zuul-jobs/test-playbooks/multinode/multinode_firewall_persistence_vars
Colleen Murphy 18285584f1 Use iptables for openSUSE
In openSUSE Tumbleweed, the SuSEfirewall2 package was removed in favor
of firewalld[1]. This commit updates the iptables persistance tasks to
avoid using SuSEfirewall2 and instead use rc.local to restore saved
rules upon restart, and undefines the iptables_service variable for SUSE
since there is no service to restart any more. See the related change
for image builds[2].

[1] https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
[2] https://review.opendev.org/683236

Change-Id: I0f8d74dd00df192c20b96a9368b964839c306171
2019-09-27 15:45:01 -07:00
..
Debian.yaml Add multi-node integration jobs 2019-07-04 14:16:15 +02:00
default.yaml Add multi-node integration jobs 2019-07-04 14:16:15 +02:00
Gentoo.yaml Add multi-node integration jobs 2019-07-04 14:16:15 +02:00
README.rst Add multi-node integration jobs 2019-07-04 14:16:15 +02:00
RedHat.yaml Add multi-node integration jobs 2019-07-04 14:16:15 +02:00
Ubuntu_trusty.yaml Add multi-node integration jobs 2019-07-04 14:16:15 +02:00

multinode_firewall_persistence_vars

This directory is meant to contain distribution specific variables used in integration tests for the multinode_firewall_persistence role.

The behavior of the with_first_found lookup used with the include_vars module will make it search for the vars directory in the "usual" order of precedence which means if there is a vars directory inside the playbook directory, it will search there first.

This can result in one of two issues:

  1. If you try to prepend {{ role_path }} to workaround this issue with the variable file paths, Zuul will deny the lookup if you are running an untrusted playbook because the role was prepared in a trusted location and Ansible is trying to search outside the work root as a result.
  2. The variables included are the wrong ones -- the ones from playbooks/vars are loaded instead of path/to/<role>/vars

This is why this directory is called multinode_firewall_persistence_vars.