3d665fdb9d
Change-Id: I92c53b1c3f2695430e8f66b4add2ab7c070c7895 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
39 lines
1003 B
YAML
39 lines
1003 B
YAML
---
|
|
# TODO(inc0): Gates don't seem to have ufw executable, check for it instead of ignore errors
|
|
- when: disable_firewall | bool
|
|
block:
|
|
- name: Set firewall default policy
|
|
# noqa ignore-errors
|
|
become: true
|
|
ufw:
|
|
state: disabled
|
|
policy: allow
|
|
when: ansible_facts.os_family == 'Debian'
|
|
ignore_errors: true
|
|
|
|
- name: Check if firewalld is installed
|
|
# noqa command-instead-of-module
|
|
command: rpm -q firewalld
|
|
register: firewalld_check
|
|
changed_when: false
|
|
failed_when: firewalld_check.rc > 1
|
|
when: ansible_facts.os_family == 'RedHat'
|
|
|
|
- name: Disable firewalld
|
|
become: true
|
|
service:
|
|
name: "{{ item }}"
|
|
enabled: false
|
|
state: stopped
|
|
with_items:
|
|
- firewalld
|
|
when:
|
|
- ansible_facts.os_family == 'RedHat'
|
|
- firewalld_check.rc == 0
|
|
|
|
- import_role:
|
|
name: openstack.kolla.packages
|
|
|
|
- import_role:
|
|
name: openstack.kolla.{{ container_engine }}
|