---
r_openshift_loadbalancer_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
r_openshift_loadbalancer_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"

openshift_loadbalancer_frontends: "{{ (openshift_master_api_port
                                       | lib_utils_oo_loadbalancer_frontends(hostvars | lib_utils_oo_select_keys(groups['oo_masters']),
                                                                             openshift_use_nuage | default(false),
                                                                             nuage_mon_rest_server_port | default(none)))
                                       + openshift_loadbalancer_additional_frontends | default([]) }}"
openshift_loadbalancer_backends: "{{ (openshift_master_api_port
                                      | lib_utils_oo_loadbalancer_backends(hostvars | lib_utils_oo_select_keys(groups['oo_masters']),
                                                                           openshift_use_nuage | default(false),
                                                                           nuage_mon_rest_server_port | default(none)))
                                      + openshift_loadbalancer_additional_backends | default([]) }}"

r_openshift_loadbalancer_os_firewall_deny: []
r_openshift_loadbalancer_os_firewall_allow:
- service: haproxy stats
  port: "9000/tcp"
- service: haproxy balance
  port: "{{ openshift_master_api_port }}/tcp"
- service: nuage mon
  port: "{{ nuage_mon_rest_server_port | default(9443) }}/tcp"
  cond: "{{ r_openshift_lb_use_nuage | bool }}"

openshift_docker_service_name: "{{ 'container-engine' if (openshift_docker_use_system_container | default(False) | bool) else 'docker' }}"

# NOTE
# r_openshift_lb_use_nuage_default may be defined external to this role.
# openshift_use_nuage, if defined, may affect other roles or play behavior.
r_openshift_lb_use_nuage_default: "{{ openshift_use_nuage | default(False) }}"
r_openshift_lb_use_nuage: "{{ r_openshift_lb_use_nuage_default }}"