ceph-mgr: Open port for ceph-mgr plugins

Signed-off-by: Boris Ranto <branto@redhat.com>

diff --git a/ansible/playbook.yml b/ansible/playbook.yml
index 2e48c17ccaac13f88bce92c4cdfc1c840011e276..4ca437ff4df881ca93a7a1012848debca556a15e 100644 (file)
--- a/ansible/playbook.yml
+++ b/ansible/playbook.yml
@@ -12,7 +12,7 @@
         systemctl restart ceph-mgr*.service
 
 - hosts:
-  - mgrs[0]
+  - mgrs
   become: true
   roles:
   - ceph-mgr

diff --git a/ansible/roles/ceph-mgr/tasks/main.yml b/ansible/roles/ceph-mgr/tasks/main.yml
index e555bd30ff7891bc3ee678b4575366dcb92bb5ab..bb8e36180c746292b22664d0c1302b3ec6f5f0be 100644 (file)
--- a/ansible/roles/ceph-mgr/tasks/main.yml
+++ b/ansible/roles/ceph-mgr/tasks/main.yml
@@ -1,6 +1,24 @@
 ---
 - include: merge_vars.yml
 
+- name: Check firewalld status
+  shell: "systemctl show firewalld | grep UnitFileState"
+  register: firewalld_status
+  failed_when: false
+  changed_when: false
+
+- name: Open ports for Ceph Manager plugins
+  firewalld:
+    port: "{{ item }}"
+    zone: "{{ firewalld_zone }}"
+    state: enabled
+    immediate: true
+    permanent: true
+  with_items:
+    - 9283/tcp
+    - "{{ dashboard.port }}/tcp"
+  when: "'enabled' in firewalld_status.stdout"
+
 - name: Check to see if the mgr is containerized
   command: "docker inspect {{ item }}"
   with_items: