From 44ee5c74956c534bd0efac491c5ab7da43c02c09 Mon Sep 17 00:00:00 2001 From: Mike Christie Date: Thu, 8 Nov 2018 15:23:24 -0600 Subject: [PATCH] igw: use api_port variable for firewall port setting Don't hard code api port because it might be overridden by the user. Signed-off-by: Mike Christie (cherry picked from commit e2f1f81de4c829b52760dc6a98e2f8751d51255e) --- roles/ceph-infra/tasks/configure_firewall.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/ceph-infra/tasks/configure_firewall.yml b/roles/ceph-infra/tasks/configure_firewall.yml index 1c905d440..9650252b0 100644 --- a/roles/ceph-infra/tasks/configure_firewall.yml +++ b/roles/ceph-infra/tasks/configure_firewall.yml @@ -168,9 +168,9 @@ tags: - firewall -- name: open iscsi ports +- name: open iscsi api ports firewalld: - port: "5000/tcp" + port: "{{ api_port | default(5000) }}/tcp" zone: "{{ ceph_iscsi_firewall_zone }}" source: "{{ public_network }}" permanent: true