summaryrefslogtreecommitdiffstats
path: root/roles/os_firewall/README.md
Commit message (Collapse)AuthorAgeFilesLines
* Updating docs for Ansible 2.2 requirementsRussell Teague2016-11-281-1/+1
|
* Refactor os_firewall roleRussell Teague2016-11-211-1/+1
| | | | | | * Remove unneeded tasks duplicated by new module functionality * Ansible systemd module has 'masked' and 'daemon_reload' options * Ansible firewalld module has 'immediate' option
* Added dependency of os_firewall to docker roleRussell Teague2016-11-141-1/+1
| | | | | | | | | | | The docker role requires iptables-services to be installed. Added dependency on so_firewall role to ensure the iptables service is installed first. Currently this will only work with iptables and not with firewalld. * Added allow_duplicates to os_firewall role meta * Removed unused task from docker/tasks * Corrected os_firewall Defaults in README
* Fix license nameJason DeTiberus2015-03-061-1/+1
|
* refactor firewall management into new roleJason DeTiberus2015-03-051-0/+66
- Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld