Muehlenhoff has submitted this change and it was merged. (
https://gerrit.wikimedia.org/r/353261 )
Change subject: Remove mira from tcpircbot config
......................................................................
Remove mira from tcpircbot config
478bd1a14653127f62fe787aa9f3c6af00b48b8f in ops/dns removed the DNS
entry for mira, but 1a903481607ebf822ebe3d573253cb26d55c171a didn't
remove it from the ferm host list for tcpircbot.
This leads to a ferm startup failure on tegmen:
May 10 18:13:30 tegmen ferm[45700]: Starting Firewall: fermError in
/etc/ferm/conf.d/10_tcpircbot_allowed line 4:
May 10 18:13:30 tegmen ferm[45700]: eventlog1001.eqiad.wmnet tin.eqiad.wmnet
mira.codfw.wmnet naos.codfw.wmnet puppetmaster1001.eqiad.wmnet
puppetmaster2001.codfw.wmnet tMay 10 18:13:30 tegmen ferm[45700]: )
May 10 18:13:30 tegmen ferm[45700]: , AAAA
May 10 18:13:30 tegmen ferm[45700]: )
May 10 18:13:30 tegmen ferm[45700]: <--
May 10 18:13:30 tegmen ferm[45700]: DNS query for 'mira.codfw.wmnet' failed:
NXDOMAIN
Bug: T164588
Change-Id: Ifd4537c63d36cf9f3bd188ac62ffedc64f9c1ed9
---
M modules/role/manifests/tcpircbot.pp
1 file changed, 0 insertions(+), 3 deletions(-)
Approvals:
Muehlenhoff: Looks good to me, approved
Alexandros Kosiaris: Looks good to me, but someone else must approve
jenkins-bot: Verified
diff --git a/modules/role/manifests/tcpircbot.pp
b/modules/role/manifests/tcpircbot.pp
index 9f5b923..b1f1da4 100644
--- a/modules/role/manifests/tcpircbot.pp
+++ b/modules/role/manifests/tcpircbot.pp
@@ -15,8 +15,6 @@
'::ffff:10.64.32.167/128', # logging: eventlog1001
'::ffff:10.64.0.196/128', # deployment eqiad v4: tin
'2620:0:861:101:10:64:0:196/128', # deployment eqiad v6: tin
- '::ffff:10.192.16.132/128', # deployment codfw v4: mira
- '2620:0:860:102:10:192:16:132/128', # deployment codfw v6: mira
'::ffff:10.192.32.22/128', # deployment codfw v4: naos
'2620:0:860:103:10:192:32:22/128', # deployment codfw v6: naos
'::ffff:10.64.32.13/128', # maintenance eqiad v4: terbium
@@ -43,7 +41,6 @@
$allowed_hosts = [
'eventlog1001.eqiad.wmnet', # logging eqiad
'tin.eqiad.wmnet', # deployment eqiad
- 'mira.codfw.wmnet', # deployment codfw
'naos.codfw.wmnet', # deployment codfw
'puppetmaster1001.eqiad.wmnet', # puppet eqiad
'puppetmaster2001.codfw.wmnet', # puppet codfw
--
To view, visit https://gerrit.wikimedia.org/r/353261
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ifd4537c63d36cf9f3bd188ac62ffedc64f9c1ed9
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Alexandros Kosiaris <akosia...@wikimedia.org>
Gerrit-Reviewer: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
