infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

remove 10.5.126 ips from nrpe to try and figure out why host was not connecting

Browse source
This commit is contained in:
Stephen Smoogen 2020-09-23 17:08:17 -04:00
parent 36bc7c8419
commit 8d58708305
5 changed files with 3 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

1
roles/base/templates/iptables/iptables.osuosl
View file

@ -34,7 +34,6 @@
-A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.16 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.16 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.15 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.15 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 10.3.163.10 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 10.3.163.10 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 10.5.126.241 -j ACCEPT
# if the host/group defines incoming tcp_ports - allow them # if the host/group defines incoming tcp_ports - allow them
{% if tcp_ports is defined %} {% if tcp_ports is defined %}

2
roles/base/templates/iptables/iptables.staging
View file

@ -31,8 +31,6 @@
-A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.16 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.16 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.15 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.15 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 10.3.163.10 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 10.3.163.10 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 10.5.126.241 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 10.5.128.38 -j ACCEPT
# if the host declares a fedmsg-enabled wsgi app, open ports for it # if the host declares a fedmsg-enabled wsgi app, open ports for it
{% if wsgi_fedmsg_service is defined %} {% if wsgi_fedmsg_service is defined %}

1
roles/base/templates/iptables/iptables.torrent02.fedoraproject.org
View file

@ -31,7 +31,6 @@
-A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.16 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.16 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.15 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 38.145.60.15 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 10.3.163.10 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5666 -s 10.3.163.10 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5666 -s 10.5.126.241 -j ACCEPT
{% if env != 'staging' and datacenter == 'phx2' and inventory_hostname not in groups['staging_friendly'] %} {% if env != 'staging' and datacenter == 'phx2' and inventory_hostname not in groups['staging_friendly'] %}
# #

4
roles/nagios_client/templates/nrpe.cfg.j2
View file

@ -80,9 +80,9 @@ nrpe_group=nrpe
{% if env == "staging" %} {% if env == "staging" %}
allowed_hosts=10.5.126.2,10.3.163.10,10.5.126.241,192.168.1.10,192.168.1.20,38.145.60.15,192.168.1.166,38.145.60.16 allowed_hosts=10.3.163.10,192.168.1.10,192.168.1.20,38.145.60.15,192.168.1.166,38.145.60.16
{% else %} {% else %}
allowed_hosts=10.3.163.10,192.168.1.10,192.168.1.20,38.145.60.15,10.5.126.241,192.168.1.166,38.145.60.16 allowed_hosts=10.3.163.10,192.168.1.10,192.168.1.20,38.145.60.15,192.168.1.166,38.145.60.16
{% endif %} {% endif %}

2
roles/nagios_server/templates/nrpe/nrpe.cfg.j2
View file

@ -96,7 +96,7 @@ nrpe_group=nrpe
# NOTE: This option is ignored if NRPE is running under either inetd or xinetd # NOTE: This option is ignored if NRPE is running under either inetd or xinetd
#allowed_hosts=127.0.0.1,192.168.0.2 #allowed_hosts=127.0.0.1,192.168.0.2
allowed_hosts=10.5.126.2,10.3.163.10,10.5.126.241,127.0.0.1,192.168.1.10,192.168.1.20,192.168.1.166,38.145.60.15 allowed_hosts=10.3.163.10,127.0.0.1,192.168.1.10,192.168.1.20,192.168.1.166,38.145.60.15