Bug 1642574

Summary:	don't open port 3000/tcp on WA server for grafana
Product:	[Red Hat Storage] Red Hat Gluster Storage	Reporter:	Martin Bukatovic <mbukatov>
Component:	web-admin-tendrl-ansible	Assignee:	Anmol Sachan <asachan>
Status:	CLOSED ERRATA	QA Contact:	Filip Balák <fbalak>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	rhgs-3.4	CC:	fbalak, mbukatov, nthomas, rhs-bugs, sankarshan
Target Milestone:	---	Keywords:	ZStream
Target Release:	RHGS 3.4.z Batch Update 2
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	tendrl-ansible-1.6.3-9.el7rhgs	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2018-12-17 17:06:56 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1590416
Bug Blocks:	1516301

Description Martin Bukatovic 2018-10-24 17:17:27 UTC

Description of problem
======================

Since we are going to resolve BZ 1590416 by changing grafana urls
from: http://rhgswaserver.example.com:3000/dashboard/db/cluster-dashboard
to: http://rhgswaserver.example.com/grafana/dashboard/db/cluster-dashboard

it's no longer necessary to open port 3000/tcp on WA server.

Version-Release number of selected component
============================================

tendrl-ansible-1.6.3-7.1.el7rhgs.noarch

Steps to Reproduce
==================

1. Make sure you are running firewalld on WA server (and make sure on
   extraneous ports are open).
2. Install WA via tendrl-ansible.
3. Check firewall rules on WA server machine.

Actual results
==============

Port 3000/tcp is open during run of tendrl-ansible.

Expected results
================

Port 3000/tcp is still closed after run of tendrl-ansible.

Comment 1 Nishanth Thomas 2018-10-26 10:37:20 UTC

@mbukatov, this require changes in documentation. Could you please raise a DOC Bz to address this?

Comment 2 Martin Bukatovic 2018-10-26 16:50:28 UTC

(In reply to Nishanth Thomas from comment #1)
> @mbukatov, this require changes in documentation. Could you please raise a
> DOC Bz to address this?

Doc BZ 1643605 created.

Comment 3 Martin Bukatovic 2018-10-30 10:36:35 UTC

Providing QA ACK, assuming that BZ 1642574, BZ 1643605 and BZ 1590416 will be
acked together.

Comment 6 Filip Balák 2018-11-16 10:07:31 UTC

Port 3000/TCP is closed in firewall after installation of WA via tendrl-ansible with current version. --> VERIFIED

Tested with:
tendrl-api-1.6.3-8.el7rhgs.noarch
tendrl-node-agent-1.6.3-11.el7rhgs.noarch
tendrl-ui-1.6.3-12.el7rhgs.noarch
tendrl-monitoring-integration-1.6.3-15.el7rhgs.noarch
tendrl-grafana-selinux-1.5.4-2.el7rhgs.noarch
tendrl-notifier-1.6.3-4.el7rhgs.noarch
tendrl-ansible-1.6.3-9.el7rhgs.noarch
tendrl-selinux-1.5.4-2.el7rhgs.noarch
tendrl-api-httpd-1.6.3-8.el7rhgs.noarch
tendrl-grafana-plugins-1.6.3-15.el7rhgs.noarch
tendrl-commons-1.6.3-13.el7rhgs.noarch


With older version the port was open.

Older version:
tendrl-api-httpd-1.6.3-7.el7rhgs.noarch
tendrl-grafana-plugins-1.6.3-14.el7rhgs.noarch
tendrl-ansible-1.6.3-8.el7rhgs.noarch
tendrl-ui-1.6.3-11.el7rhgs.noarch
tendrl-monitoring-integration-1.6.3-14.el7rhgs.noarch
tendrl-grafana-selinux-1.5.4-2.el7rhgs.noarch
tendrl-notifier-1.6.3-4.el7rhgs.noarch
tendrl-selinux-1.5.4-2.el7rhgs.noarch
tendrl-api-1.6.3-7.el7rhgs.noarch
tendrl-commons-1.6.3-13.el7rhgs.noarch
tendrl-node-agent-1.6.3-10.el7rhgs.noarch

Comment 7 errata-xmlrpc 2018-12-17 17:06:56 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:3829