firewall_rules.rb

gistfile1.rb

# determine if we are an alpha or production node
if node.chef_environment == "ome-alpha"
  local_environment = "alpha"
else
  local_environment = "prod"
end

# get the list of nodes...
sources = search(:node, "tags:#{node['memcached']['memcached_instance']} AND tags:#{local_environment}")

sources.each do |source|

  firewall_rule "allow ips"  do
    source "#{source['ipaddress']}"
    port node['memcached']['port'] 
    protocol :tcp 
    action :allow 
    notifies :enable, 'firewall[ufw]'
  end

end