infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

proxy*.stg.iad2.fedoraproject.org is not on the vpn

Browse source
This commit is contained in:
Stephen Smoogen 2020-08-31 11:09:05 -04:00
parent ab34b044a6
commit fede1317e7
3 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
inventory/host_vars/proxy01.stg.iad2.fedoraproject.org
View file

@ -16,3 +16,5 @@ sponsor: redhat
nrpe_procs_warn: 1200
nrpe_procs_crit: 1400
vpn: false

2
inventory/host_vars/proxy02.stg.iad2.fedoraproject.org
View file

@ -17,3 +17,5 @@ sponsor: redhat
nrpe_procs_warn: 1200
nrpe_procs_crit: 1400
vpn: false

10
roles/base/templates/iptables/iptables.kojibuilder
View file

@ -78,10 +78,12 @@
-A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 443 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 443 -j ACCEPT
# for 2 facter auth
-A OUTPUT -p tcp -m tcp -d 10.3.163.69 --dport 8443 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.3.163.70 --dport 8443 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.3.163.71 --dport 8443 -j ACCEPT
# for 2 facter auth (fas-all)
-A OUTPUT -p tcp -m tcp -d 10.3.163.74 --dport 8443 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.3.163.75 --dport 8443 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 8443 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 8443 -j ACCEPT
#nfs to vtap-fedora-nfs01.storage.phx2.redhat.com - a little to wide-open - but
# kinda necessary