openstack/tripleo-image-elements
Code Issues Proposed changes

Update iptables to support variable Horizon port

Browse Source 
When SSL is enabled, iptables must allow traffic on port
443 for HTTPS access to the Horizon UI.

When SSL is disabled, iptables should continue to open
port 80 for traditional HTTP access.

Implementation depends on Iec475a6c245a5bfe8b1d63ff72b6d0299861615c

Change-Id: I0593597beb616af2d4949a1b28307a9e1a5eebbe
This commit is contained in:
Jonathan Brownell
2014-12-22 06:52:26 -08:00
parent 5000a1dcf1
commit dd2bf0518b
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
elements/horizon/os-refresh-config/pre-configure.d/97-horizon-fedora-iptables
View File

@@ -1,4 +1,5 @@
#!/bin/bash
set -eu
add-rule INPUT -p tcp --dport 80 -j ACCEPT
# Open the appropriate port for Horizon depending on its configuration (i.e. 80 vs 443)
add-rule INPUT -p tcp --dport $(os-apply-config --key 'horizon.port' --type int --key-default 80) -j ACCEPT