Description of problem: OSP director currently only supports a simple one-network configuration for overcloud services. It needs to allow splitting some services onto separate networks for security and performance reasons. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
The functionality to isolate networks should land in midstream this week. Dan Sneddon will add documenation on how to use it.
The network isolation code was just merged into midstream yesterday. A couple of us are testing now, and if we can get the overcloud to deploy with the new code we will put it on CI. Documentation for the network isolation code will be added to the rdo-manager docs.
Verified: Environment: instack-undercloud-2.1.2-21.el7ost.noarch The network isolation has been added and it's possible now to separate networks: Provisioning Internal API Tenant Storage Storage Management External
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2015:1549