---
openshift_node_ips: []

# TODO: update setting these values based on the facts
# TODO: update for console port change
os_firewall_allow:
- service: etcd embedded
  port: 4001/tcp
- service: OpenShift api https
  port: 8443/tcp
os_firewall_deny:
- service: OpenShift api http
  port: 8080/tcp
- service: former OpenShift web console port
  port: 8444/tcp
- service: former etcd peer port
  port: 7001/tcp