testnode: Disable firewalld and iptables regardless of OS version

iptables was recently found installed and running on a RHEL7 system.
Previous testnode playbook runs wouldn't catch this since it shouldn't
be installed in the first place.  This change ensures firewalld and
iptables are stopped on all RPM-based distros.

Fixes: http://tracker.ceph.com/issues/16809
Signed-off-by: David Galloway <dgallowa@redhat.com>

diff --git a/roles/testnode/tasks/redhat/rhel_6.yml b/roles/testnode/tasks/redhat/rhel_6.yml
index 3704ca466a8d4c1958980ca4cf8b3c3f0f2aeaf0..e71911e4d81fd04859130e83aea74ae3c6e7913c 100644 (file)
--- a/roles/testnode/tasks/redhat/rhel_6.yml
+++ b/roles/testnode/tasks/redhat/rhel_6.yml
@@ -2,9 +2,4 @@
 - name: Fix broken cloud-init
   include: ../cloud-init.yml
 
-- name: Stop iptables
-  service:
-    name: iptables
-    state: stopped
-
 - include: ../imitate_ubuntu.yml

diff --git a/roles/testnode/tasks/redhat/rhel_7.yml b/roles/testnode/tasks/redhat/rhel_7.yml
index 94ef558e0d6322df73573f09501575296dc88bcb..21a82b89ae47b2d3a767a57687b5af36023adf76 100644 (file)
--- a/roles/testnode/tasks/redhat/rhel_7.yml
+++ b/roles/testnode/tasks/redhat/rhel_7.yml
@@ -2,9 +2,3 @@
 - include: ../nfs.yml
   tags:
     - nfs
-
-- name: Stop firewalld
-  service:
-    name: firewalld
-    state: stopped
-    enabled: no

diff --git a/roles/testnode/tasks/setup-centos.yml b/roles/testnode/tasks/setup-centos.yml
index a9c99657dfb2b761a76623f57f10b005babe13ea..03a467cefc9dae1f82714c207a4a93cc0df97ccf 100644 (file)
--- a/roles/testnode/tasks/setup-centos.yml
+++ b/roles/testnode/tasks/setup-centos.yml
@@ -3,18 +3,4 @@
   include: cloud-init.yml
   when: ansible_distribution_major_version == "6"
 
-- name: Stop iptables
-  service:
-    name: iptables
-    state: stopped
-    enabled: no
-  when: ansible_distribution_major_version == "6"
-
-- name: Stop firewalld
-  service:
-    name: firewalld
-    state: stopped
-    enabled: no
-  when: ansible_distribution_major_version == "7"
-
 - include: imitate_ubuntu.yml

diff --git a/roles/testnode/tasks/setup-fedora.yml b/roles/testnode/tasks/setup-fedora.yml
index 5663ca20625e201afd2da48d4ac22f690ac60efd..e393dddc392e4a43a733d654943381e1673dd670 100644 (file)
--- a/roles/testnode/tasks/setup-fedora.yml
+++ b/roles/testnode/tasks/setup-fedora.yml
@@ -8,9 +8,3 @@
     owner: root
     group: root
     mode: 0644
-
-- name: Disable firewalld
-  service:
-    name: firewalld
-    state: stopped
-    enabled: no

diff --git a/roles/testnode/tasks/yum/firewall.yml b/roles/testnode/tasks/yum/firewall.yml
new file mode 100644 (file)
index 0000000..7835cae
--- /dev/null
+++ b/roles/testnode/tasks/yum/firewall.yml
@@ -0,0 +1,18 @@
+---
+# There have been instances where iptables is installed on EL7 testnodes.
+# This task will make sure both services are stopped and disabled regardless
+# of OS version.
+
+- name: Stop and disable firewalld
+  service:
+    name: firewalld
+    state: stopped
+    enabled: no
+  ignore_errors: true
+
+- name: Stop and disable iptables
+  service:
+    name: iptables
+    state: stopped
+    enabled: no
+  ignore_errors: true

diff --git a/roles/testnode/tasks/yum_systems.yml b/roles/testnode/tasks/yum_systems.yml
index 5ca0d4ec0c3de0c5dcd98c44e096fe3c0ce9747f..ed02f5d1a6697a0bd8075ceee01416fd04562174 100644 (file)
--- a/roles/testnode/tasks/yum_systems.yml
+++ b/roles/testnode/tasks/yum_systems.yml
@@ -64,6 +64,9 @@
   tags:
     - packages
 
+- name: Disable firewall
+  include: yum/firewall.yml
+
 - name: Enable SELinux
   selinux: state=permissive policy=targeted
   tags: