From 5195d7f8910f7d1ce0895caa133b028a727f8622 Mon Sep 17 00:00:00 2001 From: Dan Prince Date: Wed, 20 Jul 2016 10:48:23 -0400 Subject: Composable firewall rules Split out the firewall rules in puppet/hieradata/controller.yaml into the composable services Depends-On: Id370362ab57347b75b1ab25afda877885b047263 Change-Id: Icaecab100d3f278035fbbb3facb9bf6c62c76c03 --- puppet/services/keystone.yaml | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'puppet/services/keystone.yaml') diff --git a/puppet/services/keystone.yaml b/puppet/services/keystone.yaml index 83bab349..de920de3 100644 --- a/puppet/services/keystone.yaml +++ b/puppet/services/keystone.yaml @@ -136,5 +136,12 @@ outputs: keystone::wsgi::apache::workers: {get_param: KeystoneWorkers} # override via extraconfig: keystone::wsgi::apache::threads: 1 + tripleo.keystone.firewall_rules: + '111 keystone': + dport: + - 5000 + - 13000 + - 35357 + - 13357 step_config: | include ::tripleo::profile::base::keystone -- cgit 1.2.3-korg