Muehlenhoff has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/353508 )

Change subject: Add initial class for ferm rules shared by all labstore hosts
......................................................................

Add initial class for ferm rules shared by all labstore hosts

rpcbind is common to all classes, the others vary a bit depending
on the role, needs some further discussion whether to unify the NFS
config first or use distinct ferm rules per role.

(Not yet included in the other roles at this point)

Bug: T165136
Change-Id: I4bdd1eb9285c311041ac4501c4f7a1693066dc7f
---
A modules/role/manifests/labs/nfs/ferm.pp
1 file changed, 15 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/08/353508/1

diff --git a/modules/role/manifests/labs/nfs/ferm.pp 
b/modules/role/manifests/labs/nfs/ferm.pp
new file mode 100644
index 0000000..44196c2
--- /dev/null
+++ b/modules/role/manifests/labs/nfs/ferm.pp
@@ -0,0 +1,15 @@
+# Common ferm class for labstore servers.
+
+class role::labs::nfs::ferm {
+     ferm::service { 'nfs_portmapper_udp':
+        proto  => 'udp',
+        port   => '111',
+        srange => '$LABS_NETWORKS',
+    }
+
+    ferm::service { 'nfs_portmapper_tcp':
+        proto  => 'tcp',
+        port   => '111',
+        srange => '$LABS_NETWORKS',
+    }
+}

-- 
To view, visit https://gerrit.wikimedia.org/r/353508
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I4bdd1eb9285c311041ac4501c4f7a1693066dc7f
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to