Muehlenhoff has uploaded a new change for review. https://gerrit.wikimedia.org/r/303144
Change subject: druid: Limit to domain networks ...................................................................... druid: Limit to domain networks druid* in production is only accessed from the production networks and the instance in labs only from the labs networks. Change-Id: If4293878f17e12be30650d21fd909a112a4a4c8a --- M modules/druid/manifests/middlemanager.pp M modules/druid/manifests/service.pp 2 files changed, 2 insertions(+), 2 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/44/303144/1 diff --git a/modules/druid/manifests/middlemanager.pp b/modules/druid/manifests/middlemanager.pp index 87f4fa5..98cda5c 100644 --- a/modules/druid/manifests/middlemanager.pp +++ b/modules/druid/manifests/middlemanager.pp @@ -103,6 +103,6 @@ ferm::service { 'druid-middlemanager-indexer-task': proto => 'tcp', port => "${peon_start_port}:${peon_end_port}", - srange => '$ALL_NETWORKS', + srange => '$DOMAIN_NETWORKS', } } diff --git a/modules/druid/manifests/service.pp b/modules/druid/manifests/service.pp index 74f5a63..5cb8321 100644 --- a/modules/druid/manifests/service.pp +++ b/modules/druid/manifests/service.pp @@ -78,7 +78,7 @@ ferm::service { "druid-${service}": proto => 'tcp', port => $runtime_properties['druid.port'], - srange => '$ALL_NETWORKS', + srange => '$DOMAIN_NETWORKS', } if $::realm == 'production' { $ensure_monitor_service = $enable ? { -- To view, visit https://gerrit.wikimedia.org/r/303144 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: If4293878f17e12be30650d21fd909a112a4a4c8a Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits