18285584f1
In openSUSE Tumbleweed, the SuSEfirewall2 package was removed in favor of firewalld[1]. This commit updates the iptables persistance tasks to avoid using SuSEfirewall2 and instead use rc.local to restore saved rules upon restart, and undefines the iptables_service variable for SUSE since there is no service to restart any more. See the related change for image builds[2]. [1] https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html [2] https://review.opendev.org/683236 Change-Id: I0f8d74dd00df192c20b96a9368b964839c306171 |
||
---|---|---|
.. | ||
Debian.yaml | ||
default.yaml | ||
Gentoo.yaml | ||
README.rst | ||
RedHat.yaml | ||
Ubuntu_trusty.yaml |
multinode_firewall_persistence_vars
This directory is meant to contain distribution specific variables
used in integration tests for the
multinode_firewall_persistence
role.
The behavior of the with_first_found
lookup used with
the include_vars
module will make it search for the
vars
directory in the "usual" order of precedence which
means if there is a vars
directory inside the playbook
directory, it will search there first.
This can result in one of two issues:
- If you try to prepend
{{ role_path }}
to workaround this issue with the variable file paths, Zuul will deny the lookup if you are running an untrusted playbook because the role was prepared in a trusted location and Ansible is trying to search outside the work root as a result. - The variables included are the wrong ones -- the ones from
playbooks/vars
are loaded instead ofpath/to/<role>/vars
This is why this directory is called
multinode_firewall_persistence_vars
.