opendev/base-jobs
Code Issues Proposed changes

Open port 5001 for the registry proxy

Browse Source 
Previously we had opened port 5000 for the buildset registry. But we
also run a buildset registry proxy on port 5001. Because docker manages
the ipv4 firewall rules itself it was opening ipv4 5001 but ignoring
ipv6 5001. This meant that jobs that use ipv6 addrs as primary addrs
were failing to talk ot the registry proxy.

Fix this by opening the range 5000:5001.

Change-Id: I88abcd7fd99fb7dcc7726ef9a52f9b022729f9d5
This commit is contained in:
Clark Boylan 2019-05-21 13:07:08 -07:00
parent 7d5673f6db
commit dbb56dda99
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
playbooks/buildset-registry/pre.yaml
View File

@ -8,7 +8,7 @@
iptables:
action: insert
chain: openstack-INPUT
destination_port: 5000
destination_port: '5000:5001'
jump: ACCEPT
match: tcp
ctstate: NEW
@ -19,7 +19,7 @@
iptables:
action: insert
chain: openstack-INPUT
destination_port: 5000
destination_port: '5000:5001'
jump: ACCEPT
match: tcp
ctstate: NEW