tripleo-quickstart-extras/roles/baremetal-prep-overcloud/tasks/allow-traffic-for-controller.yml

---

- name: Copy over allow traffic script template
  template:
    src: allow-traffic-for-controller.sh.j2
    dest: "{{ working_dir }}/allow-traffic-for-controller.sh"
    mode: 0755

- name: Allow traffic for the controller
  become: true
  shell: >
    "{{ working_dir }}"/allow-traffic-for-controller.sh    
  when:
    - network_isolation|bool
    - undercloud_type == "baremetal"
    - not overcloud_ipv6|bool
    - release in ['newton','ocata','pike','queens'] or not containerized_undercloud|bool