opendev/system-config
Code Issues Proposed changes

Enable tcp/8088 on jenkins slaves

Browse Source 
We are enabling tcp/8088 specifically for zuul v2.5. This will allow a
user to telnet jenkins.slave.fqdn 8088 to stream the logs on the
remote host.

Change-Id: Iaf0e12ebe6dfcd30a88021a4d313284dae445ee8
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This commit is contained in:
Paul Belanger 2016-05-17 17:40:44 -04:00
parent 5335c5e4e7
commit 33448be976
No known key found for this signature in database
GPG Key ID: 611A80832067AF38
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
modules/openstack_project/manifests/single_use_slave.pp
View File

@ -21,12 +21,12 @@ class openstack_project::single_use_slave (
$project_config_repo = 'https://git.openstack.org/openstack-infra/project-config', $project_config_repo = 'https://git.openstack.org/openstack-infra/project-config',
) inherits openstack_project { ) inherits openstack_project {
class { 'openstack_project::template': class { 'openstack_project::template':
certname => $certname, certname => $certname,
automatic_upgrades => $automatic_upgrades, automatic_upgrades => $automatic_upgrades,
install_users => $install_users, install_users => $install_users,
install_resolv_conf => $install_resolv_conf, install_resolv_conf => $install_resolv_conf,
enable_unbound => $enable_unbound, enable_unbound => $enable_unbound,
iptables_rules4 => iptables_rules4 =>
[ [
# Ports 69 and 6385 allow to allow ironic VM nodes to reach tftp and # Ports 69 and 6385 allow to allow ironic VM nodes to reach tftp and
# the ironic API from the neutron public net # the ironic API from the neutron public net
@ -39,6 +39,7 @@ class openstack_project::single_use_slave (
'-p tcp --dport 8004 -s 172.24.4.0/23 -j ACCEPT', '-p tcp --dport 8004 -s 172.24.4.0/23 -j ACCEPT',
'-m limit --limit 2/min -j LOG --log-prefix "iptables dropped: "', '-m limit --limit 2/min -j LOG --log-prefix "iptables dropped: "',
], ],
iptables_public_tcp_ports => [8088],
} }
class { 'jenkins::slave': class { 'jenkins::slave':
ssh_key => $ssh_key, ssh_key => $ssh_key,