From c96131045d6532152bfc3ec1a3804a57408a9112 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Aug 03 2020 19:40:54 +0000 Subject: base / iptables / kojibuilder: allow port 80 on new s390x cache instance Moving the local to s390x cache from 07 (a zvm instance) to 24 (a kvm instance) needs to adjust the firewalls for those builders to know that they can use port 80 on the new one. After that we will update dns to point it to the new location. Signed-off-by: Kevin Fenzi --- diff --git a/roles/base/templates/iptables/iptables.kojibuilder b/roles/base/templates/iptables/iptables.kojibuilder index b4cab18..a381977 100644 --- a/roles/base/templates/iptables/iptables.kojibuilder +++ b/roles/base/templates/iptables/iptables.kojibuilder @@ -30,6 +30,7 @@ # kojipkgs {% if host in groups['buildvm_s390x'] %} -A OUTPUT -p tcp -m tcp -d 10.16.0.17 --dport 80 -j ACCEPT +-A OUTPUT -p tcp -m tcp -d 10.16.0.35 --dport 80 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.169.106 --dport 80 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.3.169.107 --dport 80 -j ACCEPT {% endif %}