b4f1d3c993
Sync the versions with kolla-ansible Depends-On: https://review.opendev.org/c/openstack/kayobe/+/883744 Change-Id: I744d64e1e69021f93497fcf127a6abd315f04669
40 lines
979 B
YAML
40 lines
979 B
YAML
---
|
|
# TODO(inc0): Gates don't seem to have ufw executable, check for it instead of ignore errors
|
|
- block:
|
|
- name: Set firewall default policy
|
|
# noqa ignore-errors
|
|
become: True
|
|
ufw:
|
|
state: disabled
|
|
policy: allow
|
|
when: ansible_facts.os_family == 'Debian'
|
|
ignore_errors: yes
|
|
|
|
- name: Check if firewalld is installed
|
|
command: rpm -q firewalld
|
|
register: firewalld_check
|
|
changed_when: false
|
|
failed_when: firewalld_check.rc > 1
|
|
args:
|
|
warn: false
|
|
when: ansible_facts.os_family == 'RedHat'
|
|
|
|
- name: Disable firewalld
|
|
become: True
|
|
service:
|
|
name: "{{ item }}"
|
|
enabled: false
|
|
state: stopped
|
|
with_items:
|
|
- firewalld
|
|
when:
|
|
- ansible_facts.os_family == 'RedHat'
|
|
- firewalld_check.rc == 0
|
|
when: disable_firewall | bool
|
|
|
|
- import_role:
|
|
name: openstack.kolla.packages
|
|
|
|
- import_role:
|
|
name: openstack.kolla.docker
|