openstack
/
tripleo-ipsec
Code Issues Proposed changes

Only do force listen on pacemaker nodes 

Only the nodes that run pacemaker (and the VIPs) should do whack
--listen. This is not something the computes should do as it will
restart the SAs.

Change-Id: Id295d18fe8caec3446f57bf9a99ccd301f8d2728
This commit is contained in:
Juan Antonio Osorio Robles 2017-12-04 11:11:43 +02:00
parent 34ea5a38c1
commit dd26777ae4
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
handlers/main.yml
View File

@ -16,3 +16,5 @@
- name: Listen for IPSEC connections
shell: ipsec whack --listen
become: yes
when:
- inventory_hostname in groups['pacemaker']