diff options
| author | Scott Dodson <sdodson@redhat.com> | 2017-03-01 22:17:22 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-03-01 22:17:22 -0500 |
| commit | 2d52f7c89baae452f3012102ac0f22a071f8f4ce (patch) | |
| tree | feb36c4dd6e8a04fa14a24d88d36b6dacc0fa213 /roles/contiv/tasks/netplugin_firewalld.yml | |
| parent | 4a3e61e035e42a260e0bf59d1e0c891dc004d50d (diff) | |
| parent | 58818a6af147e457d56a1faf77b02d37bb538826 (diff) | |
| download | openshift-2d52f7c89baae452f3012102ac0f22a071f8f4ce.tar.gz openshift-2d52f7c89baae452f3012102ac0f22a071f8f4ce.tar.bz2 openshift-2d52f7c89baae452f3012102ac0f22a071f8f4ce.tar.xz openshift-2d52f7c89baae452f3012102ac0f22a071f8f4ce.zip | |
Merge pull request #3393 from srampal/contiv
Pull request for Contiv Ansible code integration into Openshift Ansible
Diffstat (limited to 'roles/contiv/tasks/netplugin_firewalld.yml')
| -rw-r--r-- | roles/contiv/tasks/netplugin_firewalld.yml | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/roles/contiv/tasks/netplugin_firewalld.yml b/roles/contiv/tasks/netplugin_firewalld.yml new file mode 100644 index 000000000..3aeffae56 --- /dev/null +++ b/roles/contiv/tasks/netplugin_firewalld.yml @@ -0,0 +1,34 @@ +--- +- name: Netplugin Firewalld | Open Netplugin port + firewalld: + port: "{{ netplugin_port }}/tcp" + permanent: false + state: enabled + # in case this is also a node where firewalld turned off + ignore_errors: yes + +- name: Netplugin Firewalld | Save Netplugin port + firewalld: + port: "{{ netplugin_port }}/tcp" + permanent: true + state: enabled + # in case this is also a node where firewalld turned off + ignore_errors: yes + +- name: Netplugin Firewalld | Open vxlan port + firewalld: + port: "8472/udp" + permanent: false + state: enabled + # in case this is also a node where firewalld turned off + ignore_errors: yes + when: contiv_encap_mode == "vxlan" + +- name: Netplugin Firewalld | Save firewalld vxlan port for flanneld + firewalld: + port: "8472/udp" + permanent: true + state: enabled + # in case this is also a node where firewalld turned off + ignore_errors: yes + when: contiv_encap_mode == "vxlan" |