Muehlenhoff has submitted this change and it was merged.
Change subject: Add ferm rule for eventlogging zmq forwarder service
......................................................................
Add ferm rule for eventlogging zmq forwarder service
Judging from T110903, hafnium is currently the only remaining consumer, so
limit the access to that host.
Change-Id: I27cea8eab062bcdba85738cd2cb445af29f8223d
---
M manifests/role/eventlogging.pp
1 file changed, 7 insertions(+), 0 deletions(-)
Approvals:
Muehlenhoff: Verified; Looks good to me, approved
diff --git a/manifests/role/eventlogging.pp b/manifests/role/eventlogging.pp
index 5658099..2132298 100644
--- a/manifests/role/eventlogging.pp
+++ b/manifests/role/eventlogging.pp
@@ -141,6 +141,13 @@
input =>
"${kafka_mixed_uri}&zookeeper_connect=${kafka_zookeeper_url}&auto_commit_enable=False&auto_offset_reset=-1",
outputs => ["tcp://${eventlogging_host}:8600"],
}
+
+ ferm::service { 'eventlogging-zmq-legacy-stream':
+ proto => 'tcp',
+ notrack => true,
+ port => '8600',
+ srange => '@resolve(hafnium.eqiad.wmnet)',
+ }
}
--
To view, visit https://gerrit.wikimedia.org/r/270915
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I27cea8eab062bcdba85738cd2cb445af29f8223d
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Elukey <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Ottomata <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
