Filippo Giunchedi has submitted this change and it was merged. ( 
https://gerrit.wikimedia.org/r/391011 )

Change subject: role: add ferm rule for mtail on mx
......................................................................


role: add ferm rule for mtail on mx

Bug: T179565
Change-Id: I69da39b2f5aee4606d9f806720a0abbe63ecfab7
---
M modules/role/manifests/mail/mx.pp
1 file changed, 9 insertions(+), 0 deletions(-)

Approvals:
  jenkins-bot: Verified
  Filippo Giunchedi: Looks good to me, approved



diff --git a/modules/role/manifests/mail/mx.pp 
b/modules/role/manifests/mail/mx.pp
index 1e74c70..e7cee88 100644
--- a/modules/role/manifests/mail/mx.pp
+++ b/modules/role/manifests/mail/mx.pp
@@ -5,6 +5,7 @@
     ],
     $verp_post_connect_server = 'meta.wikimedia.org',
     $verp_bounce_post_url = 'api-rw.discovery.wmnet/w/api.php',
+    $prometheus_nodes = hiera('prometheus_nodes', []), # 
lint:ignore:wmf_styleguide
 ) {
     include network::constants
     include privateexim::aliases::private
@@ -170,4 +171,12 @@
         ensure => present,
         source => 'puppet:///modules/mtail/programs/exim.mtail',
     }
+
+    $prometheus_nodes_ferm = join($prometheus_nodes, ' ')
+
+    ferm::service { 'mtail':
+        proto  => 'tcp',
+        port   => '3903',
+        srange => "(@resolve((${prometheus_nodes_ferm})) 
@resolve((${prometheus_nodes_ferm}), AAAA))",
+    }
 }

-- 
To view, visit https://gerrit.wikimedia.org/r/391011
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I69da39b2f5aee4606d9f806720a0abbe63ecfab7
Gerrit-PatchSet: 6
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: Giuseppe Lavagetto <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to