From 64fdac754a9e0a08de4ce8a48d19fe366d032fbb Mon Sep 17 00:00:00 2001 From: John Lawrence Date: Sun, 26 Apr 2020 22:13:39 +0000 Subject: [PATCH] Enable NTP protocol access Allow the Prometheus node exporter to access the NTP metrics. Change-Id: I623a84effc61cf496b5c524ddb2fabed8066a89a --- promenade/templates/roles/common/etc/chrony/chrony.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/promenade/templates/roles/common/etc/chrony/chrony.conf b/promenade/templates/roles/common/etc/chrony/chrony.conf index 29a3d0f6..b377b9e0 100644 --- a/promenade/templates/roles/common/etc/chrony/chrony.conf +++ b/promenade/templates/roles/common/etc/chrony/chrony.conf @@ -28,3 +28,6 @@ makestep 1 3 {% for server in config['KubernetesNetwork:ntp.servers'] | default([]) %} server {{ server }} iburst {%- endfor %} + +#Enable Chrony to operate as an NTP server for local applications e.g. Prometheus. +allow 127.0.0.0/8