Filippo Giunchedi has uploaded a new change for review.
https://gerrit.wikimedia.org/r/159267
Change subject: releases: allow uploads from tin
......................................................................
releases: allow uploads from tin
tin is where debian packages uploads will come from, further tin contains the
ssh key allowed to perform uploads via SSH's forced commands
RT #8251
Change-Id: I7a347a14441a55573bf8313ed8b794606cf2e0c2
---
M manifests/role/releases.pp
1 file changed, 7 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/67/159267/1
diff --git a/manifests/role/releases.pp b/manifests/role/releases.pp
index 8bc056c..39dfaf1 100644
--- a/manifests/role/releases.pp
+++ b/manifests/role/releases.pp
@@ -13,6 +13,13 @@
class { '::releases::reprepro': }
+ # ssh-based uploads from tin
+ ferm::service { 'tin_package_upload':
+ proto => 'tcp',
+ port => '22',
+ srange => '10.64.0.196/32',
+ }
+
ferm::service { 'releases_http':
proto => 'tcp',
port => '80',
--
To view, visit https://gerrit.wikimedia.org/r/159267
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I7a347a14441a55573bf8313ed8b794606cf2e0c2
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Filippo Giunchedi <fgiunch...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
