openstack
/
fuel-library
Code Issues Proposed changes

Allow access to keystone_port from anywhere. 

Change-Id: I24ca56c709c26e79a63521f265534219a6322a1c
Closes-Bug: #1521955
This commit is contained in:
Ivan Suzdal 2015-12-02 21:47:47 +03:00
parent 95eefeddc8
commit 916676b1e3
1 changed files with 9 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
deployment/puppet/nailgun/manifests/iptables.pp
View File

@ -13,6 +13,7 @@ $ntp_port = '123',
$rabbitmq_ports = ['4369','5672','15672','61613'],
$fuelweb_port = '8443',
$keystone_port = '5000',
$keystone_admin_port = '35357',
$chain = 'INPUT',
)
{
@ -204,23 +205,15 @@ $chain = 'INPUT',
chain => $chain,
port => $keystone_port,
proto => 'tcp',
action => 'accept'
}
firewall { '047 keystone_admin_port admin_net':
chain => $chain,
port => $keystone_admin_port,
proto => 'tcp',
iniface => $admin_iface,
action => 'accept'
}
firewall { '047 keystone_local':
chain => $chain,
port => $keystone_port,
proto => 'tcp',
src_type => 'LOCAL',
action => 'accept'
}
firewall { '048 keystone_block_ext':
chain => $chain,
port => $keystone_port,
proto => 'tcp',
action => 'reject'
action => 'accept',
}
firewall { '049 nailgun_repo_admin':