---
r_openshift_loadbalancer_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
r_openshift_loadbalancer_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"

openshift_router_image_default_dict:
  origin: 'openshift/origin-haproxy-router'
  openshift-enterprise: 'openshift3/ose-haproxy-router'
openshift_router_image_default: "{{ openshift_router_image_default_dict[openshift_deployment_type] }}"
openshift_router_image: "{{ openshift_router_image_default }}"

haproxy_frontends:
- name: main
  binds:
  - "*:{{ openshift_master_api_port | default(8443) }}"
  default_backend: default

haproxy_backends:
- name: default
  balance: roundrobin
  servers:
  - name: web01
    address: 127.0.0.1:9000
    opts: check

r_openshift_loadbalancer_os_firewall_deny: []
r_openshift_loadbalancer_os_firewall_allow:
- service: haproxy stats
  port: "9000/tcp"
- service: haproxy balance
  port: "{{ openshift_master_api_port | default(8443) }}/tcp"
- service: nuage mon
  port: "{{ nuage_mon_rest_server_port | default(9443) }}/tcp"
  cond: "{{ r_openshift_lb_use_nuage | bool }}"

openshift_docker_service_name: "{{ 'container-engine' if (openshift_docker_use_system_container | default(False) | bool) else 'docker' }}"

# NOTE
# r_openshift_lb_use_nuage_default may be defined external to this role.
# openshift_use_nuage, if defined, may affect other roles or play behavior.
r_openshift_lb_use_nuage_default: "{{ openshift_use_nuage | default(False) }}"
r_openshift_lb_use_nuage: "{{ r_openshift_lb_use_nuage_default }}"