Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303144
Change subject: druid: Limit to domain networks
......................................................................
druid: Limit to domain networks
druid* in production is only accessed from the production networks
and the instance in labs only from the labs networks.
Change-Id: If4293878f17e12be30650d21fd909a112a4a4c8a
---
M modules/druid/manifests/middlemanager.pp
M modules/druid/manifests/service.pp
2 files changed, 2 insertions(+), 2 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/44/303144/1
diff --git a/modules/druid/manifests/middlemanager.pp
b/modules/druid/manifests/middlemanager.pp
index 87f4fa5..98cda5c 100644
--- a/modules/druid/manifests/middlemanager.pp
+++ b/modules/druid/manifests/middlemanager.pp
@@ -103,6 +103,6 @@
ferm::service { 'druid-middlemanager-indexer-task':
proto => 'tcp',
port => "${peon_start_port}:${peon_end_port}",
- srange => '$ALL_NETWORKS',
+ srange => '$DOMAIN_NETWORKS',
}
}
diff --git a/modules/druid/manifests/service.pp
b/modules/druid/manifests/service.pp
index 74f5a63..5cb8321 100644
--- a/modules/druid/manifests/service.pp
+++ b/modules/druid/manifests/service.pp
@@ -78,7 +78,7 @@
ferm::service { "druid-${service}":
proto => 'tcp',
port => $runtime_properties['druid.port'],
- srange => '$ALL_NETWORKS',
+ srange => '$DOMAIN_NETWORKS',
}
if $::realm == 'production' {
$ensure_monitor_service = $enable ? {
--
To view, visit https://gerrit.wikimedia.org/r/303144
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: If4293878f17e12be30650d21fd909a112a4a4c8a
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
