Filippo Giunchedi has uploaded a new change for review. (
https://gerrit.wikimedia.org/r/391011 )
Change subject: role: add ferm rule for mtail on mx
......................................................................
role: add ferm rule for mtail on mx
Bug: T179565
Change-Id: I69da39b2f5aee4606d9f806720a0abbe63ecfab7
---
M modules/role/manifests/mail/mx.pp
1 file changed, 9 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/11/391011/1
diff --git a/modules/role/manifests/mail/mx.pp
b/modules/role/manifests/mail/mx.pp
index 1e74c70..283983e 100644
--- a/modules/role/manifests/mail/mx.pp
+++ b/modules/role/manifests/mail/mx.pp
@@ -5,6 +5,7 @@
],
$verp_post_connect_server = 'meta.wikimedia.org',
$verp_bounce_post_url = 'api-rw.discovery.wmnet/w/api.php',
+ $prometheus_nodes = hiera('prometheus_nodes', []),
) {
include network::constants
include privateexim::aliases::private
@@ -170,4 +171,12 @@
ensure => present,
source => 'puppet:///modules/mtail/programs/exim.mtail',
}
+
+ $prometheus_nodes_ferm = join($prometheus_nodes, ' ')
+
+ ferm::service { 'mtail':
+ proto => 'tcp',
+ port => '3903',
+ srange => "(@resolve((${prometheus_nodes_ferm}))
@resolve((${prometheus_nodes_ferm}), AAAA))",
+ }
}
--
To view, visit https://gerrit.wikimedia.org/r/391011
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I69da39b2f5aee4606d9f806720a0abbe63ecfab7
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
