Guillaume Abrioux
678e155328
infra: fix a typo in filename
...
configure_firewall is missing its dot.
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
2018-10-10 12:39:04 -04:00
Guillaume Abrioux
f666902d52
infra: add tags for each subcomponent
...
This way we can skip one specific component if needed.
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
2018-10-10 15:44:33 +00:00
Guillaume Abrioux
f8a7ffb085
infra: add firewall configuration for containerized deployment
...
firewalld is available on atomic so there is no reason to not apply
firewall configuration.
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
2018-10-10 15:44:33 +00:00
Guillaume Abrioux
0fb8812e47
infra: update firewall rules, add cluster_network for osds
...
At the moment, all daemons accept connections from 0.0.0.0.
We should at least restrict to public_network and add
cluster_network for OSDs.
Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1541840
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
2018-10-10 15:44:33 +00:00
Guillaume Abrioux
b3a71eeb08
ceph-infra: add new role ceph-infra
...
this role manages ceph infra services such as ntp, firewall, ...
Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
2018-10-10 15:44:33 +00:00