Comment 2 for bug 1784957

Revision history for this message
Adam Kulagowski (adam.kulagowski-codilime.com) wrote :

By design we are not touching FW on onPrem host. This decision was made 2 months ago. Currently the playbook for ansible looks like this:

 - name: Deploy iptables
   hosts: gateways
   become: yes
   roles:
     - role: iptables
       when: provider != "onprem"

This change was applied to not break existing FW configuration.