diff options
| author |   Alexandru Avadanii <Alexandru.Avadanii@enea.com> | 2018-01-02 05:36:07 +0100 |
|---|---|---|
| committer | Alexandru Avadanii <Alexandru.Avadanii@enea.com> | 2018-01-03 01:16:02 +0100 |
| commit | 9a6e655e0b851ff6e449027c01ac1a66188b0064 (patch) | |
| tree | 96c24dd1bd1894411267651ded0c561046d41ad2 /mcp/config/states | |
| parent | 68859c38817fcf5993054796e75d8231f98ed3bb (diff) | |
[baremetal] Retire mas01 NAT
Isolate networks by retiring NAT on mas01; also cutting direct
internet access from cluster nodes that are not facing the public
network (prx, cmp).
NOTE: Since we are removing mas01 NAT, VCP VMs (except prx which have
public IPs) and kvm nodes (cmp also have public IPs) will no longer
have direct internet connectivity.
Cluster deployment and operations will work without it, but if it is
required for different reasons, the MaaS proxy could be enabled by
uncommenting the /etc/enviroment section in:
- cluster.baremetal-mcp-pike-common-ha.include.proxy.yml
JIRA: FUEL-317
Change-Id: I5ed8b420296b27df34a54ec1ebd7b7cf58041425
Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
Diffstat (limited to 'mcp/config/states')
| -rwxr-xr-x | mcp/config/states/maas | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/mcp/config/states/maas b/mcp/config/states/maas index 2062cbabb..02afd2c6a 100755 --- a/mcp/config/states/maas +++ b/mcp/config/states/maas @@ -68,7 +68,6 @@ fi # MaaS rack/region controller, node commissioning salt -C 'mas01*' state.apply linux,salt,openssh,ntp -salt -C 'mas01*' state.apply maas.pxe_nat salt -C 'mas01*' state.apply maas.cluster wait_for 10 "salt -C 'mas01*' state.apply maas.region" |