Elukey has submitted this change and it was merged.
Change subject: oozie: Restrict to analytics networks
......................................................................
oozie: Restrict to analytics networks
We're getting rid of $INTERNAL, since it's needlessly broad. oozie
needs to be accessed from stat100[24], hadoop and hue, so restrict
access to the analytics networks.
Change-Id: If240f6d68d91410ded6f2d59cbd1e8e9a0d193ac
---
M modules/role/manifests/analytics_cluster/oozie/server.pp
1 file changed, 1 insertion(+), 1 deletion(-)
Approvals:
Elukey: Looks good to me, approved
jenkins-bot: Verified
diff --git a/modules/role/manifests/analytics_cluster/oozie/server.pp
b/modules/role/manifests/analytics_cluster/oozie/server.pp
index fa070c6..ff08e07 100644
--- a/modules/role/manifests/analytics_cluster/oozie/server.pp
+++ b/modules/role/manifests/analytics_cluster/oozie/server.pp
@@ -42,7 +42,7 @@
ferm::service{ 'oozie_server':
proto => 'tcp',
port => '11000',
- srange => '$INTERNAL',
+ srange => '$ANALYTICS_NETWORKS',
}
# Include icinga alerts if production realm.
--
To view, visit https://gerrit.wikimedia.org/r/316359
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: If240f6d68d91410ded6f2d59cbd1e8e9a0d193ac
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Elukey <ltosc...@wikimedia.org>
Gerrit-Reviewer: Ottomata <o...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
