openstack/tripleo-heat-templates
Code Issues Proposed changes

Merge "implement default ssh-from-ctlplane rule via hiera"

Browse Source
This commit is contained in:
Zuul 2019-01-16 22:33:15 +00:00 committed by Gerrit Code Review
commit 4f9653cbdd
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
deployment/tripleo-firewall/tripleo-firewall-baremetal-puppet.yaml
View File

@ -47,6 +47,12 @@ outputs:
config_settings: config_settings:
tripleo::firewall::manage_firewall: {get_param: ManageFirewall} tripleo::firewall::manage_firewall: {get_param: ManageFirewall}
tripleo::firewall::purge_firewall_rules: {get_param: PurgeFirewallRules} tripleo::firewall::purge_firewall_rules: {get_param: PurgeFirewallRules}
tripleo::tripleo_firewall::firewall_rules:
'003 accept ssh from controlplane':
source: "%{hiera('ctlplane_subnet')}"
proto: 'tcp'
dport: 22
step_config: | step_config: |
include ::tripleo::firewall include ::tripleo::firewall
upgrade_tasks: upgrade_tasks: