diff --git a/tasks/RedHat.yml b/tasks/RedHat.yml index 134740d..319a93e 100644 --- a/tasks/RedHat.yml +++ b/tasks/RedHat.yml @@ -15,3 +15,31 @@ dest: /etc/yum.repos.d/docker-ce.repo mode: 0644 +- name: Register docker firewalld service + template: + src: "etc/firewalld/services/docker-swarm.xml.j2" + dest: "/etc/firewalld/services/docker-swarm.xml" + group: root + owner: root + mode: 0644 + register: need_firewalld_reload + +#- name: Reload firewalld configuration +# service: +# name: firewalld +# state: reloaded +# enabled: yes +- name: reload firewalld to refresh service list + command: firewall-cmd --reload + when: + - need_firewalld_reload is changed + +- name: Open Firewalld + firewalld: + service: docker-swarm + permanent: true + state: enabled + immediate: true +# when: +# - need_firewall == true +# - firewall_name == "firewalld" diff --git a/templates/etc/firewalld/services/docker-swarm.xml.j2 b/templates/etc/firewalld/services/docker-swarm.xml.j2 new file mode 100644 index 0000000..e4b226c --- /dev/null +++ b/templates/etc/firewalld/services/docker-swarm.xml.j2 @@ -0,0 +1,10 @@ + + + Docker swarm mode + Open Docker swarm mode ports. + + + + + +