Muehlenhoff has submitted this change and it was merged. Change subject: druid: Limit to analytics networks ......................................................................
druid: Limit to analytics networks Only accessed from the analytics networks. Change-Id: If4293878f17e12be30650d21fd909a112a4a4c8a --- M modules/druid/manifests/middlemanager.pp M modules/druid/manifests/service.pp 2 files changed, 2 insertions(+), 2 deletions(-) Approvals: Ottomata: Looks good to me, but someone else must approve Muehlenhoff: Verified; Looks good to me, approved jenkins-bot: Verified diff --git a/modules/druid/manifests/middlemanager.pp b/modules/druid/manifests/middlemanager.pp index 87f4fa5..173c621 100644 --- a/modules/druid/manifests/middlemanager.pp +++ b/modules/druid/manifests/middlemanager.pp @@ -103,6 +103,6 @@ ferm::service { 'druid-middlemanager-indexer-task': proto => 'tcp', port => "${peon_start_port}:${peon_end_port}", - srange => '$ALL_NETWORKS', + srange => '$ANALYTICS_NETWORKS', } } diff --git a/modules/druid/manifests/service.pp b/modules/druid/manifests/service.pp index 74f5a63..9c438b8 100644 --- a/modules/druid/manifests/service.pp +++ b/modules/druid/manifests/service.pp @@ -78,7 +78,7 @@ ferm::service { "druid-${service}": proto => 'tcp', port => $runtime_properties['druid.port'], - srange => '$ALL_NETWORKS', + srange => '$ANALYTICS_NETWORKS', } if $::realm == 'production' { $ensure_monitor_service = $enable ? { -- To view, visit https://gerrit.wikimedia.org/r/303144 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: If4293878f17e12be30650d21fd909a112a4a4c8a Gerrit-PatchSet: 4 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org> Gerrit-Reviewer: Elukey <ltosc...@wikimedia.org> Gerrit-Reviewer: Muehlenhoff <mmuhlenh...@wikimedia.org> Gerrit-Reviewer: Ottomata <o...@wikimedia.org> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list MediaWiki-commits@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits