diff options
| author | Kenny Woodson <kwoodson@redhat.com> | 2017-08-10 21:13:54 -0400 |
|---|---|---|
| committer | Kenny Woodson <kwoodson@redhat.com> | 2017-08-10 22:59:48 -0400 |
| commit | 7d50ffe98dfa17e3fb72627699c794843ed5295d (patch) | |
| tree | 8292dff0a7ed50f79a728da44f40d3a08b397aaa /roles/openshift_node | |
| parent | ba96f5eaf876f6b7568ac73794a08cbe759dceee (diff) | |
| download | openshift-7d50ffe98dfa17e3fb72627699c794843ed5295d.tar.gz openshift-7d50ffe98dfa17e3fb72627699c794843ed5295d.tar.bz2 openshift-7d50ffe98dfa17e3fb72627699c794843ed5295d.tar.xz openshift-7d50ffe98dfa17e3fb72627699c794843ed5295d.zip | |
Updated README to reflect refactor. Moved firewall initialize into separate file.
Diffstat (limited to 'roles/openshift_node')
| -rw-r--r-- | roles/openshift_node/defaults/main.yml | 2 | ||||
| -rw-r--r-- | roles/openshift_node/tasks/firewall.yml | 4 |
2 files changed, 4 insertions, 2 deletions
diff --git a/roles/openshift_node/defaults/main.yml b/roles/openshift_node/defaults/main.yml index 92237757c..973b3a619 100644 --- a/roles/openshift_node/defaults/main.yml +++ b/roles/openshift_node/defaults/main.yml @@ -1,4 +1,6 @@ --- +r_openshift_node_firewall_enabled: True +r_openshift_node_use_firewalld: False r_openshift_node_os_firewall_deny: [] r_openshift_node_os_firewall_allow: - service: Kubernetes kubelet diff --git a/roles/openshift_node/tasks/firewall.yml b/roles/openshift_node/tasks/firewall.yml index 492dcee1d..255aa886a 100644 --- a/roles/openshift_node/tasks/firewall.yml +++ b/roles/openshift_node/tasks/firewall.yml @@ -1,5 +1,5 @@ --- -- when: os_firewall_enabled | bool and not os_firewall_use_firewalld | bool +- when: r_openshift_node_firewall_enabled | bool and not r_openshift_node_use_firewalld | bool block: - name: Add iptables allow rules os_firewall_manage_iptables: @@ -19,7 +19,7 @@ when: item.cond | default(True) with_items: "{{ r_openshift_node_os_firewall_deny }}" -- when: os_firewall_enabled | bool and os_firewall_use_firewalld | bool +- when: r_openshift_node_firewall_enabled | bool and r_openshift_node_use_firewalld | bool block: - name: Add firewalld allow rules firewalld: |