From a02d9a2da097821554fde55267256ddf9be41978 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Mon, 6 Jul 2020 10:36:51 -0700 Subject: [PATCH] base / iptables / koji_builder: The s390x hosts need to talk to kojipkgs01/02 Actually it's only the varnish caching host that needs to talk to them at this point, but might as well allow it on any of them in case we switch how the caching works there or the like. Signed-off-by: Kevin Fenzi --- roles/base/templates/iptables/iptables.kojibuilder | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/base/templates/iptables/iptables.kojibuilder b/roles/base/templates/iptables/iptables.kojibuilder index 6923955cf6..b4cab18377 100644 --- a/roles/base/templates/iptables/iptables.kojibuilder +++ b/roles/base/templates/iptables/iptables.kojibuilder @@ -30,6 +30,8 @@ # kojipkgs {% if host in groups['buildvm_s390x'] %} -A OUTPUT -p tcp -m tcp -d 10.16.0.17 --dport 80 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.169.106 --dport 80 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.169.107 --dport 80 -j ACCEPT {% endif %} # tang for buildhw