inventory: allow noc01 to connect to db-fas01 and db-koji01 to monitor them

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi
2020-07-05 12:03:26 -07:00
parent d20c281574
commit 56a476c7ed
2 changed files with 3 additions and 0 deletions

View File

@@ -34,6 +34,8 @@ custom_rules: [
'-A INPUT -p tcp -m tcp -s 10.3.163.71 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.3.163.72 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.3.163.73 --dport 5432 -j ACCEPT',
# noc01 needs to connect to check the db
'-A INPUT -p tcp -m tcp -s 10.3.163.10 --dport 5432 -j ACCEPT',
]
#
# Large updates pushes cause lots of db threads doing the tag moves, so up this from default.

View File

@@ -34,6 +34,7 @@ kernel_shmmax: 68719476736
custom_rules: [
'-A INPUT -p tcp -m tcp -s 10.3.169.104 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.3.169.105 --dport 5432 -j ACCEPT',
'-A INPUT -p tcp -m tcp -s 10.3.169.10 --dport 5432 -j ACCEPT',
]
#