csa/devops/ansible-patches/openshift.git - Unnamed repository; edit this file 'description' to name the repository.

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Merge pull request #100 from detiber/randomCleanup	Thomas Wiest	2015-03-09	2	-2/+2
\|\ \| \| \| \|	Random cleanup
\| *	Fix license name	Jason DeTiberus	2015-03-06	2	-2/+2
\| \|
* \|	os_firewall fixes	Jason DeTiberus	2015-03-09	2	-32/+46
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	- Fix variable references to os_firewall_{allow,deny} instead of {allow, deny} - Fix ordering of service stop/start to ensure firewall rules are properly initiated after service startup - Add test for package installed before attempting to disable or mask services
* \|	start fixing os_firewall issues	Jason DeTiberus	2015-03-06	1	-1/+1
\|/ \| \| \| \|	- Fix missed references to old firewall scripts - Fix variable name references that didn't get updated
*	refactor firewall management into new role	Jason DeTiberus	2015-03-05	7	-0/+462
	- Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld