Merge pull request #487 from cultuurnet/feature/UPS-5319

[UPS-5319] Allow incoming ES traffic when remote access is enabled

Author: paulherbosch

manifests/elasticsearch.pp

@@ -91,6 +91,9 @@
       before  => Class['elasticsearch']
     }
 
+    realize Firewall['600 accept elasticsearch http traffic']
+    realize Firewall['600 accept elasticsearch cluster traffic']
+
     $es_config = {
       'network.host'                           => [ "${::ipaddress_eth0}", "127.0.0.1" ],
       'http.cors.enabled'                      => true,

manifests/firewall/rules.pp

@@ -71,4 +71,16 @@
     dport  => '2003',
     action => 'accept'
   }
+
+  @firewall { '600 accept elasticsearch http traffic':
+    proto  => 'tcp',
+    dport  => '9200',
+    action => 'accept'
+  }
+
+  @firewall { '600 accept elasticsearch cluster traffic':
+    proto  => 'tcp',
+    dport  => '9300',
+    action => 'accept'
+  }
 }