aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorprameswar <engg.pram1@gmail.com>2016-11-03 11:47:44 +0530
committerprameswar <engg.pram1@gmail.com>2016-11-06 07:29:15 +0000
commitd7ed0142775e7974039f5f1c7433e531be8b75c1 (patch)
treec520087c7b4bef14a37b2aacc41ef35a0b14e0a8
parent9779778a1ebc99b6a48a8d97282bf4d2d8f473d7 (diff)
downloadkolla-d7ed0142775e7974039f5f1c7433e531be8b75c1.tar.gz
kolla-d7ed0142775e7974039f5f1c7433e531be8b75c1.zip
disable firewall in bootstrap-server
Closes-Bug: #1638762 Change-Id: I23565f72166088444a49269ff9e406a3ab7a40d4
-rw-r--r--ansible/roles/baremetal/tasks/install.yml22
1 files changed, 22 insertions, 0 deletions
diff --git a/ansible/roles/baremetal/tasks/install.yml b/ansible/roles/baremetal/tasks/install.yml
index f6ee106b1..7538ee100 100644
--- a/ansible/roles/baremetal/tasks/install.yml
+++ b/ansible/roles/baremetal/tasks/install.yml
@@ -4,6 +4,28 @@
become: True
when: ansible_os_family == 'Debian'
+- name: Set firewall default policy
+ ufw: state=disabled policy=allow
+ when: ansible_os_family == 'Debian'
+
+- name: Check if firewalld is installed
+ command: rpm -q firewalld
+ register: firewalld_check
+ failed_when: firewalld_check.rc > 1
+ when: ansible_os_family == 'RedHat'
+
+- name: Disable firewalld
+ become: True
+ service:
+ name: "{{ item }}"
+ enabled: false
+ state: stopped
+ with_items:
+ - firewalld
+ when:
+ - ansible_os_family == 'RedHat'
+ - firewalld_check.rc == 0
+
- name: Install apt packages
package: name={{item}} state=present
become: True