Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/303839
Change subject: openldap::labtest: Restrict to production/labs networks
......................................................................
openldap::labtest: Restrict to production/labs networks
We're getting rid of ALL_NETWORKS by refactoring the existing ferm services
into more specific networks. The labtest LDAP service needs to be accessed
from both labs networks and production networks.
Change-Id: Icad398bbce328c21821ad3ab8a2ef1155113eefa
---
M modules/role/manifests/openldap/labtest.pp
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/39/303839/1
diff --git a/modules/role/manifests/openldap/labtest.pp
b/modules/role/manifests/openldap/labtest.pp
index cc4d977..d5951d3 100644
--- a/modules/role/manifests/openldap/labtest.pp
+++ b/modules/role/manifests/openldap/labtest.pp
@@ -35,6 +35,6 @@
ferm::service { 'labs_ldap':
proto => 'tcp',
port => '(389 636)',
- srange => '$ALL_NETWORKS',
+ srange => '($PRODUCTION_NETWORKS $LABS_NETWORKS)',
}
}
--
To view, visit https://gerrit.wikimedia.org/r/303839
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Icad398bbce328c21821ad3ab8a2ef1155113eefa
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
