infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Update base playbook to not set rootpw on releng and add accel stuff in iptables for releng.

Browse source
This commit is contained in:
Kevin Fenzi 2013-11-25 18:48:47 +00:00
parent 0dd87ee096
commit 3667001df1
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/base/tasks/main.yml
View file

@ -30,7 +30,7 @@
user: name=root password={{ rootpw }} state=present
tags:
- rootpw
when: not inventory_hostname.startswith('build')
when: not inventory_hostname.startswith('build') or not inventory_hostname.startswith('releng')
- name: add ansible root key
authorized_key: user=root key="{{ item }}"

4
roles/base/templates/iptables/iptables.releng
View file

@ -42,6 +42,10 @@ COMMIT
-A INPUT -p tcp -m tcp -s 192.168.100.0/24 --dport 22 -j REJECT --reject-with tcp-reset
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
# for fireball mode - allow port 5099 from lockbox and it's ips
-A INPUT -p tcp -m tcp --dport 5099 -s 10.5.126.23 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 5099 -s 10.5.127.51 -j ACCEPT
# Allow all netapp traffic
-A INPUT -p udp -m udp -s 10.5.88.36 -j ACCEPT
-A INPUT -p tcp -m tcp -s 10.5.88.36 -j ACCEPT