summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorClayton Coleman <ccoleman@redhat.com>2017-09-09 16:03:49 -0400
committerClayton Coleman <ccoleman@redhat.com>2017-09-11 23:04:03 -0400
commit3f102592e305b81f6b0eb778a7170fc1cad8a6b1 (patch)
tree5df5793455b5901fadefdd0fceafb88c427e1bc9
parent33d254a4907e15d4abd9d51aad4bed03a100e9e3 (diff)
downloadopenshift-3f102592e305b81f6b0eb778a7170fc1cad8a6b1.tar.gz
openshift-3f102592e305b81f6b0eb778a7170fc1cad8a6b1.tar.bz2
openshift-3f102592e305b81f6b0eb778a7170fc1cad8a6b1.tar.xz
openshift-3f102592e305b81f6b0eb778a7170fc1cad8a6b1.zip
Add `openshift_node_open_ports` to allow arbitrary firewall exposure
It should be possible for an admin to define an arbitrary set of ports to be exposed on each node that will relate to the cluster function. This adds a new global variable for the node that supports Array(Object{'service':<name>,'port':<port_spec>,'cond':<boolean>}) which is the same format accepted by the firewall role.
-rw-r--r--roles/openshift_node/defaults/main.yml4
1 files changed, 3 insertions, 1 deletions
diff --git a/roles/openshift_node/defaults/main.yml b/roles/openshift_node/defaults/main.yml
index f1e64f3aa..9df829ea9 100644
--- a/roles/openshift_node/defaults/main.yml
+++ b/roles/openshift_node/defaults/main.yml
@@ -60,7 +60,7 @@ openshift_deployment_type: origin
openshift_node_bootstrap: False
r_openshift_node_os_firewall_deny: []
-r_openshift_node_os_firewall_allow:
+default_r_openshift_node_os_firewall_allow:
- service: Kubernetes kubelet
port: 10250/tcp
- service: http
@@ -79,6 +79,8 @@ r_openshift_node_os_firewall_allow:
- service: Kubernetes service NodePort UDP
port: "{{ openshift_node_port_range | default('') }}/udp"
cond: "{{ openshift_node_port_range is defined }}"
+# Allow multiple port ranges to be added to the role
+r_openshift_node_os_firewall_allow: "{{ default_r_openshift_node_os_firewall_allow | union(openshift_node_open_ports | default([])) }}"
oreg_url: ''
oreg_host: "{{ oreg_url.split('/')[0] if '.' in oreg_url.split('/')[0] else '' }}"