openstack/octavia
Code Issues Proposed changes

Don't install firewalld in the amphora

Browse Source 
When building rockylinux images, DIB install the Minimal Install group
which pulls firewalld. By default it allows only SSH traffic, so we
would need specific rules for the management and tenant traffic, but as
we are using security groups, it's safe to remove firewalld.

Change-Id: I87a26faf6c72640d8916bc3452123a9b5a74d39f
(cherry picked from commit e8fd3b7843b4971796aac69e5b1627d55451d082)
This commit is contained in:
Gregory Thiemonge 2024-06-06 10:18:18 +02:00 committed by Antony Messerli
parent f7c818b7dc
commit 1e1301ff8a
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
elements/amphora-agent/package-installs.yaml
View File

@ -19,6 +19,10 @@ git-man:
uninstall: True
perl:
uninstall: True
# diskimage-builder installs firewalld in rockylinux, it's not needed as it
# blocks management and tenant traffic by default and we use security groups
firewalld:
uninstall: True
libffi-dev:
build-only: True