26c108b174
Openshift-ansible already sets the right firewall rules on the provisioned nodes, there is no need to set up (some of) the rules by ourselves. Add the 'OS::TripleO::Services::TripleoFirewall' to all the OpenShift roles so that the operator can still set additional rules if desired. Change-Id: I1e8ca10069c3f1017207abfebb803cb7aa3835a8
62 lines
1.8 KiB
YAML
62 lines
1.8 KiB
YAML
heat_template_version: rocky
|
|
|
|
description: External tasks definition for OpenShift
|
|
|
|
parameters:
|
|
RoleNetIpMap:
|
|
default: {}
|
|
type: json
|
|
ServiceData:
|
|
default: {}
|
|
description: Dictionary packing service data
|
|
type: json
|
|
ServiceNetMap:
|
|
default: {}
|
|
description: Mapping of service_name -> network name. Typically set
|
|
via parameter_defaults in the resource registry. This
|
|
mapping overrides those in ServiceNetMapDefaults.
|
|
type: json
|
|
DefaultPasswords:
|
|
default: {}
|
|
type: json
|
|
RoleName:
|
|
default: ''
|
|
description: Role name on which the service is applied
|
|
type: string
|
|
RoleParameters:
|
|
default: {}
|
|
description: Parameters specific to the role
|
|
type: json
|
|
EndpointMap:
|
|
default: {}
|
|
description: Mapping of service endpoint -> protocol. Typically set
|
|
via parameter_defaults in the resource registry.
|
|
type: json
|
|
# TODO(mandre) This is unused. Remove it or make it OpenShiftNodeVars
|
|
OpenShiftWorkerNodeVars:
|
|
default: {}
|
|
description: OpenShift node vars specific for the worker nodes
|
|
type: json
|
|
|
|
resources:
|
|
|
|
OpenShiftNode:
|
|
type: ./openshift-node.yaml
|
|
properties:
|
|
EndpointMap: {get_param: EndpointMap}
|
|
ServiceNetMap: {get_param: ServiceNetMap}
|
|
DefaultPasswords: {get_param: DefaultPasswords}
|
|
RoleName: {get_param: RoleName}
|
|
RoleParameters: {get_param: RoleParameters}
|
|
|
|
outputs:
|
|
role_data:
|
|
description: Role data for the Openshift Service
|
|
value:
|
|
service_name: openshift_worker
|
|
config_settings: {get_attr: [OpenShiftNode, role_data, config_settings]}
|
|
upgrade_tasks: []
|
|
step_config: ''
|
|
external_deploy_tasks:
|
|
- get_attr: [OpenShiftNode, role_data, external_deploy_tasks]
|