Dzahn has submitted this change and it was merged.

Change subject: contint/gerrit: allow ssh for git on new gerrit server
......................................................................


contint/gerrit: allow ssh for git on new gerrit server

Bug: T125018
Bug: T131903
Change-Id: Iff246acef76fd136010e964caa1788b41c93c4f6
---
M modules/contint/manifests/firewall.pp
1 file changed, 6 insertions(+), 1 deletion(-)

Approvals:
  Chad: Looks good to me, but someone else must approve
  Paladox: Looks good to me, but someone else must approve
  jenkins-bot: Verified
  Dzahn: Looks good to me, approved



diff --git a/modules/contint/manifests/firewall.pp 
b/modules/contint/manifests/firewall.pp
index ea815d4..fd5c4c7 100644
--- a/modules/contint/manifests/firewall.pp
+++ b/modules/contint/manifests/firewall.pp
@@ -56,11 +56,16 @@
         srange => $nodepool_host,
     }
 
-    # Need to grant ytterbium ssh access for git
+    # ssh access for git on old gerrit server
     ferm::rule { 'ytterbium_ssh':
         rule => 'proto tcp dport ssh { saddr (208.80.154.80 208.80.154.81 
2620:0:861:3:92b1:1cff:fe2a:e60 2620:0:861:3:208:80:154:80 
2620:0:861:3:208:80:154:81) ACCEPT; }'
     }
 
+    # ssh access for git on new gerrit server
+    ferm::rule { 'lead_ssh':
+        rule => 'proto tcp dport ssh { saddr (208.80.154.82 208.80.154.85 
2620:0:861:3:ca1f:66ff:febf:7166 2620:0:861:3:208:80:154:82 
2620:0:861:3:208:80:154:85) ACCEPT; }'
+    }
+
     # ALLOWS:
 
     # web access

-- 
To view, visit https://gerrit.wikimedia.org/r/298377
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Iff246acef76fd136010e964caa1788b41c93c4f6
Gerrit-PatchSet: 4
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Chad <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Hashar <[email protected]>
Gerrit-Reviewer: Muehlenhoff <[email protected]>
Gerrit-Reviewer: Paladox <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to