ceph-prometheus: Open port 9090

https://github.com/ceph/cephmetrics/issues/214

Signed-off-by: Zack Cerza <zack@redhat.com>

diff --git a/ansible/roles/ceph-prometheus/tasks/configure_firewall.yml b/ansible/roles/ceph-prometheus/tasks/configure_firewall.yml
new file mode 100644 (file)
index 0000000..fb4ad61
--- /dev/null
+++ b/ansible/roles/ceph-prometheus/tasks/configure_firewall.yml
@@ -0,0 +1,19 @@
+---
+- name: Check firewalld status
+  shell: "systemctl show firewalld | grep UnitFileState"
+  register: firewalld_status
+  failed_when: false
+  changed_when: false
+  tags:
+    - skip_ansible_lint
+
+- name: Open port for prometheus
+  firewalld:
+    port: "{{ item }}"
+    zone: "{{ firewalld_zone }}"
+    state: enabled
+    immediate: true
+    permanent: true
+  with_items:
+    - 9090/tcp
+  when: "'enabled' in firewalld_status.stdout"

diff --git a/ansible/roles/ceph-prometheus/tasks/main.yml b/ansible/roles/ceph-prometheus/tasks/main.yml
index 6c58e6114637510b2c703975177f7aa9d9e8fcae..7079c37ac15832f07599a093585a5bb5444fb6b2 100644 (file)
--- a/ansible/roles/ceph-prometheus/tasks/main.yml
+++ b/ansible/roles/ceph-prometheus/tasks/main.yml
@@ -7,6 +7,10 @@
   meta: end_play
   when: backend.metrics != 'mgr' or backend.storage != 'prometheus'
 
+- import_tasks: configure_firewall.yml
+  tags:
+    - firewall
+
 - name: Create prometheus data directory
   file:
     path: "{{ prometheus.data_dir }}"