Merge "N->O upgrade, blanks ipv6 rules before activating it."

2017-03-28 17:46:08 +00:00 · 2017-03-28 17:46:08 +00:00 · 21c5ff30bb
parent f6fb2e4d2b 670399a2ca
commit 21c5ff30bb
1 changed files with 6 additions and 0 deletions
--- a/puppet/services/tripleo-firewall.yaml
+++ b/puppet/services/tripleo-firewall.yaml
@ -37,3 +37,9 @@ outputs:
        tripleo::firewall::purge_firewall_rules: {get_param: PurgeFirewallRules}
      step_config: |
        include ::tripleo::firewall
+      upgrade_tasks:
+        - name: blank ipv6 rule before activating ipv6 firewall.
+          tags: step3
+          shell: cat /etc/sysconfig/ip6tables > /etc/sysconfig/ip6tables.n-o-upgrade; cat</dev/null>/etc/sysconfig/ip6tables
+          args:
+            creates: /etc/sysconfig/ip6tables.n-o-upgrade