Elukey has uploaded a new change for review.
https://gerrit.wikimedia.org/r/323517
Change subject: Avoid Redis IPsec replication if the host doesn't need it.
......................................................................
Avoid Redis IPsec replication if the host doesn't need it.
The redis::multidc::ipsec is currently used by JobQueues
and memcached/redis hosts to set up a secure transport
between eqiad and codfw. A new host still not configured
in hiera to have a replica should not get automatically
configured for IPsec to avoid false alarms.
Bug: T137345
Change-Id: Ic64af79619119c9727bc4b7b94ba3084e73db003
---
M modules/redis/manifests/multidc/ipsec.pp
1 file changed, 5 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/17/323517/1
diff --git a/modules/redis/manifests/multidc/ipsec.pp
b/modules/redis/manifests/multidc/ipsec.pp
index d16df28..e6c9c8d 100644
--- a/modules/redis/manifests/multidc/ipsec.pp
+++ b/modules/redis/manifests/multidc/ipsec.pp
@@ -8,7 +8,10 @@
$my_ip = ipresolve($::fqdn, 4)
$ipsec_host_list = redis_shard_hosts($my_ip, $shards)
- class { 'role::ipsec':
- hosts => $ipsec_host_list
+ # No reason to define IPsec if the host doesn't need replication.
+ if $ipsec_host_list != [] {
+ class { 'role::ipsec':
+ hosts => $ipsec_host_list
+ }
}
}
--
To view, visit https://gerrit.wikimedia.org/r/323517
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic64af79619119c9727bc4b7b94ba3084e73db003
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Elukey <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
