Bug 1311080

Summary:	[RFE] Add firewall support in gdeploy configuration
Product:	[Red Hat Storage] Red Hat Gluster Storage	Reporter:	Sachidananda Urs <surs>
Component:	gdeploy	Assignee:	Nandaja Varma <nvarma>
Status:	CLOSED ERRATA	QA Contact:	SATHEESARAN <sasundar>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	rhgs-3.1	CC:	asrivast, musoni, nvarma, rcyriac, rhinduja, sabose, sasundar, smohan
Target Milestone:	---	Keywords:	FutureFeature, ZStream
Target Release:	RHGS 3.1.3
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	gdeploy-2.0-2	Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-06-23 05:29:22 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1258386, 1311386

Description Sachidananda Urs 2016-02-23 10:57:14 UTC

Add firewall support in gdeploy configuration.

User should be able run firewall-cmd on remote nodes.

Comment 3 SATHEESARAN 2016-05-11 09:15:27 UTC

Tested with gdeploy-2.0-11

There is a 'firewalld' section available to add a firewalld service, open a port, delete a firewalld service, delete a opened port

[firewalld]
action=add
zone=public
permanent=yes
service=glusterfs,rpc-bind
ports=5667/tcp

The above conf file helps in the addition firewalld services - glusterfs, rpc-bind. Also opens the port 5667/tcp for traffic permanently

[firewalld]
action=delete
service=glusterfs

The above conf file removes the firewalld service 'glusterfs'

Comment 5 errata-xmlrpc 2016-06-23 05:29:22 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2016:1250