diff options
| author | Mark Doffman <mark.doffman@codethink.co.uk> | 2014-09-03 19:12:50 +0000 |
|---|---|---|
| committer | Mark Doffman <mark.doffman@codethink.co.uk> | 2014-10-02 02:46:23 +0000 |
| commit | 0f0bb39104d35cfcf2a01eeb1866927945bcfa8a (patch) | |
| tree | 98338062b2ac0101c95c94a7299eedff538fc614 /openstack/etc/nova/rootwrap.d/api-metadata.filters | |
| parent | f1da7ace54bed18c5c7eac5242ec84d4ca81c55d (diff) | |
| download | definitions-0f0bb39104d35cfcf2a01eeb1866927945bcfa8a.tar.gz | |
Openstack services strata and configuration.baserock/markdoffman/openstack
Add a stratum for openstack services that includes all the core
openstack service code and daemons.
Add configuration files for keystone, glance, nova and nova-compute.
Add a system and cluster definition that builds an
image that runs keystone, glance and nova.
Diffstat (limited to 'openstack/etc/nova/rootwrap.d/api-metadata.filters')
| -rw-r--r-- | openstack/etc/nova/rootwrap.d/api-metadata.filters | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/openstack/etc/nova/rootwrap.d/api-metadata.filters b/openstack/etc/nova/rootwrap.d/api-metadata.filters new file mode 100644 index 00000000..1aa6f83e --- /dev/null +++ b/openstack/etc/nova/rootwrap.d/api-metadata.filters @@ -0,0 +1,13 @@ +# nova-rootwrap command filters for api-metadata nodes +# This is needed on nova-api hosts running with "metadata" in enabled_apis +# or when running nova-api-metadata +# This file should be owned by (and only-writeable by) the root user + +[Filters] +# nova/network/linux_net.py: 'ip[6]tables-save' % (cmd, '-t', ... +iptables-save: CommandFilter, iptables-save, root +ip6tables-save: CommandFilter, ip6tables-save, root + +# nova/network/linux_net.py: 'ip[6]tables-restore' % (cmd,) +iptables-restore: CommandFilter, iptables-restore, root +ip6tables-restore: CommandFilter, ip6tables-restore, root |