summaryrefslogtreecommitdiffstats
path: root/roles/openshift_node
diff options
context:
space:
mode:
authorAndrew Butcher <abutcher@redhat.com>2016-06-01 12:05:07 -0400
committerAndrew Butcher <abutcher@redhat.com>2016-06-01 12:05:07 -0400
commit926c3d5c7b7660fa2755541ceb999961cf4cfa21 (patch)
tree79affd1bdc94b8af43a23bf04dec927770b9283f /roles/openshift_node
parent51f0e95bb65ab8f59f683226afefe381e430aae4 (diff)
downloadopenshift-926c3d5c7b7660fa2755541ceb999961cf4cfa21.tar.gz
openshift-926c3d5c7b7660fa2755541ceb999961cf4cfa21.tar.bz2
openshift-926c3d5c7b7660fa2755541ceb999961cf4cfa21.tar.xz
openshift-926c3d5c7b7660fa2755541ceb999961cf4cfa21.zip
Move os_firewall_allow from defaults to role dependencies.
Diffstat (limited to 'roles/openshift_node')
-rw-r--r--roles/openshift_node/defaults/main.yml14
-rw-r--r--roles/openshift_node/meta/main.yml15
2 files changed, 14 insertions, 15 deletions
diff --git a/roles/openshift_node/defaults/main.yml b/roles/openshift_node/defaults/main.yml
index 91aed7aa3..efff5d6cd 100644
--- a/roles/openshift_node/defaults/main.yml
+++ b/roles/openshift_node/defaults/main.yml
@@ -1,16 +1,2 @@
---
-os_firewall_allow:
-- service: Kubernetes kubelet
- port: 10250/tcp
-- service: http
- port: 80/tcp
-- service: https
- port: 443/tcp
-- service: Openshift kubelet ReadOnlyPort
- port: 10255/tcp
-- service: Openshift kubelet ReadOnlyPort udp
- port: 10255/udp
-- service: OpenShift OVS sdn
- port: 4789/udp
- when: openshift.node.use_openshift_sdn | bool
openshift_version: "{{ openshift_pkg_version | default(openshift_image_tag | default(openshift.docker.openshift_image_tag | default(''))) }}"
diff --git a/roles/openshift_node/meta/main.yml b/roles/openshift_node/meta/main.yml
index 31547b846..97ab8241b 100644
--- a/roles/openshift_node/meta/main.yml
+++ b/roles/openshift_node/meta/main.yml
@@ -19,4 +19,17 @@ dependencies:
- role: openshift_node_dnsmasq
when: openshift.common.use_dnsmasq
- role: os_firewall
-
+ os_firewall_allow:
+ - service: Kubernetes kubelet
+ port: 10250/tcp
+ - service: http
+ port: 80/tcp
+ - service: https
+ port: 443/tcp
+ - service: Openshift kubelet ReadOnlyPort
+ port: 10255/tcp
+ - service: Openshift kubelet ReadOnlyPort udp
+ port: 10255/udp
+ - service: OpenShift OVS sdn
+ port: 4789/udp
+ when: openshift.node.use_openshift_sdn | bool