Allow test slaves to talk to themselves

Update iptables rules to allow slaves to talk to themselves over their
known IP addresses. This should allow services to listen on public or
private addresses in addition to the loopback address and talk to those
services over these IPs.

Specifically this should address a problem with rabbitmq coming up on
the public IP but not being able to talk to it due to iptables.

Change-Id: If851eb8ce97ca0c0c113f0a924ec0916c993cf87
This commit is contained in:
Clark Boylan 2016-03-23 12:14:10 -07:00
parent 22e7d4c715
commit 468f17c4f6
2 changed files with 7 additions and 4 deletions

View File

@ -16,6 +16,13 @@
# See the License for the specific language governing permissions and # See the License for the specific language governing permissions and
# limitations under the License. # limitations under the License.
# Ensure that we can talk to ourselves over any of our known IPs
# and that our related nodes can talk to use from all of their
# known IPs
for ip in $(cat /etc/nodepool/primary_node /etc/nodepool/sub_nodes /etc/nodepool/primary_node_private /etc/nodepool/sub_nodes_private | sort -u); do
sudo iptables -I openstack-INPUT 1 -s $ip -j ACCEPT
done
source /etc/nodepool/provider source /etc/nodepool/provider
# Generate the AFS Slug from the host system. # Generate the AFS Slug from the host system.

View File

@ -18,10 +18,6 @@
export PATH=$PATH:/usr/local/sbin:/usr/sbin export PATH=$PATH:/usr/local/sbin:/usr/sbin
for ip in $(cat /etc/nodepool/primary_node /etc/nodepool/sub_nodes /etc/nodepool/primary_node_private /etc/nodepool/sub_nodes_private | sort -u); do
sudo iptables -I openstack-INPUT 1 -s $ip -j ACCEPT
done
echo "" >> /home/jenkins/.ssh/authorized_keys echo "" >> /home/jenkins/.ssh/authorized_keys
cat /etc/nodepool/id_rsa.pub >> /home/jenkins/.ssh/authorized_keys cat /etc/nodepool/id_rsa.pub >> /home/jenkins/.ssh/authorized_keys
echo "" >> /home/jenkins/.ssh/authorized_keys echo "" >> /home/jenkins/.ssh/authorized_keys