diff options
| author | Jenkins <jenkins@review.openstack.org> | 2015-10-06 05:20:36 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2015-10-06 05:20:36 +0000 |
| commit | 719740ade8b79f44ca80fff09decedee4bd252d7 (patch) | |
| tree | e637111c1c6be492500d23ed0d678be8b34f86bb | |
| parent | 94162bd08f40ec742a7bfcdcd4aac45be5bd5618 (diff) | |
| parent | 0700100d826eb776c08a93594b669b998d2f0e3d (diff) | |
| download | kolla-719740ade8b79f44ca80fff09decedee4bd252d7.tar.gz kolla-719740ade8b79f44ca80fff09decedee4bd252d7.zip | |
Merge "Set sysctl values"
| -rw-r--r-- | ansible/roles/neutron/tasks/config.yml | 11 | ||||
| -rw-r--r-- | ansible/roles/nova/tasks/config.yml | 14 |
2 files changed, 25 insertions, 0 deletions
diff --git a/ansible/roles/neutron/tasks/config.yml b/ansible/roles/neutron/tasks/config.yml index e7cc7b191..258f7d383 100644 --- a/ansible/roles/neutron/tasks/config.yml +++ b/ansible/roles/neutron/tasks/config.yml @@ -1,4 +1,15 @@ --- +- name: Allowing IP forwarding on network node + sysctl: name="net.ipv4.ip_forward" value=1 sysctl_set=yes + when: inventory_hostname in groups['neutron-agents'] + +- name: Disabling reverse path filter on network node + sysctl: name="net.ipv4.{{ item }}.rp_filter" value=0 sysctl_set=yes + with_items: + - "all" + - "default" + when: inventory_hostname in groups['neutron-agents'] + - include: ../../config.yml vars: service_name: "neutron-server" diff --git a/ansible/roles/nova/tasks/config.yml b/ansible/roles/nova/tasks/config.yml index 0ba4ad34b..f5b256151 100644 --- a/ansible/roles/nova/tasks/config.yml +++ b/ansible/roles/nova/tasks/config.yml @@ -1,4 +1,18 @@ --- +- name: Disabling netfilter for bridges + sysctl: name="net.ipv4.bridge-nf-call-{{ item }}" value=1 sysctl_set=yes + with_items: + - "iptables" + - "ip6tables" + when: inventory_hostname in groups['compute'] + +- name: Disabling reverse path filter on compute node + sysctl: name="net.ipv4.{{ item }}.rp_filter" value=0 sysctl_set=yes + with_items: + - "all" + - "default" + when: inventory_hostname in groups['neutron-agents'] + - include: ../../config.yml vars: service_name: "nova-api" |