openstack/tripleo-heat-templates
Code Issues Proposed changes

Remove the iptables rules set via service_config_settings

Browse Source 
This breaks the rules for the haproxy stats access because it
shadows them. Let's remove these rules and move the iptables
rules for haproxy in puppet-tripleo where they should have
been in the first place, like for all other services.

Depends-On: I1325171ef60d7a7e3b57373082fcdb5487be939b
Change-Id: I2f177c930567b3a45f0d95cec4140f478f14a074
Closes-Bug: #1829338
(cherry picked from commit 114e5778f95d51e518c0ef73b05c54fca160dbe0)
This commit is contained in:
Michele Baldessari 2019-05-16 09:16:51 +02:00
parent 13e8b9ff7e
commit 6b4f03f9ea
1 changed files with 0 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
deployment/horizon/horizon-container-puppet.yaml
View File

@ -198,12 +198,6 @@ outputs:
- horizon::django_debug: { get_param: HorizonDebug }
- horizon::django_debug: { get_param: Debug }
service_config_settings:
haproxy:
tripleo::haproxy::firewall_rules:
'127 horizon':
dport:
- 80
- 443
keystone:
keystone_enable_member: true
# BEGIN DOCKER SETTINGS