openstack/octavia
Code Issues Proposed changes

Don't install firewalld in the amphora

Browse Source 
When building rockylinux images, DIB install the Minimal Install group
which pulls firewalld. By default it allows only SSH traffic, so we
would need specific rules for the management and tenant traffic, but as
we are using security groups, it's safe to remove firewalld.

Change-Id: I87a26faf6c72640d8916bc3452123a9b5a74d39f
This commit is contained in:
Gregory Thiemonge 2024-06-06 10:18:18 +02:00
parent 5c0b011eac
commit e8fd3b7843
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
elements/amphora-agent/package-installs.yaml
View File

@ -19,6 +19,10 @@ git-man:
uninstall: True
perl:
uninstall: True
# diskimage-builder installs firewalld in rockylinux, it's not needed as it
# blocks management and tenant traffic by default and we use security groups
firewalld:
uninstall: True
libffi-dev:
build-only: True