Merge "implement default ssh-from-ctlplane rule via hiera"

2019-01-16 22:33:15 +00:00 · 2019-01-16 22:33:15 +00:00 · 4f9653cbdd
parent 4d0ea9e119 a433e05e66
commit 4f9653cbdd
1 changed files with 6 additions and 0 deletions
--- a/deployment/tripleo-firewall/tripleo-firewall-baremetal-puppet.yaml
+++ b/deployment/tripleo-firewall/tripleo-firewall-baremetal-puppet.yaml
@ -47,6 +47,12 @@ outputs:
      config_settings:
        tripleo::firewall::manage_firewall: {get_param: ManageFirewall}
        tripleo::firewall::purge_firewall_rules: {get_param: PurgeFirewallRules}
+        tripleo::tripleo_firewall::firewall_rules:
+          '003 accept ssh from controlplane':
+            source: "%{hiera('ctlplane_subnet')}"
+            proto: 'tcp'
+            dport: 22
+
      step_config: |
        include ::tripleo::firewall
      upgrade_tasks: