DO IT NOW! Thus said Stephen John Smoogen on Thu, 17 Mar 2016: > Date: Thu, 17 Mar 2016 15:49:14 -0600 > From: Stephen John Smoogen <smooge@xxxxxxxxx> > Reply-To: Fedora Infrastructure <infrastructure@xxxxxxxxxxxxxxxxxxxxxxx> > To: Fedora Infrastructure <infrastructure@xxxxxxxxxxxxxxxxxxxxxxx> > Subject: Re: Freeze break request: Upgrade FAS to 0.12.0 and open firewall on > db-fas01 from basset01 > > +1. DO IT. > > On 17 March 2016 at 15:28, Patrick Uiterwijk <puiterwijk@xxxxxxxxxx> wrote: > > Hi, > > > > Could I get +1s for the following things: > > > > 1. Upgrade FAS to 0.12.0: this release includes hooks for spam checks, and is currently running in Staging. > > 2. Installation of basset01.phx2 prod (not per se freeze break as it's a new host). > > 3. Open the db-fas01 prod firewall for basset01.phx2 (see patch) so that it can import the prod data. > > > > Note that this specifically does not include updating the FAS config to make use of the Basset calls, > > I will open a new FBR when I'm ready for that. > > This means that for the time being, there should be no visible changes to FAS until we enable this. > > I could hold off on the FAS upgrade until we are ready, but I figured I could get it done now. (if I can get > > at least +1s for nr 2/3, I can get started). > > > > > > > > [master 36bd988] Enable access from basset01 to db-fas01 > > 1 file changed, 3 insertions(+) > > [puiterwijk@batcave01 host_vars]$ git show HEAD > > commit 36bd9884fc2a846ebc784713be8d88a5c555018a > > Author: Patrick Uiterwijk <puiterwijk@xxxxxxxxxx> > > Date: Thu Mar 17 21:20:58 2016 +0000 > > > > Enable access from basset01 to db-fas01 > > > > Signed-off-by: Patrick Uiterwijk <puiterwijk@xxxxxxxxxx> > > > > diff --git a/inventory/host_vars/db-fas01.phx2.fedoraproject.org b/inventory/host_vars/db-fas01.phx2.fedoraproject.or > > index 83372cc..00b6fb1 100644 > > --- a/inventory/host_vars/db-fas01.phx2.fedoraproject.org > > +++ b/inventory/host_vars/db-fas01.phx2.fedoraproject.org > > @@ -37,6 +37,9 @@ custom_rules: [ > > '-A INPUT -p tcp -m tcp -s 10.5.126.46 --dport 5432 -j ACCEPT', > > '-A INPUT -p tcp -m tcp -s 10.5.126.47 --dport 5432 -j ACCEPT' , > > > > + # basset01 > > + '-A INPUT -p tcp -m tcp -s 10.5.126.194 --dport 5432 -j ACCEPT', > > + > > # sundries02... > > '-A INPUT -p tcp -m tcp -s 10.5.126.41 --dport 5432 -j ACCEPT', > > > > > > > > With kind regards, > > Patrick Uiterwijk > > Fedora Infra > > _______________________________________________ > > infrastructure mailing list > > infrastructure@xxxxxxxxxxxxxxxxxxxxxxx > > http://lists.fedoraproject.org/admin/lists/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx > > > > -- > Stephen J Smoogen. > _______________________________________________ > infrastructure mailing list > infrastructure@xxxxxxxxxxxxxxxxxxxxxxx > http://lists.fedoraproject.org/admin/lists/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx > -- Matthew Galgoci Network Operations Red Hat, Inc 919.754.3700 x44155 ------------------------------ “Whatever you do will be insignificant, but it is very important that you do it.” -- Mahatma Gandhi _______________________________________________ infrastructure mailing list infrastructure@xxxxxxxxxxxxxxxxxxxxxxx http://lists.fedoraproject.org/admin/lists/infrastructure@xxxxxxxxxxxxxxxxxxxxxxx