salt.master: add firewalld rules

Signed-off-by: Georg Pfuetzenreuter <mail@georg-pfuetzenreuter.net>
2023-01-29 15:50:11 +01:00 · 2023-01-29 15:50:11 +01:00 · 45b53f8392
commit 45b53f8392
parent e395f7f0a3
1 changed files with 10 additions and 0 deletions
--- a/pillar/role/salt/master.sls
+++ b/pillar/role/salt/master.sls
@ -79,3 +79,13 @@ salt:
    auth.ldap.binddn: ${'secret_salt:master:auth.ldap.binddn'}
    auth.ldap.bindpw: ${'secret_salt:master:auth.ldap.bindpw'}
    auth.ldap.filter: ${'secret_salt:master:auth.ldap.filter'}
+
+firewalld:
+  zones:
+    internal:
+      services:
+        - salt-master
+      ports:
+        - comment: salt-api
+          port: 4550
+          protocol: tcp