c12s-kubespray/contrib/os-services/roles/prepare/tasks/main.yml

---
- block:
  - name: List services
    service_facts:

  - name: Disable service firewalld
    systemd:
      name: firewalld
      state: stopped
      enabled: no
    when:
      "'firewalld.service' in services"

  - name: Disable service ufw
    systemd:
      name: ufw
      state: stopped
      enabled: no
    when:
      "'ufw.service' in services"

  when:
  - disable_service_firewall
Add contrib playbook to disable service firewall (#7431) Basically we need to make necessary TCP/UDP ports open. However the necessary ports are so many, and sometimes it is difficult to figure out that is due to firewall issues or not if facing deployment issues. To distinguish a root problem on such situation, this adds contrib playbook to disable the service firewall for Kubespray development and test. 2021-05-18 13:45:30 +00:00			`---`
			`- block:`
			`- name: List services`
			`service_facts:`

			`- name: Disable service firewalld`
			`systemd:`
			`name: firewalld`
			`state: stopped`
			`enabled: no`
			`when:`
			`"'firewalld.service' in services"`

			`- name: Disable service ufw`
			`systemd:`
			`name: ufw`
			`state: stopped`
			`enabled: no`
			`when:`
			`"'ufw.service' in services"`

			`when:`
			`- disable_service_firewall`