Merge "Add haproxy firewall rules for galera and redis"

1 files changed, 18 insertions, 0 deletions

diff --git a/manifests/haproxy.pp b/manifests/haproxy.pp
index 2fa02c9..043e01e 100644
--- a/manifests/haproxy.pp
+++ b/manifests/haproxy.pp
@@ -1250,6 +1250,15 @@ class tripleo::haproxy (
       server_names      => hiera('mysql_node_names', $controller_hosts_names_real),
       options           => $mysql_member_options_real,
     }
+    if hiera('manage_firewall', true) {
+      include ::tripleo::firewall
+      $mysql_firewall_rules = {
+        '100 mysql_haproxy' => {
+          'dport' => 3306,
+        }
+      }
+      create_resources('tripleo::firewall::rule', $mysql_firewall_rules)
+    }
   }
 
   if $rabbitmq {
@@ -1326,6 +1335,15 @@ class tripleo::haproxy (
       server_names      => hiera('redis_node_names', $controller_hosts_names_real),
       options           => $haproxy_member_options,
     }
+    if hiera('manage_firewall', true) {
+      include ::tripleo::firewall
+      $redis_firewall_rules = {
+        '100 redis_haproxy' => {
+          'dport' => 6379,
+        }
+      }
+      create_resources('tripleo::firewall::rule', $redis_firewall_rules)
+    }
   }
 
   $midonet_cluster_vip = hiera('midonet_cluster_vip', $controller_virtual_ip)