diff options
| author | Scott Dodson <sdodson@redhat.com> | 2017-01-09 12:49:04 -0500 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2017-01-09 12:49:04 -0500 |
| commit | eb451532df15b010bd9d26195b93096a8bd20148 (patch) | |
| tree | ceecd7342c71717830a3a928022196545f08e420 /roles/os_firewall/README.md | |
| parent | 96fe76dad188610733c87cf80f4e22da34f11fb7 (diff) | |
| parent | 05e189a039dada5edc4f9afb700b594c4dea4c9b (diff) | |
| download | openshift-eb451532df15b010bd9d26195b93096a8bd20148.tar.gz openshift-eb451532df15b010bd9d26195b93096a8bd20148.tar.bz2 openshift-eb451532df15b010bd9d26195b93096a8bd20148.tar.xz openshift-eb451532df15b010bd9d26195b93096a8bd20148.zip | |
Merge pull request #2909 from mtnbikenc/firewalld
Enable firewalld by default
Diffstat (limited to 'roles/os_firewall/README.md')
| -rw-r--r-- | roles/os_firewall/README.md | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/roles/os_firewall/README.md b/roles/os_firewall/README.md index c13c5dfc9..43db3cc74 100644 --- a/roles/os_firewall/README.md +++ b/roles/os_firewall/README.md @@ -4,6 +4,9 @@ OS Firewall OS Firewall manages firewalld and iptables firewall settings for a minimal use case (Adding/Removing rules based on protocol and port number). +Note: firewalld is not supported on Atomic Host +https://bugzilla.redhat.com/show_bug.cgi?id=1403331 + Requirements ------------ @@ -14,7 +17,7 @@ Role Variables | Name | Default | | |---------------------------|---------|----------------------------------------| -| os_firewall_use_firewalld | False | If false, use iptables | +| os_firewall_use_firewalld | True | If false, use iptables | | os_firewall_allow | [] | List of service,port mappings to allow | | os_firewall_deny | [] | List of service, port mappings to deny | @@ -31,6 +34,7 @@ Use iptables and open tcp ports 80 and 443: --- - hosts: servers vars: + os_firewall_use_firewalld: false os_firewall_allow: - service: httpd port: 80/tcp @@ -45,7 +49,6 @@ Use firewalld and open tcp port 443 and close previously open tcp port 80: --- - hosts: servers vars: - os_firewall_use_firewalld: true os_firewall_allow: - service: https port: 443/tcp |