52a11834ef
This patch fixes: doc/source/contributor/testing.rst:281: D000 Explicit markup ends without a blank line; unexpected unindent. doc/source/user/test/example.rst:28: D001 Line too long doc/source/admin/maintenance-tasks.rst:8: D000 Title level inconsistent: doc/source/admin/maintenance-tasks.rst:22: D000 Title level inconsistent: doc/source/admin/troubleshooting.rst:630: D001 Line too long doc/source/admin/troubleshooting.rst:650: D001 Line too long doc/source/admin/maintenance-tasks/inventory-backups.rst:11: D001 Line too long For consistency between maintenance-tasks/ files, they now all have the same markup hierarchy. Depends-On: https://review.openstack.org/567804 Change-Id: Id1cf9cb45543daa7c39d5141d8dc5827a76c6413
2.0 KiB
Firewalls
OpenStack-Ansible does not configure firewalling for its infrastructure. It is up to the deployer to define the perimeter and its firewalling configuration.
By default, OpenStack-Ansible relies on Ansible SSH connections, and needs the TCP port 22 to be opened on all hosts internally.
For more information on generic OpenStack firewalling, see the OpenStack default port documentation
You can find in each of the role's respective documentatione, the default variables for the ports used within the scope of the role. Reviewing the documentation allow you to find the variable names if you want to use a different port.
Note
OpenStack-Ansible's group vars conveniently expose the vars outside of the role scope in case you are relying on the OpenStack-Ansible groups to configure your firewall.
Finding ports for your external load balancer
As explained in the previous section, you can find (in each role documentation) the default variables used for the public interface endpoint ports.
For example, the os_glance
documentation lists the variable
glance_service_publicuri. This contains the port used for
the reaching the service externally. In this example, it is equal to to
glance_service_port, whose value is 9292.
As a hint, you could find the whole list of public URI defaults by executing the following:
cd /etc/ansible/roles
grep -R -e publicuri -e port *Note
Haproxy
can be configured with OpenStack-Ansible. The automatically generated
/etc/haproxy/haproxy.cfg file have enough information on
the ports to open for your environment.