csa/devops/ansible-patches/openshift.git/roles/os_firewall/defaults, branch ands

Default to global setting for firewall.

2017-08-25T19:50:35+00:00

Updated README to reflect refactor. Moved firewall initialize into separate file.

2017-08-11T02:59:48+00:00

Default to iptables on master

2017-05-10T19:10:32+00:00

We did this in 3.5 but never on master and we never came back to add
migration support. So we'll revert this on master and if/when we add
migration support we'll switch the default.

Enable firewalld by default

2016-12-14T19:43:02+00:00

Default os_firewall_use_firewalld to false in os_firewall and remove overrides.

2016-05-02T18:58:00+00:00

Cleanup various deprecation warnings.

2016-04-29T19:44:40+00:00

Add ability to disable os_firewall

2016-01-05T21:12:10+00:00

refactor firewall management into new role

2015-03-05T22:37:19+00:00

- Add os_firewall role
- Remove firewall settings from base_os, add wait task to os_firewall
- Added a iptables firewall module for maintaining the following (in a mostly
  naive manner):
  - ensure the OPENSHIFT_ALLOW chain is defined
  - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW
  - adds or removes entries from the OPENSHIFT_ALLOW chain
  - issues '/usr/libexec/iptables/iptables.init save' when rules are changed
- Limitations of iptables firewall module
  - only allows setting of ports/protocols to open
  - no testing on ipv6 support
- made os_firewall a dependency of openshift_common
- Hardcoded openshift_common to use iptables (through the vars directory)
  until upstream support is in place for firewalld