Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Default to global setting for firewall. | Kenny Woodson | 2017-08-25 | 1 | -1/+1 |
| | |||||
* | Updated README to reflect refactor. Moved firewall initialize into separate ↵ | Kenny Woodson | 2017-08-10 | 1 | -2/+0 |
| | | | | file. | ||||
* | Default to iptables on master | Scott Dodson | 2017-05-10 | 1 | -1/+1 |
| | | | | | | We did this in 3.5 but never on master and we never came back to add migration support. So we'll revert this on master and if/when we add migration support we'll switch the default. | ||||
* | Enable firewalld by default | Russell Teague | 2016-12-14 | 1 | -5/+3 |
| | |||||
* | Default os_firewall_use_firewalld to false in os_firewall and remove overrides. | Andrew Butcher | 2016-05-02 | 1 | -1/+5 |
| | |||||
* | Cleanup various deprecation warnings. | Andrew Butcher | 2016-04-29 | 1 | -0/+2 |
| | |||||
* | Add ability to disable os_firewall | Jason DeTiberus | 2016-01-05 | 1 | -0/+1 |
| | |||||
* | refactor firewall management into new role | Jason DeTiberus | 2015-03-05 | 1 | -0/+2 |
- Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld |