Logan V c742cb182a Whitelist the infra hosts
Add the infra hosts to the haproxy global whitelist. This is needed
so that these hosts can access the endpoints for nova metadata api
as well as the apt-cacher-ng endpoint.

Change-Id: I27eee08ab6f3b1e5ec3bd9afcebbabce181526ee
2019-03-16 18:03:56 -05:00

12 lines
415 B
YAML

---
# Allow control node physical hosts to contact metadata endpoint
# since the Neutron agents are no longer containerized.
# Additionally, this is required to whitelist the bare-metal hosts
# communication with the apt-cacher-ng endpoint
haproxy_metal_networks:
- "{{ cidr_networks.external }}"
haproxy_whitelist_networks: "{{
['192.168.0.0/16', '172.16.0.0/12', '10.0.0.0/8'] +
haproxy_metal_networks }}"