Muehlenhoff has submitted this change and it was merged.

Change subject: druid: Limit to analytics networks
......................................................................


druid: Limit to analytics networks

Only accessed from the analytics networks.

Change-Id: If4293878f17e12be30650d21fd909a112a4a4c8a
---
M modules/druid/manifests/middlemanager.pp
M modules/druid/manifests/service.pp
2 files changed, 2 insertions(+), 2 deletions(-)

Approvals:
  Ottomata: Looks good to me, but someone else must approve
  Muehlenhoff: Verified; Looks good to me, approved
  jenkins-bot: Verified



diff --git a/modules/druid/manifests/middlemanager.pp 
b/modules/druid/manifests/middlemanager.pp
index 87f4fa5..173c621 100644
--- a/modules/druid/manifests/middlemanager.pp
+++ b/modules/druid/manifests/middlemanager.pp
@@ -103,6 +103,6 @@
     ferm::service { 'druid-middlemanager-indexer-task':
         proto  => 'tcp',
         port   =>  "${peon_start_port}:${peon_end_port}",
-        srange => '$ALL_NETWORKS',
+        srange => '$ANALYTICS_NETWORKS',
     }
 }
diff --git a/modules/druid/manifests/service.pp 
b/modules/druid/manifests/service.pp
index 74f5a63..9c438b8 100644
--- a/modules/druid/manifests/service.pp
+++ b/modules/druid/manifests/service.pp
@@ -78,7 +78,7 @@
     ferm::service { "druid-${service}":
         proto  => 'tcp',
         port   =>  $runtime_properties['druid.port'],
-        srange => '$ALL_NETWORKS',
+        srange => '$ANALYTICS_NETWORKS',
     }
     if $::realm == 'production' {
         $ensure_monitor_service = $enable ? {

-- 
To view, visit https://gerrit.wikimedia.org/r/303144
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: If4293878f17e12be30650d21fd909a112a4a4c8a
Gerrit-PatchSet: 4
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Elukey <ltosc...@wikimedia.org>
Gerrit-Reviewer: Muehlenhoff <mmuhlenh...@wikimedia.org>
Gerrit-Reviewer: Ottomata <o...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to