opendev/system-config
Code Issues Proposed changes

Add zuulv3.o.o to cacti / zookeeper firewall

Browse Source 
Now that zuulv3.o.o has been launched, loop it into our production
systems. This means it needs access to zookeeper and should be in
cacti.

Change-Id: I4c4e341c7ec8d83575f83770a5a607c96c455c0b
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This commit is contained in:
Paul Belanger 2017-06-02 11:34:13 -04:00
parent f393cc5651
commit fff939e64d
No known key found for this signature in database
GPG Key ID: 611A80832067AF38
2 changed files with 2 additions and 0 deletions
hiera
common.yaml
manifests
site.pp

1
hiera/common.yaml

@ -511,6 +511,7 @@ cacti_hosts:
- zm08.openstack.org
- zuul.openstack.org
- zuulv3-dev.openstack.org
- zuulv3.openstack.org
infracloud_hpuseast_ssl_cert_file_contents: |
-----BEGIN CERTIFICATE-----
MIIEijCCAvICCQDZLTPao6k1yjANBgkqhkiG9w0BAQsFADCBhjELMAkGA1UEBhMC

1
manifests/site.pp

@ -853,6 +853,7 @@ node 'nodepool.openstack.org' {
'nb04.openstack.org',
'nl01.openstack.org',
'zuulv3-dev.openstack.org',
'zuulv3.openstack.org',
]
$zk_iptables_rule = regsubst($zk_receivers,
'^(.*)$', '-m state --state NEW -m tcp -p tcp --dport 2181 -s \1 -j ACCEPT')