tripleo-ansible/tripleo_ansible/roles/tripleo-firewall
Harald Jensås 588ac0a431 Open ipv6-icmp traffic by default
puppet-tripleo had special conditions in the rule manifest
to convert the protocol for 'icmp' to 'ipv6-icmp'. This
made it possible to open 'icmp' for ipv4 and 'ipv6-icmp'
for ipv6 using a single rule defenition.

ceph-ansible does not have the logic to support a single
rule. Since the rule to allow icmp traffic is in defined in
the defaults for the role and not in THT. This change uses
the 'ipversion' property for the existing 'icmp' rule and
likewise adds a default rule for 'ipv6-icmp'.

Change-Id: I8b453f7c13c2015aa208ed1bddcdca246cdca58d
Closes-Bug: #1845175
2019-09-24 17:03:41 +02:00
..
defaults Open ipv6-icmp traffic by default 2019-09-24 17:03:41 +02:00
handlers Add firewall pruning and protocal parsing 2019-08-22 10:33:41 -05:00
meta Create the tripleo-firewall role 2019-08-16 17:06:42 +00:00
molecule Add check for string type dport 2019-08-23 14:49:23 -05:00
tasks Support 'ipversion' property in rules 2019-09-24 16:55:39 +02:00
vars Create the tripleo-firewall role 2019-08-16 17:06:42 +00:00