From f9b654475e9c2631024fcbb15a6d1041ea59a7f3 Mon Sep 17 00:00:00 2001 From: Seunghun Lee Date: Wed, 9 Oct 2024 16:12:45 +0100 Subject: [PATCH] Disable Seed firewalld when using OVS VMs can't have outbound connection with default SKC firewalld setup when a multinode uses OVS. Make default Seed firewalld state conditional to avoid having breaking change. --- etc/kayobe/environments/ci-multinode/seed.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/etc/kayobe/environments/ci-multinode/seed.yml b/etc/kayobe/environments/ci-multinode/seed.yml index e732258c1..630f9a849 100644 --- a/etc/kayobe/environments/ci-multinode/seed.yml +++ b/etc/kayobe/environments/ci-multinode/seed.yml @@ -32,7 +32,7 @@ snat_rules: "{{ snat_rules_default + snat_rules_manila if (kolla_enable_manila | # seed node firewalld configuration. # Whether to install and enable firewalld. -seed_firewalld_enabled: true +seed_firewalld_enabled: "{{ kolla_enable_ovn | bool }}" # A list of zones to create. Each item is a dict containing a 'zone' item. seed_firewalld_zones: "{{ stackhpc_firewalld_zones }}"