cloudinfra: Cleanup Puppetserver security group (!253) · Merge requests · repos / cloud / cloud-vps / tofu-infra · GitLab

How to register an account on GitLab. Due to spam, new accounts are locked until approved by an admin or the approver bot. Your GitLab account gets automatically approved within one hour if you are a member of Trusted Contributors in Gerrit, or a member of the Trusted-Contributors group in Phabricator and linked your Developer account ("LDAP") to your Phabricator account. If none of these apply, file an unlock request to expedite access. Only if you are WMF staff: Create your GitLab account, have "Wmf" group membership in IDM, link your Developer account ("LDAP") to your Phabricator account, and get automatically approved.

Support: mw:GitLab, how to host a project on GitLab, #wikimedia-gitlab on libera.chat, #GitLab on Phabricator.

Remove ENC API ports which are now handled by separate servers.
Remove all specific rules from old wikiprod public addresses. Those connections are now handled via cloud-private.
Remove rules to port 8141, which was the backend Puppet server port with Puppet 5. In our Puppet 7 setup this is not in use.
Scope the Puppet rule (8140/tcp) to Cloud VPS only, instead of opening it to the entire internet.