commit 404d4d0a50f292b1fd6e916cf80813b260621840
Author: Paul Bourke <email address hidden>
Date: Thu Mar 8 12:55:05 2018 +0000
Use zuul firewall rules in gate
Till now we've been flusing iptables in the gates to allow cross node
communication in the multi node ceph jobs. This raised security
concerns, in particular it exposed memcached to the external net.
This patch uses the infra provided role 'multi-node-firewall' in order
to correctly configure iptables. Thanks to Jeremy Stanley and Jeffrey
for help with this.
Reviewed: https:/ /review. openstack. org/550821 /git.openstack. org/cgit/ openstack/ kolla-ansible/ commit/ ?id=404d4d0a50f 292b1fd6e916cf8 0813b260621840
Committed: https:/
Submitter: Zuul
Branch: master
commit 404d4d0a50f292b 1fd6e916cf80813 b260621840
Author: Paul Bourke <email address hidden>
Date: Thu Mar 8 12:55:05 2018 +0000
Use zuul firewall rules in gate
Till now we've been flusing iptables in the gates to allow cross node
communication in the multi node ceph jobs. This raised security
concerns, in particular it exposed memcached to the external net.
This patch uses the infra provided role 'multi- node-firewall' in order
to correctly configure iptables. Thanks to Jeremy Stanley and Jeffrey
for help with this.
Closes-Bug: #1749326 7b0f869969d0bd5 2fbde3791a0
Change-Id: Iafaf1cf1d9b022