c04c9b0d70
Previously access to the sshd running by the nova-migration-target container is only limited via the sshd_config. While login is not possible from other networks, the service is reachable via all networks. This change limits the access to the NovaLibvirt and NovaApi networks which are used for cold and live-migration. Change-Id: Ie868463143af66c7004dbcacefde76ca0977880e
9 lines
357 B
YAML
9 lines
357 B
YAML
---
|
|
fixes:
|
|
- |
|
|
Previously access to the sshd running by the nova-migration-target
|
|
container is only limited via the sshd_config. While login is
|
|
not possible from other networks, the service is reachable via
|
|
all networks. This change limits the access to the NovaLibvirt
|
|
and NovaApi networks which are used for cold and live-migration.
|