Apply firewall rule for tripleo ui if ui is really enabled

Do not set firewall rule for tripleo ui if ui is disabled in
undercloud.

Change-Id: I5a19399e0a33091d0a0d0d35876ea8e1788821de
This commit is contained in:
Takashi Kajinami 2019-12-17 17:13:35 +09:00 committed by Alex Schultz
parent 525e655c7c
commit 702c551bf1
1 changed files with 2 additions and 0 deletions

View File

@ -1042,10 +1042,12 @@ tripleo::firewall::firewall_rules:
dport: "%{hiera('ironic_ipxe_port')}" dport: "%{hiera('ironic_ipxe_port')}"
# 140 network cidr nat rules # 140 network cidr nat rules
{{SUBNETS_CIDR_NAT_RULES}} {{SUBNETS_CIDR_NAT_RULES}}
{{#ENABLE_UI}}
'142 tripleo-ui': '142 tripleo-ui':
dport: dport:
- 3000 - 3000
- 443 - 443
{{/ENABLE_UI}}
'143 panko-api': '143 panko-api':
dport: dport:
- 8977 - 8977