]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/ganeti2/manifests/init.pp
more rules for ganeti; try rsa keys
[dsa-puppet.git] / modules / ganeti2 / manifests / init.pp
1 class ganeti2 {
2
3         package { 'ganeti2':
4                 ensure => installed
5         }
6
7         package { 'drbd8-utils':
8                 ensure => installed
9         }
10
11         package { 'ganeti-instance-debootstrap':
12                 ensure => installed
13         }
14
15         package { 'ganeti-htools':
16                 ensure => installed
17         }
18
19         @ferm::rule { 'dsa-ganeti-v4':
20                 description => 'Allow ganeti from ganeti master',
21                 rule        => 'proto tcp mod state state (NEW) dport (1811) @subchain \'ganeti\' { saddr ($HOST_GANETI_V4) ACCEPT; }',
22                 notarule    => true,
23         }
24
25         @ferm::rule { 'dsa-drbd-v4':
26                 description => 'Allow ganeti from ganeti master',
27                 rule        => 'proto tcp mod state state (NEW) dport (11000-11999) @subchain \'drbd\' { saddr ($HOST_DRBD_V4) ACCEPT; }',
28                 notarule    => true,
29         }
30 }