Muehlenhoff has uploaded a new change for review. https://gerrit.wikimedia.org/r/320549
Change subject: role::mediawiki::jobrunner: Restrict to domain networks ...................................................................... role::mediawiki::jobrunner: Restrict to domain networks We're getting rid of $INTERNAL, since it's needlessly broad. Use $DOMAIN_NETWORKS to restrict access in production to production networks, while still allowing using it in labs. Change-Id: I9921adc40c5fc0247f0d32c54fff2c59927b786b --- M modules/role/manifests/mediawiki/jobrunner.pp 1 file changed, 1 insertion(+), 1 deletion(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/49/320549/1 diff --git a/modules/role/manifests/mediawiki/jobrunner.pp b/modules/role/manifests/mediawiki/jobrunner.pp index 74f6c44..686a09e 100644 --- a/modules/role/manifests/mediawiki/jobrunner.pp +++ b/modules/role/manifests/mediawiki/jobrunner.pp @@ -24,6 +24,6 @@ proto => 'tcp', port => $::mediawiki::jobrunner::port, notrack => true, - srange => '$INTERNAL', + srange => '$DOMAIN_NETWORKS', } } -- To view, visit https://gerrit.wikimedia.org/r/320549 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: I9921adc40c5fc0247f0d32c54fff2c59927b786b Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits