Muehlenhoff has submitted this change and it was merged.

Change subject: xhgui: Restrict to domain networks
......................................................................


xhgui: Restrict to domain networks

Only accessed from production networks in production, use DOMAIN_NETWORKS
to allow to be used in a base::firewall-enabled labs instance.

Change-Id: Ide3157490b80bfcd8a3ca765f45b69bf1054bdfc
---
M manifests/role/xhgui.pp
1 file changed, 2 insertions(+), 2 deletions(-)

Approvals:
  Muehlenhoff: Looks good to me, approved
  jenkins-bot: Verified



diff --git a/manifests/role/xhgui.pp b/manifests/role/xhgui.pp
index c9a41db..345c397 100644
--- a/manifests/role/xhgui.pp
+++ b/manifests/role/xhgui.pp
@@ -60,13 +60,13 @@
     ferm::service { 'xhgui_mongodb':
         port   => 27017,
         proto  => 'tcp',
-        srange => '$INTERNAL',
+        srange => '$DOMAIN_NETWORKS',
     }
 
     ferm::service { 'xhgui_http':
         port   => 80,
         proto  => 'tcp',
-        srange => '$INTERNAL',
+        srange => '$DOMAIN_NETWORKS',
     }
 
     git::clone { 'operations/software/xhprof':

-- 
To view, visit https://gerrit.wikimedia.org/r/304831
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ide3157490b80bfcd8a3ca765f45b69bf1054bdfc
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Ori.livneh <o...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to