Currently the builders are trying to contact os-node boxes on port 8443 but that is not where fas-all lives.
diff --git a/roles/base/templates/iptables/iptables.kojibuilder b/roles/base/templates/iptables/iptables.kojibuilder index a3819777c..805cf735f 100644 --- a/roles/base/templates/iptables/iptables.kojibuilder +++ b/roles/base/templates/iptables/iptables.kojibuilder @@ -78,10 +78,12 @@ -A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 443 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 80 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 443 -j ACCEPT -# for 2 facter auth --A OUTPUT -p tcp -m tcp -d 10.3.163.69 --dport 8443 -j ACCEPT --A OUTPUT -p tcp -m tcp -d 10.3.163.70 --dport 8443 -j ACCEPT --A OUTPUT -p tcp -m tcp -d 10.3.163.71 --dport 8443 -j ACCEPT +# for 2 facter auth (fas-all) +-A OUTPUT -p tcp -m tcp -d 10.3.163.74 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.75 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 8443 -j ACCEPT +
#nfs to vtap-fedora-nfs01.storage.phx2.redhat.com - a little to wide-open - but # kinda necessary
On Fri, Aug 28, 2020 at 04:28:42PM -0400, Stephen John Smoogen wrote:
Currently the builders are trying to contact os-node boxes on port 8443 but that is not where fas-all lives.
diff --git a/roles/base/templates/iptables/iptables.kojibuilder b/roles/base/templates/iptables/iptables.kojibuilder index a3819777c..805cf735f 100644 --- a/roles/base/templates/iptables/iptables.kojibuilder +++ b/roles/base/templates/iptables/iptables.kojibuilder @@ -78,10 +78,12 @@ -A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 443 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 80 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 443 -j ACCEPT -# for 2 facter auth --A OUTPUT -p tcp -m tcp -d 10.3.163.69 --dport 8443 -j ACCEPT --A OUTPUT -p tcp -m tcp -d 10.3.163.70 --dport 8443 -j ACCEPT --A OUTPUT -p tcp -m tcp -d 10.3.163.71 --dport 8443 -j ACCEPT +# for 2 facter auth (fas-all) +-A OUTPUT -p tcp -m tcp -d 10.3.163.74 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.75 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 8443 -j ACCEPT
+1 here.
kevin
On Fri, Aug 28, 2020 at 4:29 PM Stephen John Smoogen smooge@gmail.com wrote:
Currently the builders are trying to contact os-node boxes on port 8443 but that is not where fas-all lives.
diff --git a/roles/base/templates/iptables/iptables.kojibuilder b/roles/base/templates/iptables/iptables.kojibuilder index a3819777c..805cf735f 100644 --- a/roles/base/templates/iptables/iptables.kojibuilder +++ b/roles/base/templates/iptables/iptables.kojibuilder @@ -78,10 +78,12 @@ -A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 443 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 80 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 443 -j ACCEPT -# for 2 facter auth --A OUTPUT -p tcp -m tcp -d 10.3.163.69 --dport 8443 -j ACCEPT --A OUTPUT -p tcp -m tcp -d 10.3.163.70 --dport 8443 -j ACCEPT --A OUTPUT -p tcp -m tcp -d 10.3.163.71 --dport 8443 -j ACCEPT +# for 2 facter auth (fas-all) +-A OUTPUT -p tcp -m tcp -d 10.3.163.74 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.75 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 8443 -j ACCEPT
#nfs to vtap-fedora-nfs01.storage.phx2.redhat.com - a little to wide-open - but # kinda necessary
+1 from me.
+1
On Fri, Aug 28, 2020, 23:58 Neal Gompa ngompa13@gmail.com wrote:
On Fri, Aug 28, 2020 at 4:29 PM Stephen John Smoogen smooge@gmail.com wrote:
Currently the builders are trying to contact os-node boxes on port 8443
but that is not where fas-all lives.
diff --git a/roles/base/templates/iptables/iptables.kojibuilder
b/roles/base/templates/iptables/iptables.kojibuilder
index a3819777c..805cf735f 100644 --- a/roles/base/templates/iptables/iptables.kojibuilder +++ b/roles/base/templates/iptables/iptables.kojibuilder @@ -78,10 +78,12 @@ -A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 443 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 80 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 443 -j ACCEPT -# for 2 facter auth --A OUTPUT -p tcp -m tcp -d 10.3.163.69 --dport 8443 -j ACCEPT --A OUTPUT -p tcp -m tcp -d 10.3.163.70 --dport 8443 -j ACCEPT --A OUTPUT -p tcp -m tcp -d 10.3.163.71 --dport 8443 -j ACCEPT +# for 2 facter auth (fas-all) +-A OUTPUT -p tcp -m tcp -d 10.3.163.74 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.75 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.76 --dport 8443 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.3.163.77 --dport 8443 -j ACCEPT
#nfs to vtap-fedora-nfs01.storage.phx2.redhat.com - a little to
wide-open - but
# kinda necessary
+1 from me.
-- 真実はいつも一つ！/ Always, there's only one truth! _______________________________________________ infrastructure mailing list -- infrastructure@lists.fedoraproject.org To unsubscribe send an email to infrastructure-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedorapro...
infrastructure@lists.fedoraproject.org
-
Clement Verna -
kevin -
Neal Gompa -
Stephen John Smoogen