From 00c8714ccd0ad6d7e932b4a2ad18ffd7bde2e288 Mon Sep 17 00:00:00 2001 From: Takashi Kajinami Date: Wed, 17 Jan 2024 02:56:31 +0900 Subject: [PATCH] healthcheck: Expose allowed_source_ranges ... which was added to puppet-oslo recently. Depends-on: https://review.opendev.org/905557 Change-Id: I1c02af63f31696be7cd9fbd859c81f9f0a919416 --- manifests/healthcheck.pp | 7 +++++++ ...healthcheck-allowed_source_ranges-9ddd09715e0a9c09.yaml | 5 +++++ spec/classes/glance_healthcheck_spec.rb | 3 +++ 3 files changed, 15 insertions(+) create mode 100644 releasenotes/notes/healthcheck-allowed_source_ranges-9ddd09715e0a9c09.yaml diff --git a/manifests/healthcheck.pp b/manifests/healthcheck.pp index f81e12b4..2b93a322 100644 --- a/manifests/healthcheck.pp +++ b/manifests/healthcheck.pp @@ -13,6 +13,11 @@ # that information back as part of a request. # Defaults to $facts['os_service_default'] # +# [*allowed_source_ranges*] +# (Optional) A list of network addresses to limit source ip allowed to access +# healthcheck information. +# Defaults to $facts['os_service_default'] +# # [*disable_by_file_path*] # (Optional) Check the presence of a file to determine if an application # is running on a port. @@ -26,6 +31,7 @@ class glance::healthcheck ( $detailed = $facts['os_service_default'], $backends = $facts['os_service_default'], + $allowed_source_ranges = $facts['os_service_default'], $disable_by_file_path = $facts['os_service_default'], $disable_by_file_paths = $facts['os_service_default'], ) { @@ -35,6 +41,7 @@ class glance::healthcheck ( oslo::healthcheck { 'glance_api_config': detailed => $detailed, backends => $backends, + allowed_source_ranges => $allowed_source_ranges, disable_by_file_path => $disable_by_file_path, disable_by_file_paths => $disable_by_file_paths, } diff --git a/releasenotes/notes/healthcheck-allowed_source_ranges-9ddd09715e0a9c09.yaml b/releasenotes/notes/healthcheck-allowed_source_ranges-9ddd09715e0a9c09.yaml new file mode 100644 index 00000000..bdfb283f --- /dev/null +++ b/releasenotes/notes/healthcheck-allowed_source_ranges-9ddd09715e0a9c09.yaml @@ -0,0 +1,5 @@ +--- +features: + - | + The new ``glance::healthcheck::allowed_source_ranges`` parameter has been + added. diff --git a/spec/classes/glance_healthcheck_spec.rb b/spec/classes/glance_healthcheck_spec.rb index bae6b4b0..5d44c1ba 100644 --- a/spec/classes/glance_healthcheck_spec.rb +++ b/spec/classes/glance_healthcheck_spec.rb @@ -13,6 +13,7 @@ describe 'glance::healthcheck' do is_expected.to contain_oslo__healthcheck('glance_api_config').with( :detailed => '', :backends => '', + :allowed_source_ranges => '', :disable_by_file_path => '', :disable_by_file_paths => '', ) @@ -24,6 +25,7 @@ describe 'glance::healthcheck' do { :detailed => true, :backends => ['disable_by_file'], + :allowed_source_ranges => ['10.0.0.0/24', '10.0.1.0/24'], :disable_by_file_path => '/etc/glance/healthcheck/disabled', :disable_by_file_paths => ['9292:/etc/glance/healthcheck/disabled'], } @@ -33,6 +35,7 @@ describe 'glance::healthcheck' do is_expected.to contain_oslo__healthcheck('glance_api_config').with( :detailed => true, :backends => ['disable_by_file'], + :allowed_source_ranges => ['10.0.0.0/24', '10.0.1.0/24'], :disable_by_file_path => '/etc/glance/healthcheck/disabled', :disable_by_file_paths => ['9292:/etc/glance/healthcheck/disabled'], )