summaryrefslogtreecommitdiffstats
path: root/roles/os_firewall/defaults/main.yml
diff options
context:
space:
mode:
Diffstat (limited to 'roles/os_firewall/defaults/main.yml')
-rw-r--r--roles/os_firewall/defaults/main.yml8
1 files changed, 7 insertions, 1 deletions
diff --git a/roles/os_firewall/defaults/main.yml b/roles/os_firewall/defaults/main.yml
index e3176e611..c870a301a 100644
--- a/roles/os_firewall/defaults/main.yml
+++ b/roles/os_firewall/defaults/main.yml
@@ -1,3 +1,9 @@
---
os_firewall_enabled: True
-os_firewall_use_firewalld: True
+# TODO: Upstream kubernetes only supports iptables currently
+# TODO: it might be possible to still use firewalld if we wire up the created
+# chains with the public zone (or the zone associated with the correct
+# interfaces)
+os_firewall_use_firewalld: False
+os_firewall_allow: []
+os_firewall_deny: []