tripleo

  1. Bug #1826829
  2. Comment #10

Comment 10 for bug 1826829

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to puppet-tripleo (stable/rocky)

Reviewed: https://review.opendev.org/656244
Committed: https://git.openstack.org/cgit/openstack/puppet-tripleo/commit/?id=47034b224cd532c9b1d76f0aace0bdddbce9ea87
Submitter: Zuul
Branch: stable/rocky

commit 47034b224cd532c9b1d76f0aace0bdddbce9ea87
Author: Lars Kellogg-Stedman <email address hidden>
Date: Thu Jul 12 15:22:10 2018 -0400

    remove ssh from tripleo::firewall::pre

    including global ssh access in tripleo::firewall::pre makes it
    difficult for the operator to control ssh access to overcloud hosts.
    This removes the hardcoded rule and the accompanying change in t-h-t
    configures the default firewall rules via hiera config_settings.

    Depends-On: I89cff59947dda3f51482486c41a3d67c4aa36a3e
    Change-Id: I14b540e6564c5b7c5d54b4f1fd5368b000744135
    Related-Bug: #1826829
    (cherry picked from commit 9bdb8199cc394bd6283292a6964a089f012f2ae9)