Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Allow openshift into db-fas01.phx2

Browse source 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
This commit is contained in:
Patrick Uiterwijk 2019-05-09 16:06:44 +02:00
parent 433270afac
commit 4b1f1d0581
1 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
inventory/host_vars/db-fas01.phx2.fedoraproject.org
View file

@ -43,6 +43,13 @@ custom_rules: [
# sundries ??? but this is noc01?
'-A INPUT -p tcp -m tcp -s 10.5.126.41 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.5.126.241 --dport 5432 -j ACCEPT',
# Openshift nodes (egress policy will block connection from non-authorized projects)
'-A INPUT -p tcp -m tcp -s 10.5.126.248 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.5.126.164 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.5.126.165 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.5.126.166 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.5.126.167 --dport 5432 -j ACCEPT',
]
#
# Large updates pushes cause lots of db threads doing the tag moves, so up this from default.