From 4639514e29e08042b1c3d81d299f3645f945ede2 Mon Sep 17 00:00:00 2001
From: Jose David Martin Nieto <j.david.nieto@gmail.com>
Date: Tue, 16 Feb 2016 17:47:07 +0100
Subject: added node-secgroup to master_nodes

---
 playbooks/openstack/openshift-cluster/files/heat_stack.yaml | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

(limited to 'playbooks/openstack')

diff --git a/playbooks/openstack/openshift-cluster/files/heat_stack.yaml b/playbooks/openstack/openshift-cluster/files/heat_stack.yaml
index ac1612634..af774aa32 100644
--- a/playbooks/openstack/openshift-cluster/files/heat_stack.yaml
+++ b/playbooks/openstack/openshift-cluster/files/heat_stack.yaml
@@ -345,17 +345,17 @@ resources:
           port_range_min: 22
           port_range_max: 22
           remote_ip_prefix: { get_param: ssh_incoming }
-        - direction: ingress
-          protocol: udp
-          port_range_min: 4789
-          port_range_max: 4789
-          remote_mode: remote_group_id
         - direction: ingress
           protocol: tcp
           port_range_min: 10250
           port_range_max: 10250
           remote_mode: remote_group_id
           remote_group_id: { get_resource: master-secgrp }
+        - direction: ingress
+          protocol: udp
+          port_range_min: 4789
+          port_range_max: 4789
+          remote_mode: remote_group_id
 
   infra-secgrp:
     type: OS::Neutron::SecurityGroup
@@ -473,6 +473,7 @@ resources:
           subnet:      { get_resource: subnet }
           secgrp:
             - { get_resource: master-secgrp }
+            - { get_resource: node-secgrp }
           floating_network: { get_param: external_net }
           net_name:
             str_replace:
-- 
cgit v1.2.3