blob: c98e7b6a5dc4e3874119b1427c10d8dbf8d085a2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
|
---
- name: Netmaster IPtables | Get iptables rules
command: iptables -L --wait
register: iptablesrules
check_mode: no
- name: Netmaster IPtables | Enable iptables at boot
service:
name: iptables
enabled: yes
state: started
- name: Netmaster IPtables | Open Netmaster with iptables
command: /sbin/iptables -I INPUT 1 -p tcp --dport {{ item }} -j ACCEPT -m comment --comment "contiv"
with_items:
- "{{ contiv_rpc_port1 }}"
- "{{ contiv_rpc_port2 }}"
- "{{ contiv_rpc_port3 }}"
when: iptablesrules.stdout.find("contiv") == -1
notify: Save iptables rules
- name: Netmaster IPtables | Open netmaster main port
command: /sbin/iptables -I INPUT 1 -p tcp -s {{ item }} --dport {{ netmaster_port }} -j ACCEPT -m comment --comment "contiv"
with_items:
- "{{ groups.oo_nodes_to_config|difference(hostvars[inventory_hostname]['ansible_' + netmaster_interface].ipv4.address)|list }}"
when: iptablesrules.stdout.find("contiv") == -1
notify: Save iptables rules
|
