From 7fa7d45e0a6784ee852198f4ee67838fc9c01617 Mon Sep 17 00:00:00 2001
From: Timo Makinen <tmakinen@foo.sh>
Date: Sat, 11 Sep 2021 17:35:53 +0000
Subject: [PATCH] Add gluster firewall rules for registry hosts

---
 group_vars/registry.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/group_vars/registry.yml b/group_vars/registry.yml
index f853621..4f2ce7f 100644
--- a/group_vars/registry.yml
+++ b/group_vars/registry.yml
@@ -1,8 +1,10 @@
 ---
 datadisks:
   - 100
-
+glusterfs_group: registry
 firewall_in:
   - {proto: tcp, port: 22, from: [172.20.20.0/22]}
   - {proto: tcp, port: 443}
   - {proto: tcp, port: 4949, from: [172.20.20.0/22]}
+  - {proto: tcp, port: 24007, from: "{{ groups[glusterfs_group] }}"}
+  - {proto: tcp, port: "49152:49170", from: "{{ groups[glusterfs_group] }}"}