Merge pull request #11769 from aveshagarwal/kubernetes-ansible-fixes

contrib/ansible/roles/etcd/tasks/iptables.yml

@@ -9,7 +9,7 @@
 
 - name: Open etcd client port with iptables
   command: /sbin/iptables -I INPUT 1 -p tcp --dport {{ item }} -j ACCEPT -m comment --comment "etcd"
-  when: etcd not in iptablesrules.stdout
+  when: "'etcd' not in iptablesrules.stdout"
   notify:
     - Save iptables rules
   with_items:

contrib/ansible/roles/master/tasks/iptables.yml

@@ -6,10 +6,10 @@
 
 - name: Open apiserver port with iptables
   command: /sbin/iptables -I INPUT 1 -p tcp --dport 443 -j ACCEPT -m comment --comment "kube-apiserver"
-  when: kube-apiserver not in iptablesrules.stdout
+  when: "'kube-apiserver' not in iptablesrules.stdout"
   notify:
     - restart iptables
 
 - name: Save iptables rules
   command: service iptables save
-  when: kube-apiserver not in iptablesrules.stdout
+  when: "'kube-apiserver' not in iptablesrules.stdout"

contrib/ansible/roles/node/tasks/iptables.yml

@@ -9,10 +9,10 @@
 
 - name: Open kubelet port with iptables
   command: /sbin/iptables -I INPUT 1 -p tcp --dport 10250 -j ACCEPT -m comment --comment "kubelet"
-  when: kubelet not in iptablesrules.stdout
+  when: "'kubelet' not in iptablesrules.stdout"
   notify:
     - restart iptables
 
 - name: Save iptables rules
   command: service iptables save
-  when: kubelet not in iptablesrules.stdout
+  when: "'kubelet' not in iptablesrules.stdout"