The current LBaaS is not reachable at port 443 and the k8s API server
is not reachable at port 6443 by the VIP of the LBaaS.
This commit fixes the issue by creating a security group rule to allow
tcp traffic to reach the LBaaS and adding a security group allowing
tcp traffic from the service subnet to the port used by the overcloud VM.
Reviewed: https:/ /review. openstack. org/609904 /git.openstack. org/cgit/ openstack/ kuryr-kubernete s/commit/ ?id=593e5a06b32 93759e105441162 aa9e4a4ac6b25a
Committed: https:/
Submitter: Zuul
Branch: master
commit 593e5a06b329375 9e105441162aa9e 4a4ac6b25a
Author: maysa macedo <email address hidden>
Date: Thu Oct 11 23:21:32 2018 -0300
Fix k8s API server access on Nested deployment
The current LBaaS is not reachable at port 443 and the k8s API server
is not reachable at port 6443 by the VIP of the LBaaS.
This commit fixes the issue by creating a security group rule to allow
tcp traffic to reach the LBaaS and adding a security group allowing
tcp traffic from the service subnet to the port used by the overcloud VM.
Change-Id: I7ec087ad86f449 1ed1678cdba13e3 c19edb1568c
Closes-Bug: #1792488