ceph-infra: open ceph iscsi/prometheus port

Signed-off-by: Nick Erdmann <n@nirf.de> (cherry picked from commit 7953ee1b81)
2019-08-27 11:25:02 +02:00 · 2019-08-27 11:25:02 +02:00 · e8e1f310dd
parent 0d55eeba79
commit e8e1f310dd
1 changed files with 12 additions and 0 deletions
--- a/roles/ceph-infra/tasks/configure_firewall.yml
+++ b/roles/ceph-infra/tasks/configure_firewall.yml
@ -154,6 +154,18 @@
      - iscsi_gw_group_name in group_names
    tags: firewall

+  - name: open iscsi/prometheus port
+    firewalld:
+      port: "9287/tcp"
+      zone: "{{ ceph_iscsi_firewall_zone }}"
+      permanent: true
+      immediate: true
+      state: enabled
+    when:
+      - iscsi_gw_group_name is defined
+      - iscsi_gw_group_name in group_names
+    tags: firewall
+
  - name: open node_exporter port
    firewalld:
      port: "{{ node_exporter_port }}/tcp"