summaryrefslogtreecommitdiffstats
path: root/roles/os_firewall/tasks/main.yml
Commit message (Collapse)AuthorAgeFilesLines
* Include Deprecation - openshift-loadbalancerRussell Teague2017-11-221-2/+2
|
* Additional os_firewall role refactoringRussell Teague2017-08-151-9/+16
| | | | | | | | | * Remove openshift_facts dependency * Move firewall initialization from std_include.yml to openshift_cluster/config.yml Installing firewall packages is only necessary during OpenShift installation.
* Enable firewalld by defaultRussell Teague2016-12-141-0/+6
|
* Add ability to disable os_firewallJason DeTiberus2016-01-051-2/+2
|
* refactor firewall management into new roleJason DeTiberus2015-03-051-0/+6
- Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld