igw: open iscsi target port

Open the port the iscsi target uses for iscsi traffic.

Signed-off-by: Mike Christie <mchristi@redhat.com>
(cherry picked from commit 5ba7d1671e)
pull/3313/head
Mike Christie 2018-10-30 14:03:37 -05:00 committed by mergify[bot]
parent 44ee5c7495
commit 702f2baccc
1 changed files with 16 additions and 0 deletions

View File

@ -168,6 +168,22 @@
tags:
- firewall
- name: open iscsi target ports
firewalld:
port: "3260/tcp"
zone: "{{ ceph_iscsi_firewall_zone }}"
source: "{{ public_network }}"
permanent: true
immediate: true
state: enabled
notify: restart firewalld
when:
- iscsi_gw_group_name is defined
- iscsi_gw_group_name in group_names
- (firewalld_pkg_query.get('rc', 1) == 0 or is_atomic)
tags:
- firewall
- name: open iscsi api ports
firewalld:
port: "{{ api_port | default(5000) }}/tcp"