summaryrefslogtreecommitdiffstats
path: root/roles
diff options
context:
space:
mode:
authorJhon Honce <jhonce@redhat.com>2015-03-19 15:06:38 -0700
committerJhon Honce <jhonce@redhat.com>2015-03-24 11:23:25 -0700
commit85e6948fca954d3c066bf5a6123ada6b96adf45c (patch)
treed7e49583abbc58b779239857ee401725fb6ce73d /roles
parent011ff923489fd1dd5fa072a685ce881ab69b8f1c (diff)
downloadopenshift-85e6948fca954d3c066bf5a6123ada6b96adf45c.tar.gz
openshift-85e6948fca954d3c066bf5a6123ada6b96adf45c.tar.bz2
openshift-85e6948fca954d3c066bf5a6123ada6b96adf45c.tar.xz
openshift-85e6948fca954d3c066bf5a6123ada6b96adf45c.zip
* Add DOCKER chain to iptables
Diffstat (limited to 'roles')
-rw-r--r--roles/os_firewall/tasks/firewall/iptables.yml14
1 files changed, 14 insertions, 0 deletions
diff --git a/roles/os_firewall/tasks/firewall/iptables.yml b/roles/os_firewall/tasks/firewall/iptables.yml
index 87e77c083..3d46d6e2d 100644
--- a/roles/os_firewall/tasks/firewall/iptables.yml
+++ b/roles/os_firewall/tasks/firewall/iptables.yml
@@ -41,6 +41,20 @@
changed_when: "'firewalld' in result.stdout"
when: pkg_check.rc == 0
+- name: Check for DOCKER chain
+ shell: iptables -L |grep '^Chain DOCKER'
+ ignore_errors: yes
+ register: check_for_chain
+
+- name: Create DOCKER chain
+ command: iptables -N DOCKER
+ register: create_chain
+ when: check_for_chain.rc != 0
+
+- name: Persist DOCKER chain
+ command: service iptables save
+ when: create_chain.rc == 0
+
- name: Add iptables allow rules
os_firewall_manage_iptables:
name: "{{ item.service }}"