Code Review / ta / infra-ansible.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 95119f5) | patch
Add policy based routing to `caas_oam` network 44/1744/7
authorKrisztian Lengyel <krisztian.lengyel@nokia.com>
Mon, 7 Oct 2019 15:56:49 +0000 (17:56 +0200)
committerKrisztian Lengyel <krisztian.lengyel@nokia.com>
Thu, 17 Oct 2019 13:07:07 +0000 (15:07 +0200)
commit05483a058fcc2c8a92890793a75f5b9bbbdc8daa
tree9128199b495ecc113a2a614d7a778b40470a98f9tree | snapshot
parent95119f5474d6d585b173fdffcb922d3b2a8c7ac9commit | diff
Add policy based routing to `caas_oam` network

For`caas_oam` network traffic routed only to the gateway (if specified).
This will enable cluster external IP connection for pods using this
network, and also closes a loophole, which allowed external connectivity
for these pods on master nodes.
If no gateway specified for `caas_oam` network, then the subnet's first
IP address is assumed.

Change-Id: I85fe01fce55b2da18fc80909d189a778e8c8b7c8
Signed-off-by: Krisztian Lengyel <krisztian.lengyel@nokia.com>
roles/baremetal_interface_config/defaults/main.yml diff | blob | history
roles/baremetal_interface_config/templates/os_net_config.j2 diff | blob | history
This repository contains all the generic deployment playbooks, which configure services running directly on the host. Includes playbooks for disk partitioning, Ceph configuration, hardening, security, SSH, operating system level user management etc.