aboutsummaryrefslogtreecommitdiffstats
path: root/deployment/noheat/cluster-rke/ansible/roles/create_bastion/tasks/main.yml
blob: 8189968c4761f959e82166cc792b46be5b5c3b13 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
- name: Add cluster hostnames to /etc/hosts file
  lineinfile:
    path: /etc/hosts
    line: "{{ ansible_default_ipv4.address + ' ' + ansible_hostname }}"

- name: Enable IP forwarding
  ansible.posix.sysctl:
    name: net.ipv4.ip_forward
    value: '1'
    sysctl_set: yes

- name: Create PREROUTING rule
  ansible.builtin.iptables:
    table: nat
    chain: PREROUTING
    protocol: tcp
    destination_port: "{{ destination.port }}"
    jump: DNAT
    to_destination: "{{ destination.address }}:{{ destination.port }}"

- name: Create OUTPUT rule
  ansible.builtin.iptables:
    table: nat
    chain: OUTPUT
    protocol: tcp
    destination: "{{ ansible_default_ipv4.address }}"
    destination_port: "{{ destination.port }}"
    jump: DNAT
    to_destination: "{{ destination.address }}"

- name: Enable masquerading
  ansible.builtin.iptables:
    table: nat
    chain: POSTROUTING
    jump: MASQUERADE