6.3.3. Configuring a URI allowlist for web-import sources

Procedure

1. Open your OpenStackControlPlane custom resource CR file, openstack_control_plane.yaml, and add the following parameters to the glance template:

   Example

   glance:
     template:
       customServiceConfig: |
         [DEFAULT]
         allowed_schemes = [http,https,ftp]
         disallowed_schemes = []
         allowed_hosts = []
         disallowed_hosts = []
         allowed_ports = [80,443]
         disallowed_ports = []
       glanceAPIs:
         ...

   • Because ftp is in the list for allowed_schemes, this URL to the image resource is allowed: ftp://example.org/some/resource.
   • Because 21 is not in the list for allowed_ports, this URL to the same image resource is rejected: ftp://example.org:21/some/resource.

2. Update the control plane:

   $ oc apply -f openstack_control_plane.yaml -n openstack

3. Wait until RHOCP creates the resources related to the OpenStackControlPlane CR. Run the following command to check the status:

   $ oc get openstackcontrolplane -n openstack

   提示

   Append the -w option to the end of the get command to track deployment progress.