Merge pull request #216 from bjhuangr/add-http-sg-rules-for-3-nodes-i…

…nstall Add http/https SG rules to master SG when three nodes install
IBM · Jun 7, 2023 · 506291e · 506291e
2 parents ef523f4 + fd8129b
commit 506291e
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/...provisioning/cloud_infra_center/ocp_upi/roles/configure-install-manifests/tasks/main.yaml b/...provisioning/cloud_infra_center/ocp_upi/roles/configure-install-manifests/tasks/main.yaml
@@ -22,3 +22,4 @@
   ansible.builtin.script: tools/make-control-plane-unschedulable.py
   args:
     executable: python3
+  when: os_compute_nodes_number > 0
diff --git a/...a_provisioning/cloud_infra_center/ocp_upi/roles/configure-security-groups/tasks/main.yaml b/...a_provisioning/cloud_infra_center/ocp_upi/roles/configure-security-groups/tasks/main.yaml
@@ -189,6 +189,21 @@
     protocol: '112'
     remote_ip_prefix: "{{ sunbet_range.stdout_lines[0] }}"
 
+- name: 'Create master-sg rule "Ingress HTTP"'
+  openstack.cloud.security_group_rule:
+    security_group: "{{ os_sg_master }}"
+    protocol: tcp
+    port_range_min: 80
+    port_range_max: 80
+  when: os_compute_nodes_number == 0
+
+- name: 'Create master-sg rule "Ingress HTTPS"'
+  openstack.cloud.security_group_rule:
+    security_group: "{{ os_sg_master }}"
+    protocol: tcp
+    port_range_min: 443
+    port_range_max: 443
+  when: os_compute_nodes_number == 0
 
 - name: 'Create worker-sg rule "ICMP"'
   openstack.cloud.security_group_rule: