Ottomata has uploaded a new change for review. (
https://gerrit.wikimedia.org/r/365096 )
Change subject: ensure => absent for base::firewall in statistics::private
profile
......................................................................
ensure => absent for base::firewall in statistics::private profile
Instead of just removing the class include.
Bug: T170496
Change-Id: I92c9b8db1435eccf774ee441a627548971266370
---
M modules/profile/manifests/statistics/private.pp
1 file changed, 6 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/96/365096/1
diff --git a/modules/profile/manifests/statistics/private.pp
b/modules/profile/manifests/statistics/private.pp
index dae8a69..f91d7ac 100644
--- a/modules/profile/manifests/statistics/private.pp
+++ b/modules/profile/manifests/statistics/private.pp
@@ -4,6 +4,12 @@
$statistics_servers = hiera('statistics_servers'),
) {
include ::standard
+ # Can't include base firewall on statistics private boxes.
+ # Hadoop clients (like spark) can start up CLIs that interact
+ # with Hadoop via ephemeral ports.
+ class { '::base::firewall':
+ ensure => 'absent'
+ }
include ::deployment::umask_wikidev
--
To view, visit https://gerrit.wikimedia.org/r/365096
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I92c9b8db1435eccf774ee441a627548971266370
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Ottomata <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
