---
galaxy_info:
  author: Jhon Honce
  description: OpenShift Node
  company: Red Hat, Inc.
  license: Apache License, Version 2.0
  min_ansible_version: 2.1
  platforms:
  - name: EL
    versions:
    - 7
  categories:
  - cloud
dependencies:
- role: openshift_common
- role: openshift_clock
- role: openshift_docker
- role: openshift_node_certificates
- role: openshift_cloud_provider
- role: openshift_node_dnsmasq
  when: openshift.common.use_dnsmasq | bool
- role: os_firewall
  os_firewall_allow:
  - service: Kubernetes kubelet
    port: 10250/tcp
  - service: http
    port: 80/tcp
  - service: https
    port: 443/tcp
  - service: Openshift kubelet ReadOnlyPort
    port: 10255/tcp
  - service: Openshift kubelet ReadOnlyPort udp
    port: 10255/udp
- role: os_firewall
  os_firewall_allow:
  - service: OpenShift OVS sdn
    port: 4789/udp
  when: openshift.common.use_openshift_sdn | bool
- role: os_firewall
  os_firewall_allow:
  - service: Kubernetes service NodePort TCP
    port: "{{ openshift_node_port_range | default('') }}/tcp"
  - service: Kubernetes service NodePort UDP
    port: "{{ openshift_node_port_range | default('') }}/udp"
  when: openshift_node_port_range is defined

---
galaxy_info:
  author: Jhon Honce
  description: OpenShift Node
  company: Red Hat, Inc.
  license: Apache License, Version 2.0
  min_ansible_version: 2.1
  platforms:
  - name: EL
    versions:
    - 7
  categories:
  - cloud
dependencies:
- role: openshift_common
- role: openshift_clock
- role: openshift_docker
- role: openshift_node_certificates
- role: openshift_cloud_provider
- role: os_firewall
  os_firewall_allow:
  - service: Kubernetes kubelet
    port: 10250/tcp
  - service: http
    port: 80/tcp
  - service: https
    port: 443/tcp
  - service: Openshift kubelet ReadOnlyPort
    port: 10255/tcp
  - service: Openshift kubelet ReadOnlyPort udp
    port: 10255/udp
- role: os_firewall
  os_firewall_allow:
  - service: OpenShift OVS sdn
    port: 4789/udp
  when: openshift.common.use_openshift_sdn | bool
- role: os_firewall
  os_firewall_allow:
  - service: Kubernetes service NodePort TCP
    port: "{{ openshift_node_port_range | default('') }}/tcp"
  - service: Kubernetes service NodePort UDP
    port: "{{ openshift_node_port_range | default('') }}/udp"
  when: openshift_node_port_range is defined
- role: openshift_node_dnsmasq
  when: openshift.common.use_dnsmasq | bool

Reorder node dnsmasq dependency s.t. networkmanager is restarted after firewall changes have been applied.
Reorder node dnsmasq dependency s.t. networkmanager is restarted after firewall changes have been applied.
