tripleo-heat-templates/docker/services/pacemaker
Emilien Macchi ca041e2c41 haproxy: deploy IPtables rules from the host
Calling iptables CLI in the container requires advanced and risky
bind-mounts, and on certain platform, iptables-save can't be found (e.g.
fedora28 containers).

This patch simplifies the firewall step for HAproxy container
configuration where we now run Puppet on the host instead of from the
container.

Note: we can't use the puppet module in Ansible yet because we need
Ansible 2.7.6 which has:
8606fb33f0
In the meantime, we use shell.


Co-Authored-By: Damien Ciabrini <dciabrin@redhat.com>
Co-Authored-By: Emilien Macchi <emilien@redhat.com>
Co-Authored-By: Cédric Jeanneret <cjeanner@redhat.com>

Change-Id: Ia66db8e4ab0ccec7cc86665e2ad32d2861fe30c8
2019-01-24 16:14:15 -05:00
..
database Ensure logs folder is created in prep hosts tasks. 2019-01-18 09:28:56 +01:00
clustercheck.yaml upgrade: remove Docker containers now managed by Podman 2018-11-27 00:20:31 +00:00
haproxy.yaml haproxy: deploy IPtables rules from the host 2019-01-24 16:14:15 -05:00
manila-share.yaml Use net=none for *_init_log(s) containers 2019-01-21 13:43:07 +05:30
notify-rabbitmq.yaml Ensure logs folder is created in prep hosts tasks. 2019-01-18 09:28:56 +01:00
ovn-dbs.yaml Ensure logs folder is created in prep hosts tasks. 2019-01-18 09:28:56 +01:00
rabbitmq.yaml Ensure logs folder is created in prep hosts tasks. 2019-01-18 09:28:56 +01:00
rpc-rabbitmq.yaml Ensure logs folder is created in prep hosts tasks. 2019-01-18 09:28:56 +01:00