From a998f970cf976e65458231d865671ddf492a6e67 Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Tue, 7 Aug 2018 18:51:21 -0400 Subject: [PATCH] Firewall Module - Add Storage Node --- salt/firewall/init.sls | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/salt/firewall/init.sls b/salt/firewall/init.sls index 9f9db9f14..4720d7f32 100644 --- a/salt/firewall/init.sls +++ b/salt/firewall/init.sls @@ -166,6 +166,21 @@ enable_forwardnode_beats_5044_{{ip}}: {% endfor %} +{% for ip in pillar.get('storage_nodes') %} + +enable_storagenode_redis_6379_{{ip}}: + iptables.insert: + - table: filter + - chain: DOCKER-USER + - jump: ACCEPT + - proto: tcp + - source: {{ ip }} + - dport: 6379 + - position: 1 + - save: True + +{% endfor %} + # Allow Beats Endpoints to send their beats traffic {% for ip in pillar.get('beats_endpoint') %}