Bug 1642574 - don't open port 3000/tcp on WA server for grafana
Summary: don't open port 3000/tcp on WA server for grafana
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Gluster Storage
Classification: Red Hat Storage
Component: web-admin-tendrl-ansible
Version: rhgs-3.4
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: RHGS 3.4.z Batch Update 2
Assignee: Anmol Sachan
QA Contact: Filip Balák
URL:
Whiteboard:
Depends On: 1590416
Blocks: 1516301
TreeView+ depends on / blocked
 
Reported: 2018-10-24 17:17 UTC by Martin Bukatovic
Modified: 2022-07-09 10:16 UTC (History)
5 users (show)

Fixed In Version: tendrl-ansible-1.6.3-9.el7rhgs
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-12-17 17:06:56 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github Tendrl tendrl-ansible issues 127 0 None None None 2018-10-24 17:17:26 UTC
Red Hat Bugzilla 1643605 0 unspecified CLOSED Drop line with port 3000 from WA Port Numbers table 2021-02-22 00:41:40 UTC
Red Hat Product Errata RHSA-2018:3829 0 None None None 2018-12-17 17:07:00 UTC

Internal Links: 1643605

Description Martin Bukatovic 2018-10-24 17:17:27 UTC
Description of problem
======================

Since we are going to resolve BZ 1590416 by changing grafana urls
from: http://rhgswaserver.example.com:3000/dashboard/db/cluster-dashboard
to: http://rhgswaserver.example.com/grafana/dashboard/db/cluster-dashboard

it's no longer necessary to open port 3000/tcp on WA server.

Version-Release number of selected component
============================================

tendrl-ansible-1.6.3-7.1.el7rhgs.noarch

Steps to Reproduce
==================

1. Make sure you are running firewalld on WA server (and make sure on
   extraneous ports are open).
2. Install WA via tendrl-ansible.
3. Check firewall rules on WA server machine.

Actual results
==============

Port 3000/tcp is open during run of tendrl-ansible.

Expected results
================

Port 3000/tcp is still closed after run of tendrl-ansible.

Comment 1 Nishanth Thomas 2018-10-26 10:37:20 UTC
@mbukatov, this require changes in documentation. Could you please raise a DOC Bz to address this?

Comment 2 Martin Bukatovic 2018-10-26 16:50:28 UTC
(In reply to Nishanth Thomas from comment #1)
> @mbukatov, this require changes in documentation. Could you please raise a
> DOC Bz to address this?

Doc BZ 1643605 created.

Comment 3 Martin Bukatovic 2018-10-30 10:36:35 UTC
Providing QA ACK, assuming that BZ 1642574, BZ 1643605 and BZ 1590416 will be
acked together.

Comment 6 Filip Balák 2018-11-16 10:07:31 UTC
Port 3000/TCP is closed in firewall after installation of WA via tendrl-ansible with current version. --> VERIFIED

Tested with:
tendrl-api-1.6.3-8.el7rhgs.noarch
tendrl-node-agent-1.6.3-11.el7rhgs.noarch
tendrl-ui-1.6.3-12.el7rhgs.noarch
tendrl-monitoring-integration-1.6.3-15.el7rhgs.noarch
tendrl-grafana-selinux-1.5.4-2.el7rhgs.noarch
tendrl-notifier-1.6.3-4.el7rhgs.noarch
tendrl-ansible-1.6.3-9.el7rhgs.noarch
tendrl-selinux-1.5.4-2.el7rhgs.noarch
tendrl-api-httpd-1.6.3-8.el7rhgs.noarch
tendrl-grafana-plugins-1.6.3-15.el7rhgs.noarch
tendrl-commons-1.6.3-13.el7rhgs.noarch


With older version the port was open.

Older version:
tendrl-api-httpd-1.6.3-7.el7rhgs.noarch
tendrl-grafana-plugins-1.6.3-14.el7rhgs.noarch
tendrl-ansible-1.6.3-8.el7rhgs.noarch
tendrl-ui-1.6.3-11.el7rhgs.noarch
tendrl-monitoring-integration-1.6.3-14.el7rhgs.noarch
tendrl-grafana-selinux-1.5.4-2.el7rhgs.noarch
tendrl-notifier-1.6.3-4.el7rhgs.noarch
tendrl-selinux-1.5.4-2.el7rhgs.noarch
tendrl-api-1.6.3-7.el7rhgs.noarch
tendrl-commons-1.6.3-13.el7rhgs.noarch
tendrl-node-agent-1.6.3-10.el7rhgs.noarch

Comment 7 errata-xmlrpc 2018-12-17 17:06:56 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:3829


Note You need to log in before you can comment on or make changes to this bug.