Muehlenhoff has submitted this change and it was merged.
Change subject: wdqs: Limit to domain networks
......................................................................
wdqs: Limit to domain networks
Restrict wdqs/8888 to $DOMAIN_NETWORKS; this limits the access for the
production systems to access from the production networks and the wdqs
instances in labs to the labs networks.
Change-Id: Ieb6bbbd205e1f5ceb0df2894b2ec29e6e0b42210
---
M manifests/role/wdqs.pp
1 file changed, 1 insertion(+), 1 deletion(-)
Approvals:
Smalyshev: Looks good to me, but someone else must approve
Muehlenhoff: Looks good to me, approved
Addshore: Looks good to me, but someone else must approve
jenkins-bot: Verified
diff --git a/manifests/role/wdqs.pp b/manifests/role/wdqs.pp
index b38a100..fa09e2d 100644
--- a/manifests/role/wdqs.pp
+++ b/manifests/role/wdqs.pp
@@ -39,7 +39,7 @@
ferm::service { 'wdqs_internal_http':
proto => 'tcp',
port => '8888',
- srange => '$INTERNAL',
+ srange => '$DOMAIN_NETWORKS',
}
# Monitor Blazegraph
--
To view, visit https://gerrit.wikimedia.org/r/306027
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ieb6bbbd205e1f5ceb0df2894b2ec29e6e0b42210
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Addshore <addshorew...@gmail.com>
Gerrit-Reviewer: Gehel <gleder...@wikimedia.org>
Gerrit-Reviewer: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Smalyshev <smalys...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
