Bug 42117 - Allow Docker's IP range to access MySQL
Allow Docker's IP range to access MySQL
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Firewall (univention-firewall)
UCS 4.1
Other Linux
: P2 enhancement (vote)
: UCS 4.1-3-errata
Assigned To: Dirk Wiesenthal
Felix Botner
:
Depends on:
Blocks: 40857
  Show dependency treegraph
 
Reported: 2016-08-24 23:53 CEST by Dirk Wiesenthal
Modified: 2016-09-29 20:37 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Dirk Wiesenthal univentionstaff 2016-08-24 23:53:35 CEST
ucr.get('docker/daemon/default/opts/bip', '172.17.42.1/16') needs access to ucr.get('mysql/config/mysqld/port', 3306)

+++ This bug was initially created as a clone of Bug #40857 +++

Docker Apps should be able to specify an external database where they want to store their data.

This database should run on the Docker Host via mysql or univention-postgres.
Comment 1 Dirk Wiesenthal univentionstaff 2016-08-25 00:59:44 CEST
univention-firewall 8.0.2-1.87.201608250058

Always allowing MySQL port for Docker's range. No check whether this is needed at all or which containers really need it is done.
Comment 2 Dirk Wiesenthal univentionstaff 2016-08-25 01:10:15 CEST
8.0.2-2.88.201608250103

YAML added, 4.2-0 merged.
Comment 3 Janek Walkenhorst univentionstaff 2016-08-29 18:28:54 CEST
8.0.2-2.89.201608291827

r71998
Rebuild package for Bug #42117 due to buildsystem error
Comment 4 Felix Botner univentionstaff 2016-08-30 12:15:30 CEST
OK - 20_docker.sh lets docker net connect to 3306
OK - univention-firewall.yaml
Comment 5 Janek Walkenhorst univentionstaff 2016-09-07 18:41:56 CEST
<http://errata.software-univention.de/ucs/4.1/246.html>