Muehlenhoff has submitted this change and it was merged.
Change subject: Enable base::firewall on labmon1001
......................................................................
Enable base::firewall on labmon1001
Ports and the ferm services allowing them:
80 -> graphite-http
1903 -> carbon_c_relay-local_relay_tcp and carbon_c_relay-local_relay_udp
2003 -> carbon_c_relay-frontend_relay_tcp and carbon_c_relay-frontend_relay_udp
2004 -> carbon_pickled
8125 -> statsite_udp, statsite_tcp
7102, 7202, 7302, 7402, 7502, 7602, 7702 and 7802 are only accessed internally.
Change-Id: I935f629763475f943000639f4704dc40469664ec
---
M manifests/site.pp
1 file changed, 1 insertion(+), 0 deletions(-)
Approvals:
Filippo Giunchedi: Looks good to me, but someone else must approve
Muehlenhoff: Verified; Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/site.pp b/manifests/site.pp
index 0375e97..5c07550 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -1322,6 +1322,7 @@
node 'labmon1001.eqiad.wmnet' {
role labs::graphite
include standard
+ include base::firewall
}
node 'labnet1001.eqiad.wmnet' {
--
To view, visit https://gerrit.wikimedia.org/r/282344
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I935f629763475f943000639f4704dc40469664ec
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Chasemp <[email protected]>
Gerrit-Reviewer: Filippo Giunchedi <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Yuvipanda <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
