Fix up firewalling for the other openQA workers

Signed-off-by: Adam Williamson <awilliam@redhat.com>

inventory/host_vars/aarch64-c26n1-oqa.arm.fedoraproject.org

@@ -20,6 +20,12 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 ansible_ifcfg_whitelist: ['eth0']
 
 openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True

inventory/host_vars/aarch64-c27n1-oqa.arm.fedoraproject.org

@@ -19,7 +19,13 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # and leave everything else alone.
 ansible_ifcfg_whitelist: ['eth0']
 
-openqa_workers: 3
+openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True

inventory/host_vars/aarch64-c28n1-oqa.arm.fedoraproject.org

@@ -19,7 +19,13 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # and leave everything else alone.
 ansible_ifcfg_whitelist: ['eth0']
 
-openqa_workers: 3
+openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True

inventory/host_vars/aarch64-c29n1-oqa.arm.fedoraproject.org

@@ -19,7 +19,13 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # and leave everything else alone.
 ansible_ifcfg_whitelist: ['eth0']
 
-openqa_workers: 3
+openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True

inventory/host_vars/aarch64-c30n1-oqa.arm.fedoraproject.org

@@ -19,7 +19,13 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # and leave everything else alone.
 ansible_ifcfg_whitelist: ['eth0']
 
-openqa_workers: 3
+openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True

inventory/host_vars/openqa-ppc64le-01.qa.fedoraproject.org

@@ -20,6 +20,12 @@ ansible_ifcfg_whitelist: ['eth2']
 
 # this is a powerful machine, can handle more openQA workers
 openqa_workers: 8
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043', '20053', '20063', '20073', '20083']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True

inventory/host_vars/qa05.qa.fedoraproject.org

@@ -3,3 +3,10 @@ fas_client_groups: sysadmin-qa,sysadmin-main
 sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 eth0_ip: 10.5.124.155
 gw: 10.5.124.254
+
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']

inventory/host_vars/qa14.qa.fedoraproject.org

@@ -16,3 +16,9 @@ ansible_ifcfg_whitelist: ['eth0']
 
 # this is a powerful machine, can handle more openQA workers
 openqa_workers: 10
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043', '20053', '20063', '20073', '20083', '20093', '20103']

inventory/inventory

@@ -1318,11 +1318,6 @@ qa14.qa.fedoraproject.org
 taskotron-stg01.qa.fedoraproject.org
 taskotron01.qa.fedoraproject.org
 openqa-ppc64le-01.qa.fedoraproject.org
-aarch64-c26n1-oqa.arm.fedoraproject.org
-aarch64-c27n1-oqa.arm.fedoraproject.org
-aarch64-c28n1-oqa.arm.fedoraproject.org
-aarch64-c29n1-oqa.arm.fedoraproject.org
-aarch64-c30n1-oqa.arm.fedoraproject.org
 
 [osbs-control]
 osbs-control01.phx2.fedoraproject.org