Giuseppe Lavagetto has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/370445 )

Change subject: role::puppet_compiler: bind ssl to 0.0.0.0
......................................................................

role::puppet_compiler: bind ssl to 0.0.0.0

* Install openjdk-8
* Bind the jetty app to listen on 0.0.0.0
* configure puppet to connect to puppetdb via
  the fqdn

Change-Id: I3b27971660ffa5e0965ae53d77c73b5a9d836a99
---
M modules/puppet_compiler/manifests/init.pp
M modules/puppetdb/manifests/app.pp
2 files changed, 7 insertions(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/45/370445/1

diff --git a/modules/puppet_compiler/manifests/init.pp 
b/modules/puppet_compiler/manifests/init.pp
index af68ba2..0741787 100644
--- a/modules/puppet_compiler/manifests/init.pp
+++ b/modules/puppet_compiler/manifests/init.pp
@@ -94,16 +94,20 @@
         rmdirs  => true,
     }
 
+
+    require_pacakge('openjdk-8-jdk')
+
     # Add a puppetdb instance with a local database.
     class { 'puppetdb::app':
         db_driver  => 'hsqldb',
         heap_size  => '2G',
         db_rw_host => undef,
         perform_gc => true,
+        bind_ip    => '0.0.0.0',
     }
 
     class { 'puppetmaster::puppetdb::client':
-        host => 'localhost',
+        host => $::fqdn,
         port => 8081,
     }
 }
diff --git a/modules/puppetdb/manifests/app.pp 
b/modules/puppetdb/manifests/app.pp
index 15b01c5..272157f 100644
--- a/modules/puppetdb/manifests/app.pp
+++ b/modules/puppetdb/manifests/app.pp
@@ -12,6 +12,7 @@
     $db_password=undef,
     $perform_gc=false,
     $heap_size='4G',
+    $bind_ip='localhost',
 ) {
     requires_os('debian >= jessie')
 
@@ -106,6 +107,7 @@
             'ssl-key'     => '/etc/puppetdb/ssl/server.key',
             'ssl-cert'    => '/etc/puppetdb/ssl/cert.pem',
             'ssl-ca-cert' => $ca_path,
+            'ssl-host'    => $bind_ip,
         },
         require  => Base::Expose_puppet_certs['/etc/puppetdb'],
     }

-- 
To view, visit https://gerrit.wikimedia.org/r/370445
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I3b27971660ffa5e0965ae53d77c73b5a9d836a99
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Giuseppe Lavagetto <glavage...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to