Merge "Open ports for Metrics QDRs"

2020-01-16 02:30:52 +00:00 · 2020-01-16 02:30:52 +00:00 · d2c3e098c7
parent a6ef941e6d 706d9b3982
commit d2c3e098c7
1 changed files with 13 additions and 3 deletions
--- a/deployment/metrics/qdr-container-puppet.yaml
+++ b/deployment/metrics/qdr-container-puppet.yaml
@ -154,9 +154,19 @@ outputs:
    value:
      service_name: metrics-qdr
      firewall_rules:
-        '109 metrics qdr':
-          dport:
-            - {get_param: MetricsQdrPort}
+        map_merge:
+          - '109 metrics qdr':
+              dport:
+                - {get_param: MetricsQdrPort}
+          - map_merge:
+              repeat:
+                for_each:
+                  <%net_cidr%>: {get_param: [ServiceData, net_cidr_map, ctlplane]}
+                template:
+                  '109 accept internal metrics qdr ctlplane subnet <%net_cidr%>':
+                    dport:
+                      - 5667
+                      - 5668
      monitoring_subscription: {get_param: MonitoringSubscriptionQdr}
      service_config_settings:
        rsyslog: