Muehlenhoff has submitted this change and it was merged.
Change subject: Fix ferm rules for postgres and redis access on maps master
......................................................................
Fix ferm rules for postgres and redis access on maps master
These are specified as host names in Hiera, not IP addresses.
Change-Id: I728eb20e891707f4f0ae6a1373b9459edd29d0b7
---
M modules/role/manifests/maps/master.pp
1 file changed, 2 insertions(+), 2 deletions(-)
Approvals:
Muehlenhoff: Verified; Looks good to me, approved
diff --git a/modules/role/manifests/maps/master.pp
b/modules/role/manifests/maps/master.pp
index a5800d6..8ba6d1b 100644
--- a/modules/role/manifests/maps/master.pp
+++ b/modules/role/manifests/maps/master.pp
@@ -64,14 +64,14 @@
ferm::service { 'tilerator_redis':
proto => 'tcp',
port => '6379',
- srange => "(${maps_hosts_ferm})",
+ srange => "@resolve((${maps_hosts_ferm}))",
}
# Access to postgres master from postgres slaves
ferm::service { 'postgres_maps':
proto => 'tcp',
port => '5432',
- srange => "(${maps_hosts_ferm})",
+ srange => "@resolve((${maps_hosts_ferm}))",
}
}
--
To view, visit https://gerrit.wikimedia.org/r/280405
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I728eb20e891707f4f0ae6a1373b9459edd29d0b7
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
