summaryrefslogtreecommitdiffstats
path: root/roles/os_firewall/defaults
Commit message (Collapse)AuthorAgeFilesLines
* Default to global setting for firewall.Kenny Woodson2017-08-251-1/+1
|
* Updated README to reflect refactor. Moved firewall initialize into separate ↵Kenny Woodson2017-08-101-2/+0
| | | | file.
* Default to iptables on masterScott Dodson2017-05-101-1/+1
| | | | | | We did this in 3.5 but never on master and we never came back to add migration support. So we'll revert this on master and if/when we add migration support we'll switch the default.
* Enable firewalld by defaultRussell Teague2016-12-141-5/+3
|
* Default os_firewall_use_firewalld to false in os_firewall and remove overrides.Andrew Butcher2016-05-021-1/+5
|
* Cleanup various deprecation warnings.Andrew Butcher2016-04-291-0/+2
|
* Add ability to disable os_firewallJason DeTiberus2016-01-051-0/+1
|
* refactor firewall management into new roleJason DeTiberus2015-03-051-0/+2
- Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld