libvirt_manager extra nets - firewall zone #2492
Conversation
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
Thanks for the PR! ❤️ |
hjensas
force-pushed
the
libvirt_manager/extend_add_firwall_zone_extra_net_conf
branch
4 times, most recently
from
45ab321
to
16c0a1a
Compare
|
Build failed (check pipeline). Post https://softwarefactory-project.io/zuul/t/rdoproject.org/buildset/499f66d255764eb2921bbbe4c2a482e5 ✔️ openstack-k8s-operators-content-provider SUCCESS in 1h 36m 50s |
hjensas
force-pushed
the
libvirt_manager/extend_add_firwall_zone_extra_net_conf
branch
3 times, most recently
from
b0512ab
to
87c2347
Compare
Add support in the libvirt_manager role to overload the nmstate
config passed in cifmw_libvirt_manager_extra_network_configuration
with a firewall zone hint using key name `cifmw_firewall_zone` for
an interface in the nmstate `interfaces` section.
Example:
cifmw_libvirt_manager_extra_network_configuration:
interfaces:
- name: vlan10
cifmw_firewall_zone: libvirt
type: vlan
...
The key is filtered before passing the data to the ci_nmstate role.
When defined a task following the task calling ci_nmstate will run the
appropriate firewall-cmd to change the zone for the interfaces.
Jira: OSPRH-10966
hjensas
force-pushed
the
libvirt_manager/extend_add_firwall_zone_extra_net_conf
branch
from
87c2347
to
43c2893
Compare
Add support in the libvirt_manager role to overload the nmstate config passed in
cifmw_libvirt_manager_extra_network_configurationwith a firewall zone hint using key namecifmw_firewall_zonefor an interface in the nmstate interfaces section.Example:
The key is filtered before passing the data to the ci_nmstate role.
When defined a task following the task calling ci_nmstate will run the appropriate firewall-cmd to change the zone for the interfaces.
Jira: OSPRH-10966