Allow Condor from docker network

0021.security.cfg

@@ -41,6 +41,9 @@ HostEtp          = *$(DomainEtp)
 # Cloud Resources
 DomainCloudBwFor     = bwforcluster
 
+# Docker
+DockerHost = 172.16.0.0/12
+
 # Nodes that securely join belong to us, hopefully
 DEFAULT_DOMAIN_NAME    = $(DomainEtp)
 EMAIL_DOMAIN           = $(FULL_HOSTNAME)
@@ -79,6 +82,8 @@ ALLOW_DAEMON        = condor@$(DomainEtp), \
                       condor_pool@$(DomainEtp), \
                       condor@$(DomainEtp), \
                       condor_pool@$(DomainEtp), \
+                      condor@$(DockerHost), \
+                      condor_pool@(DockerHost), \
                       condor@$(DomainCloudBwFor), \
                       condor_pool@$(DomainCloudBwFor), \
                       submit-side@matchsession
@@ -93,6 +98,7 @@ ALLOW_OWNER         = $(FULL_HOSTNAME), $(IP_ADDRESS), $(ALLOW_ADMINISTRATOR)
 ALLOW_WRITE         = *$(DomainEtp), \
                       *$(DomainEtp), \
                       *$(DomainCloudBwFor), \
+                      $(DockerHost)
                       
 ## Set certificate location to CVMFS to enable certificates from Grid sites
 AUTH_SSL_CLIENT_CADIR=/cvmfs/grid.cern.ch/etc/grid-security/certificates