system-config/hiera
Clark Boylan 32c991cad2 Split logstash gearman from elasticsearch fw rules
We were using the list of elasticsearch clients to generate firewall
rules for both elasticsearch port ranges and gearman port ranges. We
really only need subsets of the super set in both cases so lets make two
distinct lists that we can add and remove servers from instead.

This means the two sets of nodes that can talk to elasticsaerch are the
logstash node for kibana and the logstash workers for indexing. Then
all zuul executors and logstash workers and subunit workers can talk to
logstash.o.o over port 4730 for gearman job submission and handling.

Change-Id: I95de1404dcc087f09f0fd4e4134e20673e8c0ae5
2017-12-13 13:25:47 -08:00
..
fqdn Set cgit url in zuul connection config 2017-10-26 09:14:06 -07:00
group Remove zuulv2 long lived servers 2017-12-11 14:17:46 -05:00
common.yaml Split logstash gearman from elasticsearch fw rules 2017-12-13 13:25:47 -08:00