Ceph » Orchestrator

I'm inclined to just open both, because the dashboard might move between ssl and not ssl. otherwise we need to make the dashboard port as a dependency so that the container is reconfiged..

also note that deploy knows how to open firewall ports, but we never close them again.

yeah, I also don't like to create a new dependency from the dashboard to cephadm

User must be able to decide what ports to use (both http/https).

for this, we'll need control and information about the ports all the daemons use. Especially if they're configurable, like the dashboard.

• the monitoring services have a dedicated port
• RGW has a port
• MGR has a port

We need a general way of setting the firewall based on the ports configured by the services.