xinetd: bind only on mysql network

By default galera-monitor xinetd is binding on all the interfaces.
That means that the port 9200 is exposed on the external network.
Because haproxy is using the same network for the backend and the
check we can reuse it for the xinetd binding.

Change-Id: If1a50515593e81f46d67309bdeecbe84c1d0ebe4
This commit is contained in:
Dimitri Savineau 2016-08-05 11:17:23 -04:00 committed by Alex Schultz
parent 53954ff503
commit 95fbe9289b
1 changed files with 1 additions and 0 deletions

View File

@ -161,6 +161,7 @@ class tripleo::profile::pacemaker::database::mysql (
unless => '/bin/test -e /etc/sysconfig/clustercheck && grep -q clustercheck /etc/sysconfig/clustercheck',
}
xinetd::service { 'galera-monitor' :
bind => hiera('mysql_bind_host'),
port => '9200',
server => '/usr/bin/clustercheck',
per_source => 'UNLIMITED',