Muehlenhoff has submitted this change and it was merged.
Change subject: contint: allow ssh from contint1001 to labs instance
......................................................................
contint: allow ssh from contint1001 to labs instance
Some labs instances might have ferm enabled. We need the Jenkins master
to be able to ssh to them. Add contint1001 in addition to gallium.
Bug: T137323
Change-Id: I067e84ce7d21e58a0a6d1654f0637cda1ca42e5b
---
M modules/contint/manifests/firewall/labs.pp
1 file changed, 8 insertions(+), 2 deletions(-)
Approvals:
Paladox: Looks good to me, but someone else must approve
Muehlenhoff: Looks good to me, approved
jenkins-bot: Verified
diff --git a/modules/contint/manifests/firewall/labs.pp
b/modules/contint/manifests/firewall/labs.pp
index 15b94c5..81d58dc 100644
--- a/modules/contint/manifests/firewall/labs.pp
+++ b/modules/contint/manifests/firewall/labs.pp
@@ -2,12 +2,18 @@
# == Class contint::firewall::labs
#
-# Firewall rules for contint Jenkins slaves. Basically let the Jenkins master
-# to ssh to the slave box.
+# Firewall rules for contint Jenkins slaves. Basically let the Jenkins masters
+# to ssh to the slaves box.
class contint::firewall::labs {
ferm::service { 'gallium_ssh_to_slaves':
proto => 'tcp',
port => '22',
srange => '@resolve(gallium.wikimedia.org)'
}
+
+ ferm::service { 'contint1001_ssh_to_slaves':
+ proto => 'tcp',
+ port => '22',
+ srange => '@resolve(contint1001.wikimedia.org)'
+ }
}
--
To view, visit https://gerrit.wikimedia.org/r/309153
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I067e84ce7d21e58a0a6d1654f0637cda1ca42e5b
Gerrit-PatchSet: 5
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Hashar <has...@free.fr>
Gerrit-Reviewer: Hashar <has...@free.fr>
Gerrit-Reviewer: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Paladox <thomasmulhall...@yahoo.com>
Gerrit-Reviewer: RobH <r...@wikimedia.org>
Gerrit-Reviewer: Thcipriani <tcipri...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
