Firewall rules should be managed by Puppet, which will purge current
firewall ruleset and replace it by the one provided by a corresponding
manifest.
We need to move rules introduced by product.sh to separate user-defined
chains which are not purged by Puppet so they will be retained after the
manifest gets applied.
Reviewed: https:/ /review. openstack. org/299811 /git.openstack. org/cgit/ openstack/ fuel-virtualbox /commit/ ?id=3b40e0c2848 4b938b9958d72c9 36a95cbdf2e97e
Committed: https:/
Submitter: Jenkins
Branch: master
commit 3b40e0c28484b93 8b9958d72c936a9 5cbdf2e97e
Author: Dmitry Bilunov <email address hidden>
Date: Thu Mar 31 11:46:40 2016 +0300
Move iptables rules to user-defined chains
Firewall rules should be managed by Puppet, which will purge current
firewall ruleset and replace it by the one provided by a corresponding
manifest.
We need to move rules introduced by product.sh to separate user-defined
chains which are not purged by Puppet so they will be retained after the
manifest gets applied.
Change-Id: I57e9f58c6bad32 b23b179499f0514 edf5357bd31
Partial-Bug: #1524750