Muehlenhoff has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/392430 )

Change subject: role::labs::nfs::secondary: Add Ferm rules for DRBD
......................................................................

role::labs::nfs::secondary: Add Ferm rules for DRBD

Bug: T165136
Change-Id: I7e307305c2f02de59fce90efe1b9f00f88167d8b
---
M modules/role/manifests/labs/nfs/secondary.pp
1 file changed, 8 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/30/392430/1

diff --git a/modules/role/manifests/labs/nfs/secondary.pp 
b/modules/role/manifests/labs/nfs/secondary.pp
index 36920d0..dfe8206 100644
--- a/modules/role/manifests/labs/nfs/secondary.pp
+++ b/modules/role/manifests/labs/nfs/secondary.pp
@@ -31,6 +31,10 @@
         # Define DRBD role for this host, should come from hiera
         $drbd_role = 'secondary'
 
+        ferm::rule { 'drbd_labstore1005':
+            rule => 'saddr 192.168.0.1 proto tcp dport (7790:7792) ACCEPT;',
+        }
+
         interface::ip { 'drbd-replication':
             interface => $data_iface,
             address   => '192.168.0.2',
@@ -43,6 +47,10 @@
         # Define DRBD role for this host, should come from hiera
         $drbd_role = 'primary'
 
+        ferm::rule { 'drbd_labstore1004':
+            rule => 'saddr 192.168.0.2 proto tcp dport (7790:7792) ACCEPT;',
+        }
+
         interface::ip { 'drbd-replication':
             interface => $data_iface,
             address   => '192.168.0.1',

-- 
To view, visit https://gerrit.wikimedia.org/r/392430
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I7e307305c2f02de59fce90efe1b9f00f88167d8b
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to