diff --git a/inventory/host_vars/db-fas01.iad2.fedoraproject.org b/inventory/host_vars/db-fas01.iad2.fedoraproject.org index 1ee2a20a24..9511809b56 100644 --- a/inventory/host_vars/db-fas01.iad2.fedoraproject.org +++ b/inventory/host_vars/db-fas01.iad2.fedoraproject.org @@ -34,6 +34,8 @@ custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.163.71 --dport 5432 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.72 --dport 5432 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.73 --dport 5432 -j ACCEPT', + # noc01 needs to connect to check the db + '-A INPUT -p tcp -m tcp -s 10.3.163.10 --dport 5432 -j ACCEPT', ] # # Large updates pushes cause lots of db threads doing the tag moves, so up this from default. diff --git a/inventory/host_vars/db-koji01.iad2.fedoraproject.org b/inventory/host_vars/db-koji01.iad2.fedoraproject.org index 08fff88347..bf762fa108 100644 --- a/inventory/host_vars/db-koji01.iad2.fedoraproject.org +++ b/inventory/host_vars/db-koji01.iad2.fedoraproject.org @@ -34,6 +34,7 @@ kernel_shmmax: 68719476736 custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.169.104 --dport 5432 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.169.105 --dport 5432 -j ACCEPT', +'-A INPUT -p tcp -m tcp -s 10.3.169.10 --dport 5432 -j ACCEPT', ] #