Refactor ufw.yml to include retries and delay for firewall rules
This commit is contained in:
@@ -7,6 +7,8 @@
|
||||
comment: ansible managed
|
||||
with_items:
|
||||
- "{{ k8s_net_devices }}"
|
||||
retries: 5
|
||||
delay: 10
|
||||
|
||||
- name: Allow out required devices
|
||||
become: true
|
||||
@@ -17,6 +19,8 @@
|
||||
comment: ansible managed
|
||||
with_items:
|
||||
- "{{ k8s_net_devices }}"
|
||||
retries: 5
|
||||
delay: 10
|
||||
|
||||
- name: Allow incoming specific ports
|
||||
become: true
|
||||
@@ -28,6 +32,8 @@
|
||||
comment: ansible managed
|
||||
with_items:
|
||||
- "{{ k8s_incoming_traffic }}"
|
||||
retries: 5
|
||||
delay: 10
|
||||
|
||||
- name: Allow outgoing specified ports
|
||||
become: true
|
||||
@@ -38,6 +44,8 @@
|
||||
comment: ansible managed
|
||||
with_items:
|
||||
- "{{ k8s_outgoing_traffic }}"
|
||||
retries: 5
|
||||
delay: 10
|
||||
|
||||
- name: Allow hosts to access the API
|
||||
become: true
|
||||
@@ -49,3 +57,5 @@
|
||||
comment: ansible managed
|
||||
with_items:
|
||||
- "{{ k8s_allowed_hosts }}"
|
||||
retries: 5
|
||||
delay: 10
|
||||
|
||||
Reference in New Issue
Block a user