From ce00be7acb8fbd426988e248997a7eae064f7089 Mon Sep 17 00:00:00 2001
From: Karol Babioch <kbabioch@suse.de>
Date: Nov 13 2019 22:10:52 +0000
Subject: Open ports for monitoring in secure zones


These are the ports used for monitoring (check_mk and nrpe). This
changes allow the monitoring to access those ports.

---

diff --git a/pillar/id/slimhat_infra_opensuse_org.sls b/pillar/id/slimhat_infra_opensuse_org.sls
index e8610f8..44ab4c9 100644
--- a/pillar/id/slimhat_infra_opensuse_org.sls
+++ b/pillar/id/slimhat_infra_opensuse_org.sls
@@ -34,6 +34,10 @@ firewalld:
         - tun0
       services:
         - ssh
+      ports:
+        tcp:
+          - 5666
+          - 6556
     heroes-external:
       short: heroes-external
       description: >-
@@ -55,6 +59,10 @@ firewalld:
         - 72.14.176.247
       services:
         - ssh
+      ports:
+        tcp:
+          - 5666
+          - 6556
     # NOT USED ZONES -- let it be to keep them clear and not attached to any
     # interface or sources and without any service declared.
     public: