Feature #44628
closedcephadm: Add initial firewall management to cephadm
0%
Description
we open both 8080 and 8443 for dashboard even when the default is
https. We should probably do one or the other, not both.
Updated by Sebastian Wagner about 4 years ago
- Tracker changed from Bug to Feature
Updated by Sage Weil about 4 years ago
I'm inclined to just open both, because the dashboard might move between ssl and not ssl. otherwise we need to make the dashboard port as a dependency so that the container is reconfiged..
also note that deploy knows how to open firewall ports, but we never close them again.
Updated by Sebastian Wagner about 4 years ago
yeah, I also don't like to create a new dependency from the dashboard to cephadm
Updated by Sebastian Wagner about 4 years ago
- Priority changed from Normal to Low
Updated by Juan Miguel Olmo Martínez almost 4 years ago
User must be able to decide what ports to use (both http/https).
Updated by Sebastian Wagner almost 4 years ago
for this, we'll need control and information about the ports all the daemons use. Especially if they're configurable, like the dashboard.
- the monitoring services have a dedicated port
- RGW has a port
- MGR has a port
We need a general way of setting the firewall based on the ports configured by the services.
Updated by Sebastian Wagner almost 4 years ago
- Subject changed from cpehadm: firewall: dashboard: we open both 8080 and 8443 to cephadm: Add firewall management to cephadm
Updated by Juan Miguel Olmo Martínez almost 4 years ago
- Assignee set to Juan Miguel Olmo Martínez
Updated by Sebastian Wagner almost 4 years ago
- Related to Feature #44601: cephadm: Mix of hosts: with and without firewall added
Updated by Sebastian Wagner almost 4 years ago
- Related to Feature #44606: cephadm: RGW firewall + static port added
Updated by Juan Miguel Olmo Martínez almost 4 years ago
- Pull request ID set to 35594
Updated by Sebastian Wagner over 3 years ago
- Subject changed from cephadm: Add firewall management to cephadm to cephadm: Add initial firewall management to cephadm
- Status changed from New to Resolved
- Target version set to v15.2.5