Muehlenhoff has submitted this change and it was merged. (
https://gerrit.wikimedia.org/r/328665 )
Change subject: eventbus: Restrict to domain networks
......................................................................
eventbus: Restrict to domain networks
We're getting rid of $INTERNAL, which is needlessly broad. Restrict
eventbus to $DOMAIN_NETWORKS, so that when running in production
access is restriced to production networks and when running in labs
to labs networks.
Change-Id: Ie9bcce8f47d1aac93e1c49684bddc67b88d29f88
---
M modules/role/manifests/eventbus/eventbus.pp
1 file changed, 1 insertion(+), 1 deletion(-)
Approvals:
Muehlenhoff: Looks good to me, approved
Ottomata: Looks good to me, but someone else must approve
jenkins-bot: Verified
diff --git a/modules/role/manifests/eventbus/eventbus.pp
b/modules/role/manifests/eventbus/eventbus.pp
index f96116c..1d1cc0a 100644
--- a/modules/role/manifests/eventbus/eventbus.pp
+++ b/modules/role/manifests/eventbus/eventbus.pp
@@ -107,7 +107,7 @@
ferm::service { 'eventlogging-service-eventbus':
proto => 'tcp',
port => '8085',
- srange => '$INTERNAL',
+ srange => '$DOMAIN_NETWORKS',
}
}
--
To view, visit https://gerrit.wikimedia.org/r/328665
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ie9bcce8f47d1aac93e1c49684bddc67b88d29f88
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Elukey <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Ottomata <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
