Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ansible/platform] Firewalld is not configured - communication failures. #425

Open
EmptyByte opened this issue Oct 28, 2024 · 2 comments
Open

Comments

@EmptyByte
Copy link

Firewalld needs to be configured to allow communication between hosts otherwise tasks such as below will fail.
Alternatively, inform that firewalld is not supported in your documentation and that the user has to take care of it.

- name: Make sure xray is up and running
  ansible.builtin.uri:
    url: http://127.0.0.1:8082/router/api/v1/system/health
    timeout: 130
    status_code: 200
  register: result
  until: result is succeeded
  retries: 25
  delay: 5
  when:
    - not ansible_check_mode
    - xray_start_service | bool
@chukka
Copy link
Collaborator

chukka commented Nov 18, 2024

@EmptyByte Can you please share more info what was done in firewalld to allow communication b/w hosts . We internally test but never faced any issues before .

@chukka chukka added the question Further information is requested label Nov 18, 2024
@EmptyByte
Copy link
Author

EmptyByte commented Nov 18, 2024

Hi @chukka I had to stop firewalld on all servers before executing the Jfrog Platform Play. Once completed, I started firewalld and allowed connections from the hosts in the inventory.

firewall-cmd --permanent --add-rich-rule="rule family='ipv4' source address='x.x.x.x' accept"
firewall-cmd --reload

Also had to open port 80 and 443 on Artifactory server.

I could see a task that loops over inventory groups and configures the firewall with rich rules (ansible.posix.firewalld).

@chukka chukka added documentation and removed question Further information is requested labels Nov 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants