From b4dbe99b11a22dbca3a85c0ef02feb40a2c4aeaf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jos=C3=A9=20Manuel=20Dom=C3=ADnguez?=
 <dominguj@informatik.uni-freiburg.de>
Date: Fri, 17 Nov 2023 10:49:29 +0100
Subject: [PATCH] Open HTCondor shared port in the HTCondor clusters playbook

Open the HTCondor shared port in the firewall. Do not open it for the systemd-nspawn container (the firewall is managed by the host).
---
 htcondor.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/htcondor.yml b/htcondor.yml
index 20296af02..ad799d8ee 100644
--- a/htcondor.yml
+++ b/htcondor.yml
@@ -228,6 +228,14 @@
         mode: "0644"
       notify: Reload HTCondor
 
+    - name: Open HTCondor shared port in the firewall.
+      ansible.posix.firewalld:
+        port: "{{ htcondor_port }}/tcp"
+        state: enabled
+        permanent: true
+        immediate: true
+      when: inventory_hostname != "nspawn-htcondor.sn06.galaxyproject.eu"
+
     - name: Check if HTCondor is running.
       ansible.builtin.service_facts:
       register: service_facts