From: Tomáš Levora <t.levora@partner.samsung.com>
Date: Wed, 19 Dec 2018 14:34:21 +0000 (+0100)
Subject: Add ansible firewall role
X-Git-Tag: 6.0.0-ONAP~374^2
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=b88839455d4f01a85a0859d896fc8bebfe620aa7;p=oom%2Foffline-installer.git

Add ansible firewall role

Adding role to disable firewall to prevent any issue with communication
during the installation

Change-Id: I2390f0bc5062933e6a8bf4dcbc0b255b283f993d
Issue-ID: OOM-1551
Signed-off-by: Tomáš Levora <t.levora@partner.samsung.com>
---

diff --git a/ansible/roles/firewall/tasks/firewall-disable.yml b/ansible/roles/firewall/tasks/firewall-disable.yml
new file mode 100644
index 00000000..9a8a2c10
--- /dev/null
+++ b/ansible/roles/firewall/tasks/firewall-disable.yml
@@ -0,0 +1,17 @@
+---
+- name: Check if firewalld is installed
+  yum:
+    list: firewalld
+    disablerepo: "*"
+  register: firewalld_check
+
+- name: Stop and disable firewalld if exists
+  service:
+    name: firewalld
+    state: stopped
+    enabled: no
+  when: firewalld_check.results|selectattr('yumstate', 'match', 'installed')|list|length != 0
+
+- name: Flush iptables
+  iptables:
+    flush: true
diff --git a/ansible/roles/firewall/tasks/main.yml b/ansible/roles/firewall/tasks/main.yml
new file mode 100644
index 00000000..f7bb7c74
--- /dev/null
+++ b/ansible/roles/firewall/tasks/main.yml
@@ -0,0 +1,2 @@
+---
+- include_tasks: "firewall-{{ state }}.yml"