prometheus firewall temp fixup

We were setting both action and jump on the same exported resource because 'action' override doesn't clear the 'jump' default.
mlibrary · Nov 6, 2024 · f7aa994 · f7aa994
1 parent 28d6069
commit f7aa994
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/manifests/profile/prometheus.pp b/manifests/profile/prometheus.pp
@@ -243,17 +243,24 @@
         tag   => "${::datacenter}_prometheus_public_ipmi_exporter",
         dport => 9290,
       ;
+    }
+
+    @@firewall {
+      default:
+        proto  => 'tcp',
+        source => $address,
+        state  => 'NEW',
+        action => 'accept',
+      ;
 
       "010 prometheus public node exporter firewall6 ${::hostname} ${address}":
         tag    => "firewall6-${::datacenter}_prometheus_public_node_exporter",
         dport  => 9100,
-        action => 'accept',
       ;
 
       "010 prometheus public ipmi exporter firewall6 ${::hostname} ${address}":
         tag    => "firewall6-${::datacenter}_prometheus_public_ipmi_exporter",
         dport  => 9290,
-        action => 'accept',
       ;
     }
   }