From 9048c8c09bfb652d4d50775a91f650ad2236d342 Mon Sep 17 00:00:00 2001 From: Will Szumski Date: Fri, 28 Sep 2018 09:39:40 +0100 Subject: [PATCH] Use pxe_filter instead of deprecated manage_firewall manage_firewall has been deprecated in favor of pxe_filter: https://github.com/openstack/ironic-inspector/commit/7b2758546376394777c7d36c8f5bb62ff7ef3830#diff-73313fdfbb51553077f2322499ad8b66R349 In addition the firewall section has been renamed to iptables: https://github.com/openstack/ironic-inspector/commit/7b2758546376394777c7d36c8f5bb62ff7ef3830 This seems to affect both queens and rocky. Change-Id: I439515441f0931c09b3d706613d0f721e8b50b6d --- .../kolla-openstack/templates/ironic-inspector.conf.j2 | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/ansible/roles/kolla-openstack/templates/ironic-inspector.conf.j2 b/ansible/roles/kolla-openstack/templates/ironic-inspector.conf.j2 index 372143a0b..da48d2542 100644 --- a/ansible/roles/kolla-openstack/templates/ironic-inspector.conf.j2 +++ b/ansible/roles/kolla-openstack/templates/ironic-inspector.conf.j2 @@ -1,8 +1,9 @@ [DEFAULT] -[firewall] -# Whether inspector should manage the firewall. -manage_firewall = {{ kolla_inspector_manage_firewall }} +[pxe_filter] +# The filter ironic inspector will use to prevent nodes from undergoing +# inspection unless explicitly requested. +driver = {{ 'iptables' if kolla_inspector_manage_firewall else 'noop' }} [processing] {% if kolla_inspector_processing_hooks %}