Dzahn has submitted this change and it was merged.
Change subject: tcpircbot: add rhodium to allowed hosts
......................................................................
tcpircbot: add rhodium to allowed hosts
rhodium is the freshly installed new puppetmaster.
Should we add it already?
regarding IPv6. palladium already has the mapped IP
but no AAAA record matching it. rhodium does not have
the mapped IP yet. suggesting to add both in the related
patches linked below.
Change-Id: Ie05c5420ea5604a255aaf661b6f86abd69dae429
---
M manifests/role/tcpircbot.pp
1 file changed, 3 insertions(+), 1 deletion(-)
Approvals:
jenkins-bot: Verified
Dzahn: Looks good to me, approved
diff --git a/manifests/role/tcpircbot.pp b/manifests/role/tcpircbot.pp
index b9efd08..e540028 100644
--- a/manifests/role/tcpircbot.pp
+++ b/manifests/role/tcpircbot.pp
@@ -27,11 +27,13 @@
'2620:0:860:104:1602:ecff:fe3f:478c/128', # maintenance codfw v6:
wasat
'::ffff:10.64.16.160/128', # puppet master v4: palladium
'2620:0:861:102:10:64:16:160/128', # puppet master v6: palladium
+ '::ffff:10.64.16.184/128', # puppet master v4: rhodium
+ '2620:0:861:102:10:64:16:184/128', # puppet master v6: rhodium
],
}
ferm::rule { 'tcpircbot_allowed':
# eventlog1001, tin (v4), mira (v4), localhost, tin (v6), mira (v6),
terbium (v4), wasat (v4)
- rule => 'proto tcp dport 9200 { saddr (10.64.32.167/32 10.64.0.196/32
10.192.16.132/32 10.64.16.160/32 127.0.0.1 2620:0:861:101:10:64:0:196/128
2620:0:860:102:10:192:16:132/128 2620:0:861:102:10:64:16:160/128 10.64.32.13/32
2620:0:861:103:92b1:1cff:fe25:9d72/128 10.192.48.45/32
2620:0:860:104:1602:ecff:fe3f:478c/128) ACCEPT; }',
+ rule => 'proto tcp dport 9200 { saddr (10.64.32.167/32 10.64.0.196/32
10.192.16.132/32 10.64.16.160/32 127.0.0.1 2620:0:861:101:10:64:0:196/128
2620:0:860:102:10:192:16:132/128 2620:0:861:102:10:64:16:160/128 10.64.32.13/32
2620:0:861:103:92b1:1cff:fe25:9d72/128 10.192.48.45/32
2620:0:860:104:1602:ecff:fe3f:478c/128 10.64.16.184/32
2620:0:861:102:10:64:16:184/128) ACCEPT; }',
}
}
--
To view, visit https://gerrit.wikimedia.org/r/302621
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ie05c5420ea5604a255aaf661b6f86abd69dae429
Gerrit-PatchSet: 4
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Alex Monk <[email protected]>
Gerrit-Reviewer: Alexandros Kosiaris <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: Giuseppe Lavagetto <[email protected]>
Gerrit-Reviewer: Southparkfan <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
