Actions
action #129083
closed[qem][qe-core] Enhance firewall zones/services configuration in AutoYaST configuration file
Status:
Resolved
Priority:
Normal
Assignee:
Category:
Enhancement to existing tests
Target version:
Start date:
2023-05-06
Due date:
% Done:
0%
Estimated time:
Difficulty:
Description
Description¶
We may need to make sure the system installed via autoyast can get the same firewall configuration as we do with interactive installation.
However, currently we are maintaining a single configuration file for each sle15/sle12 platform.
So I will try to do some enhancement to current autoyast template file. But we may need to do enough VRs to make sure the changes don't introduce new issues.
Action items¶
- Current firewall configuration seems fine, but we may consider the service
ssh
and port22
due to different requirements on each platform [for s390x and powerVM, we need unblock it due to remote worker access needs ssh port open] - Use as few lines as we can to define firewall, then we can get default firewall setting [the same configuration as we do via interactive install]
- Don't change the default firewall behavior as interactive installation, that will cause problems and will miss test coverage.
Actions