Dzahn has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/179434

Change subject: role/logging: add ferm service webstats-collector
......................................................................

role/logging: add ferm service webstats-collector

As outlined in Change-Id: Ibf3af60a8932325f1 we need
to add ferm firewall holes for all TCP services on nodes
having udp2log, so that later we can add base::firewall
with the default DROP policy and then get rid of the entire
old iptables class.

Change-Id: I02ee8d0f9564b03544b4ecb2605d3c3519fb78b5
---
M manifests/role/logging.pp
1 file changed, 5 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/34/179434/1

diff --git a/manifests/role/logging.pp b/manifests/role/logging.pp
index f348b07..eb9529a 100644
--- a/manifests/role/logging.pp
+++ b/manifests/role/logging.pp
@@ -285,6 +285,11 @@
         ],
     }
 
+    ferm::service { 'webstats-collector':
+        proto => 'tcp',
+        port  => '3815',
+    }
+
     # install a nrpe check for the webstatscollector collector process
     nrpe::monitor_service { 'webstats-collector':
         description   => "webstats-collector process running",

-- 
To view, visit https://gerrit.wikimedia.org/r/179434
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I02ee8d0f9564b03544b4ecb2605d3c3519fb78b5
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to