lib/beaker-pe/install/pe_utils.rb in beaker-pe-2.11.10 vs lib/beaker-pe/install/pe_utils.rb in beaker-pe-2.11.11
- old
+ new
@@ -759,9 +759,12 @@
on host, "iptables -A OUTPUT -p tcp -d #{master.connection.vmhostname} -j ACCEPT"
# Treat these hosts as if they were outside the puppet lan
on host, "iptables -A OUTPUT -p tcp -d #{@osmirror_host_ip} -j DROP"
on host, "iptables -A OUTPUT -p tcp -d #{@delivery_host_ip} -j DROP"
on host, "iptables -A OUTPUT -p tcp -d #{@test_forge_host_ip} -j DROP"
+ # The next two lines are for our production and test k8s test runners
+ on host, "iptables -A OUTPUT -p tcp -d 10.236.112.0/20 -j ACCEPT"
+ on host, "iptables -A OUTPUT -p tcp -d 10.220.0.0/16 -j ACCEPT"
# The next two lines clear the rest of the internal puppet lan
on host, "iptables -A OUTPUT -p tcp -d 10.16.0.0/16 -j ACCEPT"
on host, "iptables -A OUTPUT -p tcp -d 10.32.0.0/16 -j ACCEPT"
# This allows udp on a port bundler requires
on host, 'iptables -A OUTPUT -p udp -m udp --dport 53 -j ACCEPT'