openstack-ansible-galera_se.../releasenotes/notes/new_healthcheck-9e559565745defd0.yaml
Jean-Philippe Evrard 7b92a07fb4 Fix galera_monitoring_allowed_source
Currently the integrated build fails with the existing value
of galera_monitoring_allowed_source.

This can be simplified while still staying secure by default
by giving no access to the xinetd service, unless explicitly
defined.

The xinetd whitelist can accept hostnames, so we document this
feature in defaults, and simplify the role.

Change-Id: Ibb2c5b90c79899036e5bcf9717a3b51cf5ec6b70
2017-11-29 13:50:19 +00:00

8 lines
294 B
YAML

---
features:
- |
Galera healthcheck has been improved, and relies on an xinetd service.
By default, the service is unaccessible (filtered with the no_access
directive). You can override the directive by setting any xinetd
valid value to ``galera_monitoring_allowed_source``.