Alexandros Kosiaris has uploaded a new change for review.
https://gerrit.wikimedia.org/r/125995
Change subject: rp_filter check tunings
......................................................................
rp_filter check tunings
Avoid checking rp_filter on interfaces that start with lo
Transform the puppet introduced _ character to what is known by sysctl,
namely the / character. compact the array to remove possible nils
Change-Id: Iacb6cf28bc7cb42052c1c4d9ee2b2616eebf91f7
---
M manifests/role/lvs.pp
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/95/125995/1
diff --git a/manifests/role/lvs.pp b/manifests/role/lvs.pp
index 295f9b0..d61e13a 100644
--- a/manifests/role/lvs.pp
+++ b/manifests/role/lvs.pp
@@ -5,7 +5,7 @@
class role::lvs::balancer {
system::role { "role::lvs::balancer": description => "LVS balancer" }
- $rp_args = inline_template('<%= @interfaces.split(",").map{|x|
"net.ipv4.conf.#{x}.rp_filter=0"}.join(",") %>')
+ $rp_args = inline_template('<%= @interfaces.split(",").map{|x|
"net.ipv4.conf.#{x.gsub("_","/")}.rp_filter=0" if !x.start_with?("lo")
}.compact.join(",") %>')
nrpe::monitor_service { 'check_rp_filter_disabled':
description => 'Check rp_filter disabled',
nrpe_command => "/usr/lib/nagios/plugins/check_sysctl ${rp_args}",
--
To view, visit https://gerrit.wikimedia.org/r/125995
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Iacb6cf28bc7cb42052c1c4d9ee2b2616eebf91f7
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Alexandros Kosiaris <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
