From 6b4f03f9ea0e958e75f82040d674f67a6cdcfc87 Mon Sep 17 00:00:00 2001 From: Michele Baldessari Date: Thu, 16 May 2019 09:16:51 +0200 Subject: [PATCH] Remove the iptables rules set via service_config_settings This breaks the rules for the haproxy stats access because it shadows them. Let's remove these rules and move the iptables rules for haproxy in puppet-tripleo where they should have been in the first place, like for all other services. Depends-On: I1325171ef60d7a7e3b57373082fcdb5487be939b Change-Id: I2f177c930567b3a45f0d95cec4140f478f14a074 Closes-Bug: #1829338 (cherry picked from commit 114e5778f95d51e518c0ef73b05c54fca160dbe0) --- deployment/horizon/horizon-container-puppet.yaml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/deployment/horizon/horizon-container-puppet.yaml b/deployment/horizon/horizon-container-puppet.yaml index bc6ce994dc..ef26c62502 100644 --- a/deployment/horizon/horizon-container-puppet.yaml +++ b/deployment/horizon/horizon-container-puppet.yaml @@ -198,12 +198,6 @@ outputs: - horizon::django_debug: { get_param: HorizonDebug } - horizon::django_debug: { get_param: Debug } service_config_settings: - haproxy: - tripleo::haproxy::firewall_rules: - '127 horizon': - dport: - - 80 - - 443 keystone: keystone_enable_member: true # BEGIN DOCKER SETTINGS