Faidon has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/78396


Change subject: ferm: don't automatically add semicolons
......................................................................

ferm: don't automatically add semicolons

Don't automatically add semicolon to rules, as they may contain braces
and ferm will grok on a "{ ... };". Push the semicolon on the call site
instead.

Plus, a template path was wrong (oh jenkins how I wish you were smarter).

Change-Id: I8fc4bbe89c8d6055f4f37b95933637facfa80459
---
M manifests/base.pp
M modules/ferm/manifests/rule.pp
M modules/ferm/templates/rule.erb
3 files changed, 3 insertions(+), 3 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/96/78396/1

diff --git a/manifests/base.pp b/manifests/base.pp
index 5e048c6..f639d91 100644
--- a/manifests/base.pp
+++ b/manifests/base.pp
@@ -745,7 +745,7 @@
 
        ferm::rule { 'bastion-ssh':
                ensure => present,
-               rule   => 'proto tcp dport ssh saddr $BASTION ACCEPT',
+               rule   => 'proto tcp dport ssh saddr $BASTION ACCEPT;',
        }
 }
 
diff --git a/modules/ferm/manifests/rule.pp b/modules/ferm/manifests/rule.pp
index d5265d0..023b834 100644
--- a/modules/ferm/manifests/rule.pp
+++ b/modules/ferm/manifests/rule.pp
@@ -12,7 +12,7 @@
         owner   => root,
         group   => root,
         mode    => '0400',
-        content => template('ferm/custom.erb'),
+        content => template('ferm/rule.erb'),
         require => File['/etc/ferm/conf.d'],
         notify  => Service['ferm'],
         tag     => 'ferm',
diff --git a/modules/ferm/templates/rule.erb b/modules/ferm/templates/rule.erb
index a5fa7cb..89ac02a 100644
--- a/modules/ferm/templates/rule.erb
+++ b/modules/ferm/templates/rule.erb
@@ -5,7 +5,7 @@
 domain <%= domain %> {
        table <%= table %> {
                chain <%= chain %> {
-                       <%= rule %>;
+                       <%= rule %>
                }
        }
 }

-- 
To view, visit https://gerrit.wikimedia.org/r/78396
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I8fc4bbe89c8d6055f4f37b95933637facfa80459
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Faidon <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to