Muehlenhoff has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/320545

Change subject: role::mariadb::sanitarium: Restrict to production networks
......................................................................

role::mariadb::sanitarium: Restrict to production networks

We're getting rid of $INTERNAL, since it's needlessly broad. Restrict to
production networks instead.

Change-Id: Ie00990d7a28cab0afb9d89c79ee625a7ac937655
---
M modules/role/manifests/mariadb.pp
1 file changed, 3 insertions(+), 3 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/45/320545/1

diff --git a/modules/role/manifests/mariadb.pp 
b/modules/role/manifests/mariadb.pp
index 766e100..c6596b5 100644
--- a/modules/role/manifests/mariadb.pp
+++ b/modules/role/manifests/mariadb.pp
@@ -713,19 +713,19 @@
     ferm::service { 'mysqld_sanitarium':
         proto  => 'tcp',
         port   => '3311:3317',
-        srange => '$INTERNAL',
+        srange => '$PRODUCTION_NETWORKS',
     }
 
     ferm::service { 'gmond_udp':
         proto  => 'udp',
         port   => '8649',
-        srange => '$INTERNAL',
+        srange => '$PRODUCTION_NETWORKS',
     }
 
     ferm::service { 'gmond_tcp':
         proto  => 'tcp',
         port   => '8649',
-        srange => '$INTERNAL',
+        srange => '$PRODUCTION_NETWORKS',
     }
 
     # One instance per shard using mysqld_multi.

-- 
To view, visit https://gerrit.wikimedia.org/r/320545
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ie00990d7a28cab0afb9d89c79ee625a7ac937655
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to