summaryrefslogtreecommitdiffstats
path: root/playbooks/provisioning/openstack/sample-inventory
diff options
context:
space:
mode:
authorBogdan Dobrelya <bdobreli@redhat.com>2017-06-05 16:41:09 +0200
committerTomas Sedovic <tomas@sedovic.cz>2017-06-15 12:35:09 +0200
commit4bb2f005bc6cdeb8e656c2b42ac54db8fbd67fb9 (patch)
tree16b87eb066daad457104ebc5f65bf57ff5781870 /playbooks/provisioning/openstack/sample-inventory
parenta7300e6b7ace3098aa05794d4ac2f9e5a4cef64a (diff)
downloadopenshift-4bb2f005bc6cdeb8e656c2b42ac54db8fbd67fb9.tar.gz
openshift-4bb2f005bc6cdeb8e656c2b42ac54db8fbd67fb9.tar.bz2
openshift-4bb2f005bc6cdeb8e656c2b42ac54db8fbd67fb9.tar.xz
openshift-4bb2f005bc6cdeb8e656c2b42ac54db8fbd67fb9.zip
Add a flat sec group for openstack provider
Add a openstack_flat_secgroup, defaults to False. When set, merges sec rules for master, node, etcd, infra nodes into a single group. Less secure, but might help to mitigate quota limitations. Update docs. Use timeout 30s to mitigate the error: Timeout (12s) waiting for privilege escalation prompt. Signed-off-by: Bogdan Dobrelya <bdobreli@redhat.com>
Diffstat (limited to 'playbooks/provisioning/openstack/sample-inventory')
-rw-r--r--playbooks/provisioning/openstack/sample-inventory/group_vars/all.yml3
1 files changed, 3 insertions, 0 deletions
diff --git a/playbooks/provisioning/openstack/sample-inventory/group_vars/all.yml b/playbooks/provisioning/openstack/sample-inventory/group_vars/all.yml
index 50aaa573d..3eb0f9f80 100644
--- a/playbooks/provisioning/openstack/sample-inventory/group_vars/all.yml
+++ b/playbooks/provisioning/openstack/sample-inventory/group_vars/all.yml
@@ -37,3 +37,6 @@ openstack_subnet_prefix: "192.168.99"
# NOTE(shadower): Do not change this value. The Ansible user is currently
# hardcoded to `openshift`.
ansible_user: openshift
+
+# Use a single security group for a cluster
+openstack_flat_secgroup: false