ceph
/
ceph-ansible
mirror of https://github.com/ceph/ceph-ansible.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Only check ports if NMAP exists 

Signed-off-by: Daniel Gryniewicz <dang@redhat.com>
pull/882/head
Daniel Gryniewicz 2016-06-22 10:10:16 -04:00
parent 3e32eebdc1
commit 71e7aa348e
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
roles/ceph-common/tasks/checks/check_firewall.yml
View File

@ -27,8 +27,8 @@
msg: "Please allow port 6789 on your firewall" msg: "Please allow port 6789 on your firewall"
when: when:
- mon_group_name in group_names - mon_group_name in group_names
- monportstate.rc == 0
- nmapexist.rc == 0 - nmapexist.rc == 0
- monportstate.rc == 0
- name: check if osd and mds range is not filtered (osd hosts) - name: check if osd and mds range is not filtered (osd hosts)
local_action: shell set -o pipefail && nmap -p 6800-7300 {{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} | grep -sqo -e filtered -e '0 hosts up' local_action: shell set -o pipefail && nmap -p 6800-7300 {{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} | grep -sqo -e filtered -e '0 hosts up'
@ -44,8 +44,8 @@
msg: "Please allow range from 6800 to 7300 on your firewall" msg: "Please allow range from 6800 to 7300 on your firewall"
when: when:
- osd_group_name in group_names - osd_group_name in group_names
- osdrangestate.rc == 0
- nmapexist.rc == 0 - nmapexist.rc == 0
- osdrangestate.rc == 0
- name: check if osd and mds range is not filtered (mds hosts) - name: check if osd and mds range is not filtered (mds hosts)
local_action: shell set -o pipefail && nmap -p 6800-7300 {{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} | grep -sqo -e filtered -e '0 hosts up' local_action: shell set -o pipefail && nmap -p 6800-7300 {{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} | grep -sqo -e filtered -e '0 hosts up'
@ -61,8 +61,8 @@
msg: "Please allow range from 6800 to 7300 on your firewall" msg: "Please allow range from 6800 to 7300 on your firewall"
when: when:
- mds_group_name in group_names - mds_group_name in group_names
- mdsrangestate.rc == 0
- nmapexist.rc == 0 - nmapexist.rc == 0
- mdsrangestate.rc == 0
- name: check if rados gateway port is not filtered - name: check if rados gateway port is not filtered
local_action: shell set -o pipefail && nmap -p {{ radosgw_civetweb_port }} {{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} | grep -sqo -e filtered -e '0 hosts up' local_action: shell set -o pipefail && nmap -p {{ radosgw_civetweb_port }} {{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} | grep -sqo -e filtered -e '0 hosts up'
@ -78,8 +78,8 @@
msg: "Please allow port {{ radosgw_civetweb_port }} on your firewall" msg: "Please allow port {{ radosgw_civetweb_port }} on your firewall"
when: when:
- rgw_group_name in group_names - rgw_group_name in group_names
- rgwportstate.rc == 0
- nmapexist.rc == 0 - nmapexist.rc == 0
- rgwportstate.rc == 0
- name: check if NFS ports are not filtered - name: check if NFS ports are not filtered
local_action: shell set -o pipefail && nmap -p 111,2049 {{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} | grep -sqo -e filtered -e '0 hosts up' local_action: shell set -o pipefail && nmap -p 111,2049 {{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }} | grep -sqo -e filtered -e '0 hosts up'
@ -95,5 +95,5 @@
msg: "Please allow ports 111 and 2049 on your firewall" msg: "Please allow ports 111 and 2049 on your firewall"
when: when:
- nfs_group_name in group_names - nfs_group_name in group_names
- nfsportstate.rc == 0
- nmapexist.rc == 0 - nmapexist.rc == 0
- nfsportstate.rc == 0