[MediaWiki-commits] [Gerrit] Adding Ferm rule for OCG HTTP - change (operations/puppet)

[Mwalker (Code Review)]

Mwalker has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/137247

Change subject: Adding Ferm rule for OCG HTTP
......................................................................

Adding Ferm rule for OCG HTTP

Things need to be able to talk to port 8000 for OCG.

Change-Id: Id9d51fbf13b71ce33205a8610a22693daaea27e5
---
M manifests/role/ocg.pp
1 file changed, 14 insertions(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/47/137247/1

diff --git a/manifests/role/ocg.pp b/manifests/role/ocg.pp
index 7dae610..444a214 100644
--- a/manifests/role/ocg.pp
+++ b/manifests/role/ocg.pp
@@ -9,6 +9,8 @@
     system::role { 'ocg': description => 'offline content generator for 
MediaWiki Collection extension' }
 
     include passwords::redis
+    
+    $service_port = 8000
 
     if ( $::ocg_redis_server_override != undef ) {
         $redis_host = $::ocg_redis_server_override
@@ -21,6 +23,12 @@
         redis_host      => $redis_host,
         redis_password  => $passwords::redis::main_password,
         temp_dir        => '/srv/deployment/ocg/tmp',
+        service_port    => $service_port
+    }
+    
+    ferm::rule { 'ocg-http':
+        ensure  => present,
+        rule    => "proto tcp dport ${service_port} ACCEPT;"
     }
 
     monitor_service { 'ocg':
@@ -39,9 +47,14 @@
         redis_password  => $passwords::redis::ocg_test_password,
         temp_dir        => '/srv/deployment/ocg/tmp',
     }
+    
+    ferm::rule { 'ocg-http':
+        ensure  => present,
+        rule    => "proto tcp dport ${service_port} ACCEPT;"
+    }
 
     class { 'redis':
         maxmemory       => '500Mb',
         password        => $passwords::redis::ocg_test_password,
-    }
+    }4505, 4506
 }

-- 
To view, visit https://gerrit.wikimedia.org/r/137247
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Id9d51fbf13b71ce33205a8610a22693daaea27e5
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Mwalker <mwal...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits