From ef130bf266b4d57071006778d3df03969330a7b7 Mon Sep 17 00:00:00 2001 From: Marc Gariepy Date: Wed, 29 Nov 2017 10:42:20 -0500 Subject: [PATCH] Only whitelist internal network for placement api Change-Id: I02345d23ac4b4085352033cac0b59bfd6b08ac44 --- playbooks/inventory/group_vars/haproxy_all/haproxy.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/playbooks/inventory/group_vars/haproxy_all/haproxy.yml b/playbooks/inventory/group_vars/haproxy_all/haproxy.yml index e4728dfdd5..e8c42b8383 100644 --- a/playbooks/inventory/group_vars/haproxy_all/haproxy.yml +++ b/playbooks/inventory/group_vars/haproxy_all/haproxy.yml @@ -31,6 +31,7 @@ haproxy_galera_whitelist_networks: "{{ haproxy_whitelist_networks }}" haproxy_glance_registry_whitelist_networks: "{{ haproxy_whitelist_networks }}" haproxy_keystone_admin_whitelist_networks: "{{ haproxy_whitelist_networks }}" haproxy_nova_metadata_whitelist_networks: "{{ haproxy_whitelist_networks }}" +haproxy_nova_placement_whitelist_networks: "{{ haproxy_whitelist_networks }}" haproxy_rabbitmq_management_whitelist_networks: "{{ haproxy_whitelist_networks }}" haproxy_repo_git_whitelist_networks: "{{ haproxy_whitelist_networks }}" haproxy_repo_cache_whitelist_networks: "{{ haproxy_whitelist_networks }}" @@ -179,6 +180,7 @@ haproxy_default_services: - "httpchk HEAD /" haproxy_backend_httpcheck_options: - "expect status 401" + haproxy_whitelist_networks: "{{ haproxy_nova_placement_whitelist_networks }}" - service: haproxy_service_name: nova_console haproxy_backend_nodes: "{{ groups['nova_console'] | default([]) }}"