1
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
