ceph-node-exporter: Open firewall ports

Signed-off-by: Zack Cerza <zack@redhat.com>

diff --git a/ansible/roles/ceph-node-exporter/tasks/configure_firewall.yml b/ansible/roles/ceph-node-exporter/tasks/configure_firewall.yml
new file mode 100644 (file)
index 0000000..b3908ec
--- /dev/null
+++ b/ansible/roles/ceph-node-exporter/tasks/configure_firewall.yml
@@ -0,0 +1,19 @@
+---
+- name: Check firewalld status
+  shell: "systemctl show firewalld | grep UnitFileState"
+  register: firewalld_status
+  failed_when: false
+  changed_when: false
+  tags:
+    - skip_ansible_lint
+
+- name: Open ports for Grafana
+  firewalld:
+    port: "{{ item }}"
+    zone: "{{ firewalld_zone }}"
+    state: enabled
+    immediate: true
+    permanent: true
+  with_items:
+    - 9100/tcp
+  when: "'enabled' in firewalld_status.stdout"

diff --git a/ansible/roles/ceph-node-exporter/tasks/main.yml b/ansible/roles/ceph-node-exporter/tasks/main.yml
index 0c0fbf168b1373530a4c8a0799166c7762d79bfd..b01abb68ff60ee359b3631d58f1ef76740d03903 100644 (file)
--- a/ansible/roles/ceph-node-exporter/tasks/main.yml
+++ b/ansible/roles/ceph-node-exporter/tasks/main.yml
@@ -23,6 +23,8 @@
   tags:
     - node_exporter
 
+- include: configure_firewall.yml
+
 - include: create_service.yml
   when:
     - devel_mode