Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | * Add DOCKER chain to iptables | Jhon Honce | 2015-03-24 | 1 | -0/+14 | |
| | ||||||
* | Merge pull request #100 from detiber/randomCleanup | Thomas Wiest | 2015-03-09 | 2 | -2/+2 | |
|\ | | | | | Random cleanup | |||||
| * | Fix license name | Jason DeTiberus | 2015-03-06 | 2 | -2/+2 | |
| | | ||||||
* | | os_firewall fixes | Jason DeTiberus | 2015-03-09 | 2 | -32/+46 | |
| | | | | | | | | | | | | | | - Fix variable references to os_firewall_{allow,deny} instead of {allow, deny} - Fix ordering of service stop/start to ensure firewall rules are properly initiated after service startup - Add test for package installed before attempting to disable or mask services | |||||
* | | start fixing os_firewall issues | Jason DeTiberus | 2015-03-06 | 1 | -1/+1 | |
|/ | | | | | - Fix missed references to old firewall scripts - Fix variable name references that didn't get updated | |||||
* | refactor firewall management into new role | Jason DeTiberus | 2015-03-05 | 7 | -0/+462 | |
- Add os_firewall role - Remove firewall settings from base_os, add wait task to os_firewall - Added a iptables firewall module for maintaining the following (in a mostly naive manner): - ensure the OPENSHIFT_ALLOW chain is defined - ensure that there is a jump rule in the INPUT chain for OPENSHIFT_ALLOW - adds or removes entries from the OPENSHIFT_ALLOW chain - issues '/usr/libexec/iptables/iptables.init save' when rules are changed - Limitations of iptables firewall module - only allows setting of ports/protocols to open - no testing on ipv6 support - made os_firewall a dependency of openshift_common - Hardcoded openshift_common to use iptables (through the vars directory) until upstream support is in place for firewalld |