pndaproject / pnda-aws-templates Goto Github PK

For PNDA offline deployment currently under connectivity section REJECT_OUTBOUND and ADD_ONLINE_REPOS values in the pnda.yaml without quotes as YES/NO doesn't add reject iptable rules in the created instances. Reject IP tables is added for values 'YES' 'NO' with quotes

Expectation: If the value YES and NO provided with or without quotes it should add reject iptables rules in the instances

In package-install.sh for ADD_ONLINE_REPOS = YES and REJECT OUTBOUND = YES for Ubuntu, code is adding keys and sources.list for the cloudera, saltstack sites. But the IPtables aren't adding ACL entries for these websites.

Not done the deployment with the change. This is tracking purpose to fix it in future

SaltStack trying to upgrade the packages using the pkg.uptodate state but it’s not failed,
Because it’s not able to download the libcgmanager0 and screen from global server

While checking the apt policy, latest versions point to global mirrors, instead of local mirror server.

bastion:/home/ubuntu# apt-cache policy libcgmanager0
libcgmanager0:
Installed: 0.24-0ubuntu7.5
Candidate: 0.39-2ubuntu2ubuntu14.04.1
Version table:
_**# 0.39-2ubuntu2ubuntu14.04.1 0**_
500 http://us-west-2.ec2.archive.ubuntu.com/ubuntu/ trusty-backports/main amd64 Packages
# 0.24-0ubuntu7.5 0<>
500 http://34.215.51.80/ubuntu/develop//mirror_deb/ ./ Packages <<>
500 http://us-west-2.ec2.archive.ubuntu.com/ubuntu/ trusty-updates/main amd64 Packages
100 /var/lib/dpkg/status
0.24-0ubuntu7.1 0
500 http://security.ubuntu.com/ubuntu/ trusty-security/main amd64 Packages
0.24-0ubuntu5 0
500 http://us-west-2.ec2.archive.ubuntu.com/ubuntu/ trusty/main amd64 Packages

In package-install.sh, script is adding an entry as mentioned below. But if a user changes the PNDA network in pnda.yaml might fail. Not done the deployment with the change. This is tracking purpose to fix it in future

iptables -A LOGGING -d 10.0.0.0/16 -j ACCEPT # PNDA network