Cleanup the firewall logic.

We added code in t-h-t to strip empty services from the service_names
list. (These are often the result of a service set to OS::Heat::None).

As such we can now drop this puppet reject statement.

Change-Id: Ie66f14f183de7e44a1f69af862f7d4be9a14c904
This commit is contained in:
Dan Prince 2016-10-04 10:11:55 -04:00
parent 264d49a255
commit 39c9c6508a

View File

@ -102,7 +102,7 @@ class tripleo::firewall(
# dport: 999 # dport: 999
# proto: udp # proto: udp
# action: accept # action: accept
$service_names = reject(hiera('service_names', []), '^$') $service_names = hiera('service_names', [])
tripleo::firewall::service_rules { $service_names: } tripleo::firewall::service_rules { $service_names: }
} }