0bb84bc58e
We configured iptables rules but did not persist them. This meant that rules would be flushed when restarting iptables or the instance. Change-Id: I9d90f55323a33d6a0f0dda1f7ab25d10984fa6cb
21 lines
549 B
YAML
21 lines
549 B
YAML
- include: common.yaml
|
|
|
|
# Note (dmsimard)
|
|
# We explicitely declare a PATH environment variable because '/sbin' is not in
|
|
# PATH when using 'become: yes' on some distributions
|
|
- include: switch.yaml
|
|
environment:
|
|
PATH: "{{ ansible_env.PATH }}:/sbin:/usr/sbin"
|
|
when: inventory_hostname in groups['switch']
|
|
static: no
|
|
|
|
- include: peer.yaml
|
|
environment:
|
|
PATH: "{{ ansible_env.PATH }}:/sbin:/usr/sbin"
|
|
when: inventory_hostname in groups['peers']
|
|
static: no
|
|
|
|
- name: Persist iptables rules
|
|
include_role:
|
|
name: persistent-firewall
|