defaults: set default `configure_firewall` to `True`

Let's configure firewalld by default.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1526400
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>

diff --git a/group_vars/all.yml.sample b/group_vars/all.yml.sample
index d80ac21c226c974bb3e7ea53782981da777bec43..738efeed5eb7cf6a6e2585958d5806f55a4ba131 100644 (file)
--- a/group_vars/all.yml.sample
+++ b/group_vars/all.yml.sample
@@ -59,7 +59,7 @@ dummy:
 # If configure_firewall is true, then ansible will try to configure the
 # appropriate firewalling rules so that Ceph daemons can communicate
 # with each others.
-#configure_firewall: False
+#configure_firewall: True
 
 # Open ports on corresponding nodes if firewall is installed on it
 #ceph_mon_firewall_zone: public

diff --git a/group_vars/rhcs.yml.sample b/group_vars/rhcs.yml.sample
index 68b69ed402e844cbccbaecc0ca4dcdda961454c4..b9cac0d62091198818d6f36039cec88515ef0f0e 100644 (file)
--- a/group_vars/rhcs.yml.sample
+++ b/group_vars/rhcs.yml.sample
@@ -59,7 +59,7 @@ fetch_directory: ~/ceph-ansible-keys
 # If configure_firewall is true, then ansible will try to configure the
 # appropriate firewalling rules so that Ceph daemons can communicate
 # with each others.
-#configure_firewall: False
+#configure_firewall: True
 
 # Open ports on corresponding nodes if firewall is installed on it
 #ceph_mon_firewall_zone: public

diff --git a/roles/ceph-defaults/defaults/main.yml b/roles/ceph-defaults/defaults/main.yml
index 7277a017133f9a996d80f7e3a9e3b184563dadb9..917b8687785207de92416c83ce403e542d73ab5d 100644 (file)
--- a/roles/ceph-defaults/defaults/main.yml
+++ b/roles/ceph-defaults/defaults/main.yml
@@ -51,7 +51,7 @@ mgr_group_name: mgrs
 # If configure_firewall is true, then ansible will try to configure the
 # appropriate firewalling rules so that Ceph daemons can communicate
 # with each others.
-configure_firewall: False
+configure_firewall: True
 
 # Open ports on corresponding nodes if firewall is installed on it
 ceph_mon_firewall_zone: public