kayobe/releasenotes/notes/remove-inspector-manage-firewall-b1117b04a0f6904d.yaml
Mark Goddard c2a35ce211 Remove inspector_manage_firewall variable
This is supported in kolla-ansible via the ironic_inspector_pxe_filter
variable, which can be added to globals.yml. The default value for that
variable changed in the Stein release from 'iptables' to 'dnsmasq',
since the iptables filter does not work with Docker CE [1].

This change removes the inspector_manage_firewall variable.

This change also adds an iptables rule in CI tests to allow DHCP packets
to be forwarded, to ensure bare metal servers can be deployed.

[1] https://bugs.launchpad.net/kolla-ansible/+bug/1823044

Depends-On: https://review.openstack.org/649673
Change-Id: Idac6777b4d97fbd17698fc2086ceb068d7b2e326
Related-Bug: #1823044
2019-04-09 13:53:59 +01:00

10 lines
458 B
YAML

---
upgrade:
- |
Removes the ``inspector_manage_firewall`` variable. This is supported in
Kolla Ansible via the ``ironic_inspector_pxe_filter`` variable, which can
be added to ``${KAYOBE_CONFIG_PATH}/kolla/globals.yml``. The default value
for that variable changed in the Stein release from 'iptables' to
'dnsmasq', since the iptables filter `does not work with Docker CE
<https://bugs.launchpad.net/kolla-ansible/+bug/1823044>`__.