Muehlenhoff has uploaded a new change for review.
https://gerrit.wikimedia.org/r/319875
Change subject: elasticsearch::https: Restrict to domain networks
......................................................................
elasticsearch::https: Restrict to domain networks
We're getting rid of $INTERNAL, since it's needlessly broad. Restrict
to DOMAIN_NETWORKS, which restricts access to the production networks
in production, while still allowing tests in labs.
A similar change has been made for the elastic-http ferm service.
Change-Id: I64c591205a3ed6834bbc7731495817a4046876a6
---
M modules/elasticsearch/manifests/https.pp
1 file changed, 1 insertion(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/75/319875/1
diff --git a/modules/elasticsearch/manifests/https.pp
b/modules/elasticsearch/manifests/https.pp
index 1de60f5..6ac9617 100644
--- a/modules/elasticsearch/manifests/https.pp
+++ b/modules/elasticsearch/manifests/https.pp
@@ -47,7 +47,7 @@
ensure => $ensure,
proto => 'tcp',
port => '9243',
- srange => '$INTERNAL',
+ srange => '$DOMAIN_NETWORKS',
}
}
--
To view, visit https://gerrit.wikimedia.org/r/319875
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I64c591205a3ed6834bbc7731495817a4046876a6
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
