Muehlenhoff has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/224071

Change subject: Add ferm rules for swift backends
......................................................................

Add ferm rules for swift backends

Bug: T104965
Change-Id: Id825518592b83f121e82fdda623a1216f8ef9690
---
M manifests/swift.pp
1 file changed, 24 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/71/224071/1

diff --git a/manifests/swift.pp b/manifests/swift.pp
index 9afe6f9..8669398 100644
--- a/manifests/swift.pp
+++ b/manifests/swift.pp
@@ -221,6 +221,30 @@
         description => 'swift backend storage brick',
     }
 
+    $swift_frontends = hiera('cluster: swift')
+    $swift_frontends_ferm = join($swift_frontends, ' ')
+
+    ferm::service { 'swift-object-server':
+        proto   => 'tcp',
+        port    => '6000',
+        notrack => true,
+        srange  => "@resolve(($swift_frontends_ferm))",
+    }
+
+    ferm::service { 'swift-container-server':
+        proto   => 'tcp',
+        port    => '6001',
+        notrack => true,
+        srange  => "@resolve(($swift_frontends_ferm))",
+    }
+
+    ferm::service { 'swift-account-server':
+        proto   => 'tcp',
+        port    => '6002',
+        notrack => true,
+        srange  => "@resolve(($swift_frontends_ferm))",
+    }
+
     class packages {
         package {
             [ 'swift-account',

-- 
To view, visit https://gerrit.wikimedia.org/r/224071
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Id825518592b83f121e82fdda623a1216f8ef9690
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to