openstack
/
puppet-tripleo
Code Issues Proposed changes
RETIRED, Lightweight composition layer for Puppet TripleO
1,887 Commits 3 Branches 39 Tags 63 MiB
Go to file
Emilien Macchi 65f3714164 firewall: don't reload IPtables after cleanup 
This patch stops the IPtables reload when doing Neutron rules cleanup.

Full context:
puppetlabs-firewall only manages the current state of iptables
rules and writes out the rules to a file to ensure they are
persisted. We are specifically running the following commands after the
iptables rules to ensure the persisted file does not contain any
ephemeral neutron rules. Neutron assumes the iptables rules are not
persisted so it may cause an issue if the rule is loaded on boot
(or via iptables restart). If an operator needs to reload iptables
for any reason, they may need to manually reload the appropriate
neutron agent to restore these iptables rules.

rhbz#1541528
Related-Bug: #1747960
Change-Id: I1ab3a52306b91baadb70d2210a378417087f1ecf
 		2018-03-13 13:00:29 +00:00
doc Follow the new PTI for document build 2018-02-28 14:42:12 +08:00
files Add support for libvirt VNC TLS with option of a dedicated CA 2018-02-14 10:23:26 +00:00
lib Avoid hard-coded settings in Cinder HA containers 2018-02-13 11:53:24 -05:00
manifests firewall: don't reload IPtables after cleanup 2018-03-13 13:00:29 +00:00
releasenotes Disallow TLS v1.0 from HAProxy 2018-03-12 15:39:09 +00:00
spec Merge "Add tests for tripleo::keepalived" 2018-03-08 03:57:13 +00:00
templates hw ovs offload - On some machines representor ports not created after reboot 2018-01-29 11:32:24 +00:00
zuul.d Zuul: Remove project name 2018-01-31 16:51:36 -08:00
.gitignore Update gitignore not to exclude fixture hieradata 2017-05-17 14:45:35 -06:00
.gitreview Update .gitreview file for project rename 2015-06-12 23:12:30 +00:00
.sync.yml Initial msync run for all Puppet OpenStack modules 2015-08-18 14:30:54 +02:00
Gemfile Load puppet-openstack_spec_helper locally during tests 2018-02-12 10:53:40 +08:00
LICENSE Add basic structure for a Puppet module 2015-02-02 11:39:21 -05:00
Puppetfile_extras Pin puppet-systemd 2018-03-12 09:37:03 -06:00
README.md Update the doc link 2017-12-16 02:49:05 +00:00
Rakefile Composable HA 2017-01-25 19:32:31 +00:00
bindep.txt Add Puppet package to bindep, for module build 2017-10-27 13:50:15 -07:00
metadata.json Prep puppet-tripleo metadata for Queens rc1 2018-02-19 13:21:19 -07:00
setup.cfg Fixes license to explicitly be Apache 2.0 2017-10-09 11:06:29 -04:00
setup.py chmod +x setup.py 2017-10-06 12:28:56 -07:00
tox.ini Follow the new PTI for document build 2018-02-28 14:42:12 +08:00

README.md

Team and repository tags

Team and repository tags

puppet-tripleo

Lightweight composition layer for Puppet TripleO.

Contributing