Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/316739
Change subject: Convert ferm::rule deployment-ssh in nova to ferm service
......................................................................
Convert ferm::rule deployment-ssh in nova to ferm service
Change-Id: I8c6fd473423d2beaba35b845cf7c95c71c82fe6b
---
M modules/role/manifests/labs/openstack/nova.pp
1 file changed, 4 insertions(+), 4 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/39/316739/1
diff --git a/modules/role/manifests/labs/openstack/nova.pp
b/modules/role/manifests/labs/openstack/nova.pp
index 808bd73..81246a2 100644
--- a/modules/role/manifests/labs/openstack/nova.pp
+++ b/modules/role/manifests/labs/openstack/nova.pp
@@ -86,10 +86,10 @@
port => '443',
}
- # allow ssh from deployment hosts
- ferm::rule { 'deployment-ssh':
- ensure => present,
- rule => 'proto tcp dport ssh saddr $DEPLOYMENT_HOSTS ACCEPT;',
+ ferm::service { 'deployment-ssh':
+ proto => 'tcp',
+ port => '22',
+ srange => '$DEPLOYMENT_HOSTS',
}
# allow keystone to query the wikitech db
--
To view, visit https://gerrit.wikimedia.org/r/316739
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I8c6fd473423d2beaba35b845cf7c95c71c82fe6b
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
