diff options
| author | Clayton Coleman <ccoleman@redhat.com> | 2017-09-09 16:03:49 -0400 |
|---|---|---|
| committer | Clayton Coleman <ccoleman@redhat.com> | 2017-09-11 23:04:03 -0400 |
| commit | 3f102592e305b81f6b0eb778a7170fc1cad8a6b1 (patch) | |
| tree | 5df5793455b5901fadefdd0fceafb88c427e1bc9 /roles/openshift_node/defaults | |
| parent | 33d254a4907e15d4abd9d51aad4bed03a100e9e3 (diff) | |
| download | openshift-3f102592e305b81f6b0eb778a7170fc1cad8a6b1.tar.gz openshift-3f102592e305b81f6b0eb778a7170fc1cad8a6b1.tar.bz2 openshift-3f102592e305b81f6b0eb778a7170fc1cad8a6b1.tar.xz openshift-3f102592e305b81f6b0eb778a7170fc1cad8a6b1.zip | |
Add `openshift_node_open_ports` to allow arbitrary firewall exposure
It should be possible for an admin to define an arbitrary set of ports
to be exposed on each node that will relate to the cluster function.
This adds a new global variable for the node that supports
Array(Object{'service':<name>,'port':<port_spec>,'cond':<boolean>})
which is the same format accepted by the firewall role.
Diffstat (limited to 'roles/openshift_node/defaults')
| -rw-r--r-- | roles/openshift_node/defaults/main.yml | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/roles/openshift_node/defaults/main.yml b/roles/openshift_node/defaults/main.yml index f1e64f3aa..9df829ea9 100644 --- a/roles/openshift_node/defaults/main.yml +++ b/roles/openshift_node/defaults/main.yml @@ -60,7 +60,7 @@ openshift_deployment_type: origin openshift_node_bootstrap: False r_openshift_node_os_firewall_deny: [] -r_openshift_node_os_firewall_allow: +default_r_openshift_node_os_firewall_allow: - service: Kubernetes kubelet port: 10250/tcp - service: http @@ -79,6 +79,8 @@ r_openshift_node_os_firewall_allow: - service: Kubernetes service NodePort UDP port: "{{ openshift_node_port_range | default('') }}/udp" cond: "{{ openshift_node_port_range is defined }}" +# Allow multiple port ranges to be added to the role +r_openshift_node_os_firewall_allow: "{{ default_r_openshift_node_os_firewall_allow | union(openshift_node_open_ports | default([])) }}" oreg_url: '' oreg_host: "{{ oreg_url.split('/')[0] if '.' in oreg_url.split('/')[0] else '' }}" |