openstack/openstack-ansible
Code Issues Proposed changes

Only whitelist internal network for placement api

Browse Source 
Change-Id: I02345d23ac4b4085352033cac0b59bfd6b08ac44
This commit is contained in:
Marc Gariepy 2017-11-29 10:42:20 -05:00
parent 0fa1d218d9
commit ef130bf266
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
playbooks/inventory/group_vars/haproxy_all/haproxy.yml
View File

@ -31,6 +31,7 @@ haproxy_galera_whitelist_networks: "{{ haproxy_whitelist_networks }}"
haproxy_glance_registry_whitelist_networks: "{{ haproxy_whitelist_networks }}"
haproxy_keystone_admin_whitelist_networks: "{{ haproxy_whitelist_networks }}"
haproxy_nova_metadata_whitelist_networks: "{{ haproxy_whitelist_networks }}"
haproxy_nova_placement_whitelist_networks: "{{ haproxy_whitelist_networks }}"
haproxy_rabbitmq_management_whitelist_networks: "{{ haproxy_whitelist_networks }}"
haproxy_repo_git_whitelist_networks: "{{ haproxy_whitelist_networks }}"
haproxy_repo_cache_whitelist_networks: "{{ haproxy_whitelist_networks }}"
@ -179,6 +180,7 @@ haproxy_default_services:
- "httpchk HEAD /"
haproxy_backend_httpcheck_options:
- "expect status 401"
haproxy_whitelist_networks: "{{ haproxy_nova_placement_whitelist_networks }}"
- service:
haproxy_service_name: nova_console
haproxy_backend_nodes: "{{ groups['nova_console'] | default([]) }}"