Andrew Bogott has submitted this change and it was merged. Change subject: Add base::firewall to role::beta::mediawiki ......................................................................
Add base::firewall to role::beta::mediawiki This is NOT a no-op, but may be safe anyway. Bug: T147233 Change-Id: I3ccc78b44094958e699ee7cc03c366d7e9ba1285 --- M modules/role/manifests/beta/mediawiki.pp 1 file changed, 2 insertions(+), 0 deletions(-) Approvals: Andrew Bogott: Looks good to me, approved jenkins-bot: Verified diff --git a/modules/role/manifests/beta/mediawiki.pp b/modules/role/manifests/beta/mediawiki.pp index 96df805..42a91d2 100644 --- a/modules/role/manifests/beta/mediawiki.pp +++ b/modules/role/manifests/beta/mediawiki.pp @@ -3,6 +3,8 @@ # Allow mwdeploy to login from scap deployment host. Adds an exception in # /etc/security/access.conf to work around labs-specific restrictions class role::beta::mediawiki { + include base::firewall + $deployment_host = hiera('scap::deployment_server') $deployment_ip = ipresolve($deployment_host, 4, $::nameservers[0]) security::access::config { 'scap-allow-mwdeploy': -- To view, visit https://gerrit.wikimedia.org/r/314328 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: I3ccc78b44094958e699ee7cc03c366d7e9ba1285 Gerrit-PatchSet: 4 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Andrew Bogott <abog...@wikimedia.org> Gerrit-Reviewer: Andrew Bogott <abog...@wikimedia.org> Gerrit-Reviewer: Thcipriani <tcipri...@wikimedia.org> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits