diff options
| author |   Emilien Macchi <emilien@redhat.com> | 2016-10-06 11:18:14 -0400 |
|---|---|---|
| committer | Emilien Macchi <emilien@redhat.com> | 2016-10-06 12:07:35 -0400 |
| commit | 7322d60610764f728ce58d4e8a39a6c54c652643 (patch) | |
| tree | 0d58f2bc7b8b4e9328806c1d8ff6217b64ef409d /puppet/services/keepalived.yaml | |
| parent | ddd4d3cd9f5012b505c1ed2c4ee6a62dde37dbaf (diff) | |
Enable firewalling by default on compute nodes
- Move VXLAN and VRRP rules from Neutron Server to the right services.
- Enable Firewall by default on Compute nodes.
Change-Id: I99d172dcedaf6be297aad184cc51fe9f292a57e1
Diffstat (limited to 'puppet/services/keepalived.yaml')
| -rw-r--r-- | puppet/services/keepalived.yaml | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/puppet/services/keepalived.yaml b/puppet/services/keepalived.yaml index 2b069d67..38cfbe22 100644 --- a/puppet/services/keepalived.yaml +++ b/puppet/services/keepalived.yaml @@ -41,5 +41,8 @@ outputs: config_settings: tripleo::keepalived::control_virtual_interface: {get_param: ControlVirtualInterface} tripleo::keepalived::public_virtual_interface: {get_param: PublicVirtualInterface} + tripleo.keepalived.firewall_rules: + '106 keepalived vrrp': + proto: vrrp step_config: | include ::tripleo::profile::base::keepalived |