Add ironic-inspector TLS endpoint port to be reachable

In BMaaS configs, such as where one may use an undercloud or a remote host,
one may use the legacy means of invoking introspection of a baremetal node,
which is to call the inspector API directly.

While ironic's API also supports this capability through a state change,
people still do it, and it is easy to miss on an undercloud as your typically
directly interacting with the software running locally. But when the API
endpoint is remote, you cannot connect to it if it is not permitted via the
firewall.

Change-Id: I28343f260a8b9b1d4515ccd7e9e621cddac448b3
This commit is contained in:
Julia Kreger 2022-01-11 14:32:51 -08:00
parent 966150e23d
commit d57f9a8778
2 changed files with 6 additions and 0 deletions

View File

@ -234,6 +234,7 @@ outputs:
'137 ironic-inspector':
dport:
- 5050
- 13050
'137 ironic-inspector dhcp input':
iniface: {get_param: IronicInspectorInterface}
ipversion: 'ipv4'

View File

@ -0,0 +1,5 @@
---
fixes:
- |
Adds the port used for directly accessing Ironic-Inspector using TLS,
13050, to the list of ports to permit inbound connections on.