From 701a2190230febdb0e0bd49220424d22bb2e9d4d Mon Sep 17 00:00:00 2001
From: millingw <m.illingworth@roe.ac.uk>
Date: Tue, 23 Jul 2024 15:09:37 +0000
Subject: [PATCH] added new rule to allow extra zeppelin worker comms

---
 deployments/hadoop-yarn/ansible/04-create-workers.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/deployments/hadoop-yarn/ansible/04-create-workers.yml b/deployments/hadoop-yarn/ansible/04-create-workers.yml
index bcef23bc..07998b49 100644
--- a/deployments/hadoop-yarn/ansible/04-create-workers.yml
+++ b/deployments/hadoop-yarn/ansible/04-create-workers.yml
@@ -48,6 +48,17 @@
         port_range_max: 22
         remote_group: "{{ security['zeppelin'] }}"
 
+    - name: "Add a restricted range to allow zeppelin to retrieve results directly from workers"
+      os_security_group_rule:
+        cloud: "{{ cloudname }}"
+        state: present
+        security_group: "{{ secgroup.id }}"
+        direction: "ingress"
+        protocol: 'tcp'
+        port_range_min: 32768
+        port_range_max: 60999
+        remote_group: "{{ security['zeppelin'] }}"
+
     - name: "Create our workers"
       os_server:
         cloud: "{{ cloudname }}"