From b18b49d4d7f92d7b9ed8e8db8507634fa0bcb938 Mon Sep 17 00:00:00 2001
From: Daneyon Hansen <danehans@cisco.com>
Date: Thu, 16 Apr 2015 22:22:42 +0000
Subject: [PATCH] Disables firewalld for Heat-deployed Fedora instances

Previously, Heat was deploying Fedora21 instances with firewalld
enabled and running. It is well documented that firewalld causes
problems with OpenStack Neutron. That is becasue Neutron uses
iptables instead of firewalld for security filtering.

Change-Id: I25cb32984841423a7b1c44b55cd19b5b4588c9e8
---
 devenv/kollanode.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/devenv/kollanode.yaml b/devenv/kollanode.yaml
index 4c729ca8d0..733175a69a 100644
--- a/devenv/kollanode.yaml
+++ b/devenv/kollanode.yaml
@@ -189,6 +189,10 @@ resources:
                            python-novaclient python-cinderclient \
                            python-neutronclient python-heatclient
 
+            # Disable firewalld per OpenStack documentation
+            service firewalld stop
+            chkconfig firewalld off
+
             # Send the CFN signal
             cfn-signal -e0 --data 'OK' -r 'Setup complete' '$WAIT_HANDLE'
           params: