Disable firewall on gateway

Flush all iptables rules on the gateway at the end of orchestrate PNDA-4765
pndaproject · Aug 10, 2018 · 2f65aaf · 2f65aaf
1 parent ddf768a
commit 2f65aaf
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/salt/firewall/clear.sls b/salt/firewall/clear.sls
@@ -0,0 +1,8 @@
+firewall-flush:
+  iptables.flush
+
+firewall-disable-saved-rules:
+  file.replace:
+    - name: /etc/rc.local
+    - pattern: '^(.*)iptables.conf(.*)'
+    - repl: ''
diff --git a/salt/orchestrate/pnda.sls b/salt/orchestrate/pnda.sls
@@ -286,6 +286,14 @@ orchestrate-pnda-haproxy:
     - timeout: 120
     - queue: True
 
+orchestrate-pnda-install_clear_fw:
+  salt.state:
+    - tgt: 'G@pnda_cluster:{{pnda_cluster}} and ( G@roles:haproxy or G@roles:knox )'
+    - tgt_type: compound
+    - sls: firewall.clear
+    - timeout: 120
+    - queue: True
+
 orchestrate-pnda-install_remove_new_node_markers:
   salt.state:
     - tgt: 'G@pnda_cluster:{{pnda_cluster}}'