Merge pull request #744 from mlibrary/patch_prometheus_fw

prometheus firewall temp fixup
mlibrary · Nov 6, 2024 · 84c9b9f · 84c9b9f
2 parents 28d6069 + f7aa994
commit 84c9b9f
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/manifests/profile/prometheus.pp b/manifests/profile/prometheus.pp
@@ -243,17 +243,24 @@
         tag   => "${::datacenter}_prometheus_public_ipmi_exporter",
         dport => 9290,
       ;
+    }
+
+    @@firewall {
+      default:
+        proto  => 'tcp',
+        source => $address,
+        state  => 'NEW',
+        action => 'accept',
+      ;
 
       "010 prometheus public node exporter firewall6 ${::hostname} ${address}":
         tag    => "firewall6-${::datacenter}_prometheus_public_node_exporter",
         dport  => 9100,
-        action => 'accept',
       ;
 
       "010 prometheus public ipmi exporter firewall6 ${::hostname} ${address}":
         tag    => "firewall6-${::datacenter}_prometheus_public_ipmi_exporter",
         dport  => 9290,
-        action => 'accept',
       ;
     }
   }