---
# tasks file for apigee-shutdown-iptables
- block:

  - name: Stop Iptables service
    become: yes
    service:
      name: iptables
      state: stopped
    register: iptables_service

  - name: Indicate whether iptables are disabled
    cache:
      key: 'iptables_disabled'
      value: "{{ (iptables_service.state == 'disabled') or (iptables_service.state == 'stopped') }}"

  - name: Fail playbook if Iptables is running
    fail:
      msg: 'iptables must be disabled, please restart node'
    when: iptables_disabled is defined and not iptables_disabled

  when: (ansible_distribution | lower == "centos" or ansible_distribution | lower == "oraclelinux")  and ansible_distribution_major_version | version_compare("7", "<") and not ansible_virtualization_type | lower == "docker"

- block:

  - name: Stop Firewalld service
    become: yes
    service:
      name: firewalld
      state: stopped
      enabled: no

  when: (ansible_distribution | lower == "centos" or ansible_distribution | lower == "oraclelinux")  and ansible_distribution_major_version | version_compare("7", ">=") and not ansible_virtualization_type | lower == "docker"