diff options
| author |   Emilien Macchi <emilien@redhat.com> | 2016-10-06 11:18:14 -0400 |
|---|---|---|
| committer | Emilien Macchi <emilien@redhat.com> | 2016-10-06 12:07:35 -0400 |
| commit | 7322d60610764f728ce58d4e8a39a6c54c652643 (patch) | |
| tree | 0d58f2bc7b8b4e9328806c1d8ff6217b64ef409d /puppet/services/neutron-ovs-agent.yaml | |
| parent | ddd4d3cd9f5012b505c1ed2c4ee6a62dde37dbaf (diff) | |
Enable firewalling by default on compute nodes
- Move VXLAN and VRRP rules from Neutron Server to the right services.
- Enable Firewall by default on Compute nodes.
Change-Id: I99d172dcedaf6be297aad184cc51fe9f292a57e1
Diffstat (limited to 'puppet/services/neutron-ovs-agent.yaml')
| -rw-r--r-- | puppet/services/neutron-ovs-agent.yaml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/puppet/services/neutron-ovs-agent.yaml b/puppet/services/neutron-ovs-agent.yaml index cbe65638..cca0deee 100644 --- a/puppet/services/neutron-ovs-agent.yaml +++ b/puppet/services/neutron-ovs-agent.yaml @@ -117,5 +117,11 @@ outputs: # internal_api_subnet - > IP/CIDR neutron::agents::ml2::ovs::local_ip: {get_param: [ServiceNetMap, NeutronTenantNetwork]} neutron::agents::ml2::ovs::firewall_driver: {get_param: NeutronOVSFirewallDriver} + tripleo.neutron_ovs_agent.firewall_rules: + '118 neutron vxlan networks': + proto: 'udp' + dport: 4789 + '136 neutron gre networks': + proto: 'gre' step_config: | include ::tripleo::profile::base::neutron::ovs |