summaryrefslogtreecommitdiff
path: root/firewall.yaml
diff options
context:
space:
mode:
authorSam Thursfield <sam.thursfield@codethink.co.uk>2015-05-08 10:54:47 +0100
committerSam Thursfield <sam.thursfield@codethink.co.uk>2015-05-08 10:58:41 +0100
commitf663d9553a29eed341cc18fc91d4c0aecb7ed109 (patch)
tree3228a0aef2a035fed3576ba3922402736caae31a /firewall.yaml
parent8e17dbcd98bee7a1a36bb16e3f65926fd2f795a7 (diff)
downloadinfrastructure-f663d9553a29eed341cc18fc91d4c0aecb7ed109.tar.gz
firewall: Allow internal machines to use the Masons as distbuild controllers
Change-Id: I84ddf212a615d26aa94fbfd85437be308eed4a84
Diffstat (limited to 'firewall.yaml')
-rw-r--r--firewall.yaml11
1 files changed, 11 insertions, 0 deletions
diff --git a/firewall.yaml b/firewall.yaml
index 9009de0e..a8c52843 100644
--- a/firewall.yaml
+++ b/firewall.yaml
@@ -246,6 +246,17 @@
protocol: tcp
remote_ip_prefix: 0.0.0.0/0
+ # 7878: morph distbuild controller port. This rule allows a devel
+ # system inside the Baserock cloud to use the Mason instances for
+ # distbuilding, which is useful when building a Baserock release
+ # among other things.
+ - direction: ingress
+ port_range_min: 7878
+ port_range_max: 7878
+ ethertype: IPv4
+ protocol: tcp
+ remote_ip_prefix: 192.168.222.0/24
+
# 8080: morph-cache-server server port. The x86 Masons use
# cache.baserock.org as the cache server for their distbuild
# networks. So cache.baserock.org needs to be able to connect to