085856e318
This adds a new variable for the iptables role that allows us to indicate all members of an ansible inventory group should have iptables rules added. It also removes the unused zuul-executor-opendev group, and some unused variables related to the snmp rule. Also, collect the generated iptables rules for debugging. Change-Id: I48746a6527848a45a4debf62fd833527cc392398 Depends-On: https://review.opendev.org/728952
8 lines
281 B
YAML
8 lines
281 B
YAML
iptables_extra_public_tcp_ports:
|
|
- 80
|
|
- 3306
|
|
iptables_extra_allowed_groups:
|
|
- {'protocol': 'tcp', 'port': '4730', 'group': 'logstash-worker'}
|
|
- {'protocol': 'tcp', 'port': '4730', 'group': 'subunit-worker'}
|
|
- {'protocol': 'tcp', 'port': '4730', 'group': 'zuul-executor'}
|