openstack/tripleo-heat-templates
Code Issues Proposed changes

Don't open unused nova ports in iptables

Browse Source 
Ports 3773 and 8773 were used for Nova EC2 API but are no longer in use.
The ports should not be opened in iptables.

Change-Id: I520c664a86be081b8d48675c22aa8d138aa9d1e6
Closes-Bug: 1726409
This commit is contained in:
Bob Fournier 2017-10-23 09:51:01 -04:00
parent fa2528840d
commit 7494476da7
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
puppet/services/nova-api.yaml
View File

@ -123,8 +123,6 @@ outputs:
tripleo.nova_api.firewall_rules: tripleo.nova_api.firewall_rules:
'113 nova_api': '113 nova_api':
dport: dport:
- 8773
- 3773
- 8774 - 8774
- 13774 - 13774
- 8775 - 8775

4
releasenotes/notes/remove-unused-nova-ports-a9f4d9b0ac3e21c9.yaml Normal file
View File

@ -0,0 +1,4 @@
---
fixes:
- Remove unused nova ports 3773 and 8773 from
being opened in iptables.