Muehlenhoff has submitted this change and it was merged.
Change subject: Enable ferm on kafka1014
..
Enable ferm on kafka1014
Port 9092 is allowed via a ferm::service, ports and 2021 are
intentionally disallowed remotely.
In addition there's about 150 jmxtrans-all.jar processes, which
apparently don't need to be exposed as well.
Change-Id: I6a58faa217a119fbe8526ad0bc9bf4aece19f3b4
---
M manifests/site.pp
1 file changed, 4 insertions(+), 0 deletions(-)
Approvals:
Ottomata: Looks good to me, but someone else must approve
Muehlenhoff: Verified; Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/site.pp b/manifests/site.pp
index 86ab063..fda8f54 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1154,6 +1154,10 @@
role analytics::kafka::server
include role::analytics
include standard
+
+if $::hostname == 'kafka1014' {
+include base::firewall
+}
}
# virtual machine for misc. PHP apps
--
To view, visit https://gerrit.wikimedia.org/r/251936
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I6a58faa217a119fbe8526ad0bc9bf4aece19f3b4
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff
Gerrit-Reviewer: Muehlenhoff
Gerrit-Reviewer: Ottomata
Gerrit-Reviewer: jenkins-bot <>
___
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits