From: Mike Christie <mchristi@redhat.com>
Date: Tue, 30 Oct 2018 19:03:37 +0000 (-0500)
Subject: igw: open iscsi target port
X-Git-Tag: v3.2.0rc2~1
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=702f2baccc0e6d0f6e33f64cbe218b8dfa94d4b2;p=ceph-ansible.git

igw: open iscsi target port

Open the port the iscsi target uses for iscsi traffic.

Signed-off-by: Mike Christie <mchristi@redhat.com>
(cherry picked from commit 5ba7d1671ed421995e263f6abf6c2ccffac12422)
---

diff --git a/roles/ceph-infra/tasks/configure_firewall.yml b/roles/ceph-infra/tasks/configure_firewall.yml
index 9650252b0..e316c7f63 100644
--- a/roles/ceph-infra/tasks/configure_firewall.yml
+++ b/roles/ceph-infra/tasks/configure_firewall.yml
@@ -168,6 +168,22 @@
   tags:
     - firewall
 
+- name: open iscsi target ports
+  firewalld:
+    port: "3260/tcp"
+    zone: "{{ ceph_iscsi_firewall_zone }}"
+    source: "{{ public_network }}"
+    permanent: true
+    immediate: true
+    state: enabled
+  notify: restart firewalld
+  when:
+    - iscsi_gw_group_name is defined
+    - iscsi_gw_group_name in group_names
+    - (firewalld_pkg_query.get('rc', 1) == 0 or is_atomic)
+  tags:
+    - firewall
+
 - name: open iscsi api ports
   firewalld:
     port: "{{ api_port | default(5000) }}/tcp"