manage nmtrust excluded networks

group_vars/all

@@ -59,6 +59,13 @@ network:
         - d2642f7e-9e58-4b00-82f8-26b4ef76a54e
         - f74f2bd5-8748-4e1e-98f9-dae2dd44b916
         - a04ea39b-eca8-39d0-9b4a-45badc25b359
+    excluded_networks:
+        # Docker
+        - docker*
+        - br-*
+        # libvirt
+        - virbr*
+        - vnet*
 
 editors:
     - gvim

roles/nmtrust/tasks/main.yml

@@ -17,6 +17,11 @@
       src: trusted_networks.j2
       dest: /etc/nmtrust/trusted_networks
 
+- name: Push excluded network list
+  template:
+      src: excluded_networks.j2
+      dest: /etc/nmtrust/excluded_networks
+
 - name: Verify trusted unit list exists
   copy:
       content: ""

roles/nmtrust/templates/excluded_networks.j2

@@ -0,0 +1,4 @@
+# {{ ansible_managed }}
+{% for network in network.excluded_networks %}
+{{ network }}
+{% endfor %}