okd/roles/openshift_loadbalancer/defaults/main.yml

---
r_openshift_loadbalancer_firewall_enabled: "{{ os_firewall_enabled | default(True) }}"
r_openshift_loadbalancer_use_firewalld: "{{ os_firewall_use_firewalld | default(False) }}"

haproxy_frontends:
- name: main
  binds:
  - "*:{{ openshift_master_api_port | default(8443) }}"
  default_backend: default

haproxy_backends:
- name: default
  balance: roundrobin
  servers:
  - name: web01
    address: 127.0.0.1:9000
    opts: check

r_openshift_loadbalancer_os_firewall_deny: []
r_openshift_loadbalancer_os_firewall_allow:
- service: haproxy stats
  port: "9000/tcp"
- service: haproxy balance
  port: "{{ openshift_master_api_port | default(8443) }}/tcp"
- service: nuage mon
  port: "{{ nuage_mon_rest_server_port | default(9443) }}/tcp"
  cond: "{{ r_openshift_lb_use_nuage | bool }}"

# NOTE
# r_openshift_lb_use_nuage_default may be defined external to this role.
# openshift_use_nuage, if defined, may affect other roles or play behavior.
r_openshift_lb_use_nuage_default: "{{ openshift_use_nuage | default(False) }}"
r_openshift_lb_use_nuage: "{{ r_openshift_lb_use_nuage_default }}"