diff options
| author | Adam Williamson <awilliam@redhat.com> | 2017-09-09 11:40:23 -0700 |
|---|---|---|
| committer | Adam Williamson <awilliam@redhat.com> | 2017-09-09 11:40:23 -0700 |
| commit | 07975eb7e9a31a964feb86dc39d2dfd548084759 (patch) | |
| tree | 17bf9911dc67d6e70c659200bb9f40539d37c59d /inventory | |
| parent | cac1fb41ab9eedc3e41ba718dea6114f2ef12d39 (diff) | |
| download | ansible-07975eb7e9a31a964feb86dc39d2dfd548084759.tar.gz ansible-07975eb7e9a31a964feb86dc39d2dfd548084759.tar.xz ansible-07975eb7e9a31a964feb86dc39d2dfd548084759.zip | |
openqa tap: handle eth2 in the custom firewall rules too
Signed-off-by: Adam Williamson <awilliam@redhat.com>
Diffstat (limited to 'inventory')
| -rw-r--r-- | inventory/group_vars/openqa-tap-workers | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/inventory/group_vars/openqa-tap-workers b/inventory/group_vars/openqa-tap-workers index 3fd28770b..571b6a62c 100644 --- a/inventory/group_vars/openqa-tap-workers +++ b/inventory/group_vars/openqa-tap-workers @@ -5,14 +5,16 @@ openqa_tap: true host_group: openqa-tap-workers # firewall rules to allow openQA openvswitch guests to communicate +# eth0 for x86_64 worker hosts, eth2 for ppc64 worker host custom_rules: [ '-A FORWARD -i br0 -j ACCEPT', '-A FORWARD -m state -i eth0 -o br0 --state RELATED,ESTABLISHED -j ACCEPT', + '-A FORWARD -m state -i eth2 -o br0 --state RELATED,ESTABLISHED -j ACCEPT', '-A INPUT -i br0 -j ACCEPT' ] # we do stuff with ifcfg that base doesn't understand. terrible, terrible # stuff. seriously - it doesn't handle the openvswitch config well. so -# let's tell it to just configure eth0 for us and leave everything else -# alone. -ansible_ifcfg_whitelist: ['eth0'] +# let's tell it to just configure eth0 (and eth2, for ppc64) for us and +# leave everything else alone. +ansible_ifcfg_whitelist: ['eth0', 'eth2'] |