diff options
| author | Russell Teague <rteague@redhat.com> | 2016-11-28 14:43:47 -0500 |
|---|---|---|
| committer | Russell Teague <rteague@redhat.com> | 2016-12-14 14:43:02 -0500 |
| commit | 05e189a039dada5edc4f9afb700b594c4dea4c9b (patch) | |
| tree | efa63c5b2a61ebf6a84a2533ea5249c94a6469be /roles/os_firewall/defaults | |
| parent | 002fdef1769baccdd6c90a4caa8c0028ec9559db (diff) | |
| download | openshift-05e189a039dada5edc4f9afb700b594c4dea4c9b.tar.gz openshift-05e189a039dada5edc4f9afb700b594c4dea4c9b.tar.bz2 openshift-05e189a039dada5edc4f9afb700b594c4dea4c9b.tar.xz openshift-05e189a039dada5edc4f9afb700b594c4dea4c9b.zip | |
Enable firewalld by default
Diffstat (limited to 'roles/os_firewall/defaults')
| -rw-r--r-- | roles/os_firewall/defaults/main.yml | 8 |
1 files changed, 3 insertions, 5 deletions
diff --git a/roles/os_firewall/defaults/main.yml b/roles/os_firewall/defaults/main.yml index c870a301a..4c544122f 100644 --- a/roles/os_firewall/defaults/main.yml +++ b/roles/os_firewall/defaults/main.yml @@ -1,9 +1,7 @@ --- os_firewall_enabled: True -# TODO: Upstream kubernetes only supports iptables currently -# TODO: it might be possible to still use firewalld if we wire up the created -# chains with the public zone (or the zone associated with the correct -# interfaces) -os_firewall_use_firewalld: False +# firewalld is not supported on Atomic Host +# https://bugzilla.redhat.com/show_bug.cgi?id=1403331 +os_firewall_use_firewalld: "{{ False if openshift.common.is_atomic | bool else True }}" os_firewall_allow: [] os_firewall_deny: [] |