RETIRED, Lightweight composition layer for Puppet TripleO
Go to file
Emilien Macchi 26dfe7aaba firewall: don't reload IPtables after cleanup
This patch stops the IPtables reload when doing Neutron rules cleanup.

Full context:
puppetlabs-firewall only manages the current state of iptables
rules and writes out the rules to a file to ensure they are
persisted. We are specifically running the following commands after the
iptables rules to ensure the persisted file does not contain any
ephemeral neutron rules. Neutron assumes the iptables rules are not
persisted so it may cause an issue if the rule is loaded on boot
(or via iptables restart). If an operator needs to reload iptables
for any reason, they may need to manually reload the appropriate
neutron agent to restore these iptables rules.

rhbz#1541528
Related-Bug: #1747960
Change-Id: I1ab3a52306b91baadb70d2210a378417087f1ecf
(cherry picked from commit 5fc0b5600d)
2018-03-12 16:38:12 +00:00
lib Handle duplicate/invalid entries in migration SSH inbound addresses 2017-10-10 15:18:58 +01:00
manifests firewall: don't reload IPtables after cleanup 2018-03-12 16:38:12 +00:00
releasenotes/notes Remove neutron-managed firewall rules from /etc/sysconfig/iptables 2018-02-21 06:01:48 +00:00
spec Create dedicated "apache" base profile 2018-01-12 00:30:18 +00:00
templates Add Docker Registry profile 2017-03-03 13:24:11 +00:00
zuul.d Zuul: Remove project name 2018-02-08 16:47:35 -08:00
.gitignore Update gitignore not to exclude fixture hieradata 2017-05-19 14:07:40 -04:00
.gitreview Update .gitreview for stable/newton 2016-09-29 12:59:16 -04:00
.sync.yml Initial msync run for all Puppet OpenStack modules 2015-08-18 14:30:54 +02:00
Gemfile Use stable/newton for puppet-openstack_spec_helper. 2016-11-11 14:33:58 +00:00
LICENSE Add basic structure for a Puppet module 2015-02-02 11:39:21 -05:00
Puppetfile_extras Puppetfile: pin puppetlabs-haproxy to 1.5 (latest newton) 2017-11-21 17:53:09 +00:00
README.md README: basic words for now. 2015-02-02 11:46:31 -05:00
Rakefile Switch puppet-tripleo to use puppet-openstack_spec_helper 2016-09-22 21:26:23 -04:00
bindep.txt [newton] Add Puppet package to bindep, for module build 2017-10-27 13:50:11 -07:00
metadata.json Prepare 5.6.8 (newton) 2018-01-23 10:31:47 -08:00

README.md

puppet-tripleo

Lightweight composition layer for Puppet TripleO.