Muehlenhoff has submitted this change and it was merged.
Change subject: carbon_pickled: Restrict to production networks
......................................................................
carbon_pickled: Restrict to production networks
We're getting rid of $INTERNAL, since it's needlessly broad. Restrict
access to production networks as for the other ferm services.
Change-Id: I905da6072ec71cb32fe7e85e6caaf35f248ca045
---
M modules/role/manifests/graphite/production.pp
1 file changed, 1 insertion(+), 1 deletion(-)
Approvals:
Filippo Giunchedi: Looks good to me, approved
jenkins-bot: Verified
diff --git a/modules/role/manifests/graphite/production.pp
b/modules/role/manifests/graphite/production.pp
index ab7661e..7d9e4f6 100644
--- a/modules/role/manifests/graphite/production.pp
+++ b/modules/role/manifests/graphite/production.pp
@@ -75,7 +75,7 @@
ferm::service { 'carbon_pickled':
proto => 'tcp',
port => '2004',
- srange => '$INTERNAL',
+ srange => '$PRODUCTION_NETWORKS',
}
}
--
To view, visit https://gerrit.wikimedia.org/r/319878
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I905da6072ec71cb32fe7e85e6caaf35f248ca045
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Filippo Giunchedi <fgiunch...@wikimedia.org>
Gerrit-Reviewer: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
