fwdriver: open necessary ports for head machine installing

pillar/installer.sls

@@ -44,6 +44,7 @@
 
 #fwdriver:
 #  queue_name: cloud-6801
+#  open_ports: False
 #  gateway: 10.0.255.254
 #  external_net: 10.0.0.115/16
 #  external_if: eth0

pillar/ports.sls

+rabbitmq_ports:
+
+  - 
+    port: 5672
+    proto: tcp
+
+
+libvirt_ports:
+
+  - 
+    range: 
+      - 49152
+      - 49215
+    proto: tcp
+
+  - 
+    port: 16509
+    proto: tcp
+
+
+nfs_server_ports:
+
+  - 
+    port: 2049
+    proto: tcp
+
+  - 
+    port: 2049
+    proto: udp
+
+  - 
+    port: 111
+    proto: tcp
+  
+  - 
+    port: 111
+    proto: udp
+
+  - 
+    port: 20048
+    proto: tcp
+
+  - 
+    port: 20048
+    proto: udp
+
+  - 
+    port: 33100
+    proto: tcp
+
+  - 
+    port: 33100
+    proto: udp
+
+  - 
+    port: 32803
+    proto: tcp
+
+  - 
+    port: 32769
+    proto: udp

pillar/top.sls

@@ -12,3 +12,4 @@ base:
     - manager
     - common
     - installer
+    - ports

salt/fwdriver/files/open_ports.sh

+#!/bin/bash
+
+{% macro open_ports(port_list) -%}
+    {% for item in port_list %}
+        $ADDRULE\
+                 {% if 'range' in item.keys() -%}
+                     --port-range {{ item.range[0] }} {{ item.range[1] }}\
+                \{% else %}\
+                     --port {{ item.port }}\
+                 {%- endif %}
+                 --protocol {{ item.proto }}\
+                 --firewall {{ pillar['fwdriver']['queue_name']  }}\
+                 --vlan-group net\
+                 --owner {{ pillar['admin_user'] }}
+    {% endfor %}
+{%- endmacro %}
+
+source /home/{{ pillar['user'] }}/.virtualenvs/circle/bin/activate
+source /home/{{ pillar['user'] }}/.virtualenvs/circle/bin/postactivate
+
+ADDRULE="python /home/{{ pillar['user'] }}/circle/circle/manage.py add_rule"
+
+
+# RabbitMQ ports
+{{ open_ports(pillar['rabbitmq_ports']) }}
+
+# libvirt ports
+{{ open_ports(pillar['libvirt_ports']) }}
+
+# NFS server ports
+{{ open_ports(pillar['nfs_server_ports']) }}
+

salt/fwdriver/init.sls

@@ -59,3 +59,13 @@ firewall-init:
   service:
     - enabled
 
+{# TODO: standalone firewall mode #}
+{% if pillar['fwdriver']['open_ports'] %}
+salt://fwdriver/files/open_ports.sh:
+  cmd.script:
+    - template: jinja
+    - user: {{ pillar['user'] }}
+    - require:
+      - service: firewall
+{% endif %}
+