Merge pull request #5345 from smarterclayton/firewall

Automatic merge from submit-queue

Add `openshift_node_open_ports` to allow arbitrary firewall exposure

It should be possible for an admin to define an arbitrary set of ports
to be exposed on each node that will relate to the cluster function.
This adds a new global variable for the node that supports

    Array(Object{'service':<name>,'port':<port_spec>,'cond':<boolean>})

which is the same format accepted by the firewall role.

@sdodson as discussed, open to alternatives. I used this from origin-gce with

    openshift_node_open_ports:
    - service: Router stats
      port: 1936/tcp
    - service: Open node ports
      port: 9000-10000/tcp
    - service: Open node ports
      port: 9000-10000/udp

Which then allows me to set firewall rules appropriately.

Alternatives considered:
* Simpler external format (have to parse inputs)
* Additional parameter to role - felt ugly

0 files changed, 0 insertions, 0 deletions