Stop keystone admin from listening on public interface
As discussed in https://review.openstack.org/#/c/175958/, we probably don't want the keystone admin api listening on the public interface. Change-Id: I8c717ff3abbe3dc1d7febae800c6d3e64749619b
This commit is contained in:
parent
b55cd7a512
commit
cc84a3b934
|
@ -514,7 +514,7 @@ class tripleo::loadbalancer (
|
||||||
|
|
||||||
if $keystone_admin {
|
if $keystone_admin {
|
||||||
haproxy::listen { 'keystone_admin':
|
haproxy::listen { 'keystone_admin':
|
||||||
ipaddress => [$controller_virtual_ip, $public_virtual_ip],
|
ipaddress => [$controller_virtual_ip],
|
||||||
ports => 35357,
|
ports => 35357,
|
||||||
options => {
|
options => {
|
||||||
'option' => [ 'httpchk GET /' ],
|
'option' => [ 'httpchk GET /' ],
|
||||||
|
|
Loading…
Reference in New Issue