52a829d180
Docker and kubernetes add rules to iptables, which can end up persisted in /etc/sysconfig/iptables by calls to iptables-save. When the puppet manifest is applied during node initialization, kubernetes is not yet running, and any related iptables rules will fail. This update disables the restoration of iptables rules from previous boots, to ensure the puppet manifest does not fail to apply due to invalid rules. However, this means that in a DOR scenario (Dead Office Recovery, where both controllers will be intializing at the same time), the firewall rules will not get reapplied. Firewall management will be moved to Calico under story 2005066, at which point this code will be removed. Change-Id: I43369dba34e6859088af3794de25a68571c7154c Closes-Bug: 1815124 Signed-off-by: Don Penney <don.penney@windriver.com> |
||
---|---|---|
api-ref/source | ||
config-gate | ||
configutilities | ||
controllerconfig | ||
devstack | ||
doc | ||
kubernetes | ||
playbooks/tox-puppet-lint | ||
puppet-manifests | ||
puppet-modules-wrs | ||
releasenotes | ||
storageconfig | ||
sysinv | ||
tmp/patch-scripts/EXAMPLE_SYSINV/scripts | ||
worker-utils | ||
workerconfig | ||
.gitignore | ||
.gitreview | ||
.yamllint | ||
.zuul.yaml | ||
CONTRIBUTORS.wrs | ||
LICENSE | ||
README.rst | ||
centos_helm.inc | ||
centos_iso_image.inc | ||
centos_pike_wheels.inc | ||
centos_pkg_dirs | ||
centos_pkg_dirs_containers | ||
test-requirements.txt | ||
tox.ini |
README.rst
stx-config
StarlingX Configuration Management