Remove the iptables rules set via service_config_settings
This breaks the rules for the haproxy stats access because it shadows them. Let's remove these rules and move the iptables rules for haproxy in puppet-tripleo where they should have been in the first place, like for all other services. NB: Cherry pick is clean but had to be moved to puppet/services/horizon.yaml instead of the docker/services/horizon.yaml Depends-On: I1325171ef60d7a7e3b57373082fcdb5487be939b Change-Id: I2f177c930567b3a45f0d95cec4140f478f14a074 Closes-Bug: #1829338 (cherry picked from commit114e5778f9
) (cherry picked from commit6b4f03f9ea
)
This commit is contained in:
parent
8e13d5778e
commit
ff10e2f6b9
|
@ -170,11 +170,5 @@ outputs:
|
|||
- httpd_enabled.rc == 0
|
||||
service: name=httpd state=stopped
|
||||
service_config_settings:
|
||||
haproxy:
|
||||
tripleo.haproxy.firewall_rules:
|
||||
'127 horizon':
|
||||
dport:
|
||||
- 80
|
||||
- 443
|
||||
keystone:
|
||||
keystone_enable_member: true
|
||||
|
|
Loading…
Reference in New Issue