action #128999
Updated by mkittler 12 months ago
## Motivation
In https://suse.slack.com/archives/C02CANHLANP/p1683638470261569 the question came up if the message about "can not upgrade ws server" something is related to VPN selection of users which of course it's not. Seems that at least one prague worker was not properly configured for developer mode. Our salt states already cover some firewall configuration but apparently not all, see https://gitlab.suse.de/openqa/salt-states-openqa/-/blob/master/openqa/worker.sls#L245
## Acceptance criteria
* **AC1:** It is understood why our initial setup of new prague workers did not include this
* **AC2:** All OSD machines have been crosschecked for the missing configuration
* **AC3:** salt-states-openqa must cover the configuration
## Suggestions
* See https://open.qa/docs/images/architecture.svg for required port ranges
* Look at documentation for configuring firewalld manually (https://open.qa/docs/#_configure_firewalld)