okd/roles/os_firewall/tasks/main.yml

---
- name: Assert - Do not use firewalld on Atomic Host
  assert:
    that: not os_firewall_use_firewalld | bool
    msg: "Firewalld is not supported on Atomic Host"
  when: openshift.common.is_atomic | bool

- include: firewall/firewalld.yml
  when: os_firewall_enabled | bool and os_firewall_use_firewalld | bool

- include: firewall/iptables.yml
  when: os_firewall_enabled | bool and not os_firewall_use_firewalld | bool