openstack
/
fuel-library
Code Issues Proposed changes

Merge "Add nova vnc firewall rule for compute nodes"

This commit is contained in:
Jenkins 2015-12-30 11:42:14 +00:00 committed by Gerrit Code Review
parent 1989aa805d bb44e7113f
commit c5637dd157
2 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
deployment/puppet/osnailyfacter/modular/firewall/firewall.pp
View File

@ -342,6 +342,13 @@ if member($roles, 'primary-controller') or member($roles, 'controller') {
if member($roles, 'compute') {
openstack::firewall::multi_net {'105 nova vnc':
port => $nova_api_vnc_ports,
proto => 'tcp',
action => 'accept',
source_nets => $nova_networks,
}
openstack::firewall::multi_net {'118 libvirt':
port => $libvirt_port,
proto => 'tcp',

11
tests/noop/spec/hosts/firewall/firewall_spec.rb
View File

@ -126,6 +126,17 @@ describe manifest do
)
end
elsif Noop.puppet_function 'member', roles, 'compute'
it 'should accept connections to nova without ssl' do
management_nets.each do |source|
should contain_firewall("105 nova vnc from #{source}").with(
'port' => [ '5900-6100' ],
'proto' => 'tcp',
'action' => 'accept',
'source' => source,
)
end
end
it 'should accept connections to libvirt' do
management_nets.each do |source|
should contain_firewall("118 libvirt from #{source}").with(