From: Nick Erdmann <n@nirf.de>
Date: Tue, 27 Aug 2019 09:25:02 +0000 (+0200)
Subject: ceph-infra: open ceph iscsi/prometheus port
X-Git-Tag: v4.0.0rc14~4
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=e8e1f310ddce6577a727aab5279d19e521f682c9;p=ceph-ansible.git

ceph-infra: open ceph iscsi/prometheus port

Signed-off-by: Nick Erdmann <n@nirf.de>
(cherry picked from commit 7953ee1b81b03e8b4c542282a900aff2526b9f9b)
---

diff --git a/roles/ceph-infra/tasks/configure_firewall.yml b/roles/ceph-infra/tasks/configure_firewall.yml
index 64aedbcf2..edd2bf771 100644
--- a/roles/ceph-infra/tasks/configure_firewall.yml
+++ b/roles/ceph-infra/tasks/configure_firewall.yml
@@ -154,6 +154,18 @@
       - iscsi_gw_group_name in group_names
     tags: firewall
 
+  - name: open iscsi/prometheus port
+    firewalld:
+      port: "9287/tcp"
+      zone: "{{ ceph_iscsi_firewall_zone }}"
+      permanent: true
+      immediate: true
+      state: enabled
+    when:
+      - iscsi_gw_group_name is defined
+      - iscsi_gw_group_name in group_names
+    tags: firewall
+
   - name: open node_exporter port
     firewalld:
       port: "{{ node_exporter_port }}/tcp"