- ---
- os_firewall_enabled: True
- # TODO: Upstream kubernetes only supports iptables currently
- # TODO: it might be possible to still use firewalld if we wire up the created
- # chains with the public zone (or the zone associated with the correct
- # interfaces)
- os_firewall_use_firewalld: False
- os_firewall_allow: []
- os_firewall_deny: []
|