From: Sébastien Han <seb@redhat.com>
Date: Fri, 15 Jun 2018 19:53:47 +0000 (-0400)
Subject: common: start firewalld if configure_firewall
X-Git-Tag: v3.2.0beta1~21
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=bea4027f0c2b5beebf409a00e7b61e923f4fea0c;p=ceph-ansible.git

common: start firewalld if configure_firewall

Currently we expect that if configure_firewall is set to True to have
firewalld enabled and running. Let's enforce that.

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1589146
Signed-off-by: Sébastien Han <seb@redhat.com>
---

diff --git a/roles/ceph-common/tasks/misc/configure_firewall_rpm.yml b/roles/ceph-common/tasks/misc/configure_firewall_rpm.yml
index b422a4763..9bd452352 100644
--- a/roles/ceph-common/tasks/misc/configure_firewall_rpm.yml
+++ b/roles/ceph-common/tasks/misc/configure_firewall_rpm.yml
@@ -10,6 +10,14 @@
   tags:
     - firewall
 
+- name: start firewalld
+  service:
+    name: firewalld
+    state: started
+    enabled: yes
+  when:
+    - firewalld_pkg_query.rc == 0
+
 - name: open monitor ports
   firewalld:
     service: ceph-mon