diff options
author | Alexandru Avadanii <Alexandru.Avadanii@enea.com> | 2016-07-07 19:24:53 +0200 |
---|---|---|
committer | Alexandru Avadanii <Alexandru.Avadanii@enea.com> | 2016-07-07 19:36:06 +0200 |
commit | 8010c3b4bf4035dd167bca8656ad36f202e6ec6f (patch) | |
tree | d8e46224e5c9f1caabefde4f2484b7deacd082d5 /patches/opnfv-fuel/0026-f_repobuild-Repeat-mirror-build-up-to-ten-times.patch | |
parent | 3663b059c85cfa4961120731d76a6bef188f32be (diff) |
transplant.py: Allow SSH on all interfaces.
Previously (in Fuel 8.0), SSH used to listen only on 10.20.0.2
(admin interface), which required editing sshd_config and restarting
SSH server for allowing SSH connections over the public IP on eth1
(just an example, which corresponds to Armband PODs use cases).
In Fuel 9.0, SSH server on Fuel Master listens on all ifaces,
but connections are filtered by iptables.
This change piggy-backs on a previous Armband addition that allows
transplant.py script to configure additional interfaces (e.g. public).
In case additional interfaces have been configured by transplant,
this change will instruct iptables to accept SSH connections on ANY
interface, not only the admin one.
Possible improvements:
- limit SSH access to admin + interfaces added by transplant instead
of ANY;
Change-Id: I0923496e1b23f6dc826c8afbbe9805956c2d4b34
Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
Diffstat (limited to 'patches/opnfv-fuel/0026-f_repobuild-Repeat-mirror-build-up-to-ten-times.patch')
0 files changed, 0 insertions, 0 deletions