summaryrefslogtreecommitdiffstats
path: root/roles/base_os/tasks
Commit message (Collapse)AuthorAgeFilesLines
* rename base_os role to os_env_extras, move application to end since it just ↵Jason DeTiberus2015-03-051-17/+0
| | | | sets environment configs for root user
* refactor firewall management into new roleJason DeTiberus2015-03-051-16/+0
| | | | | | | | | | | | | | | | | - Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld
* move KUBECONFIG setting to openshift_commonJason DeTiberus2015-02-241-8/+0
|
* Merge branch 'master' into tower_installMatt Woodson2015-02-241-9/+14
|\ | | | | | | | | Conflicts: lib/aws_command.rb
| * Use the full path for the kubeconfigJason DeTiberus2015-02-201-1/+1
| |
| * Set and export KUBECONFIG in root user .bash_profileJason DeTiberus2015-02-201-9/+14
| | | | | | | | | | | | | | | | | | | | | | | | - roles/base_os: Without this, the root user would need to manually configure this variable before attempting to run any osc commands - roles/base_os: Cleanup the firewall service definition and only pause when the service state changes. - roles/openshift_master: use Akram's suggestion of simplifying the firewall config - roles/openshift_master: explicitly disable previously exposed ports that are no longer exposed (8080/tcp I'm looking at you).
* | more ansible tower commitsMatt Woodson2015-02-131-0/+5
|/
* removed the usage of yaml '>' for multiline entries and replaced them with ↵Thomas Wiest2015-02-051-10/+15
| | | | yaml dictionaries as demonstrated by the ansible documentation.
* Initial Commit. Sharing is caringKenny Woodson2014-09-161-0/+26