From 89032ad7a8f8471b48da758650b9eac777d4f652 Mon Sep 17 00:00:00 2001
From: Jameson Pugh <jameson.pugh@nghs.com>
Date: Mon, 7 Feb 2022 14:15:08 -0500
Subject: [PATCH] +firewall tag

---
 tasks/firewall_rules.yml |  8 ++++++++
 tasks/main.yml           | 18 ++++++++++++++++++
 2 files changed, 26 insertions(+)

diff --git a/tasks/firewall_rules.yml b/tasks/firewall_rules.yml
index eb8dfb9..968545e 100644
--- a/tasks/firewall_rules.yml
+++ b/tasks/firewall_rules.yml
@@ -2,14 +2,20 @@
 - name: set epic_firewall_short
   ansible.builtin.set_fact:
     epic_firewall_short: "{{ item['name'] }}"
+  tags:
+    - firewall
 
 - name: set epic_firewall_description
   ansible.builtin.set_fact:
     epic_firewall_description: "{{ item['description'] }}"
+  tags:
+    - firewall
 
 - name: set epic_firewall_ports
   ansible.builtin.set_fact:
     epic_firewall_ports: "{{ item['ports'] }}"
+  tags:
+    - firewall
 
 - name: copy {{ epic_firewall_short }} firewall rule
   ansible.builtin.template:
@@ -18,3 +24,5 @@
     owner: root
     group: root
     mode: 0660
+  tags:
+    - firewall
diff --git a/tasks/main.yml b/tasks/main.yml
index b92098b..89b61d9 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -55,6 +55,8 @@
       - dstat
     state: present
   when: ansible_facts['distribution_major_version'] < '8'
+  tags:
+    - firewall
 
 - name: ensure packges needed for Epic and role are installed
   ansible.builtin.dnf:
@@ -84,6 +86,8 @@
       - bcc-tools
     state: present
   when: ansible_facts['distribution_major_version'] > '7'
+  tags:
+    - firewall
 
 ### Post package install tasks
 - name: gather package facts
@@ -425,6 +429,8 @@
 ### Setup firewall rules
 - name: refresh service facts
   service_facts:
+  tags:
+    - firewall
 
 - name: start firewalld
   ansible.builtin.systemd:
@@ -432,18 +438,26 @@
     state: started
     enabled: true
   when: ansible_env['container'] is not defined
+  tags:
+    - firewall
 
 - name: Setup firewall rules
   include_tasks: firewall_rules.yml
   loop: "{{ odb_firewalld_services }}"
+  tags:
+    - firewall
 
 - name: refresh service facts
   service_facts:
+  tags:
+    - firewall
 
 - name: reload firewalld
   command: firewall-cmd --reload
   changed_when: false
   when: ansible_facts['services']['firewalld.service']['state'] == 'running'
+  tags:
+    - firewall
 
 - name: enable dynamic Epic firewall rules
   ansible.posix.firewalld:
@@ -453,6 +467,8 @@
     state: enabled
   loop: "{{ odb_firewalld_services }}"
   when: ansible_facts['services']['firewalld.service']['state'] == 'running'
+  tags:
+    - firewall
 
 - name: Enable SFTP port on firewall
   ansible.posix.firewalld:
@@ -460,6 +476,8 @@
     permanent: true
     state: enabled
   when: ansible_facts['services']['firewalld.service']['state'] == 'running'
+  tags:
+    - firewall
 
 ### Get status of /etc/vmware-tools before trying to copy file there
 - name: get status of /etc/vmware-tools directory