Firewall rules location

[Nuttymoon]

Firewall rules role and definition for all TDP services/components are currently being implemented in tdp-collection. See:

• Firewall rules deployment strategy with HDFS DataNode as example tdp-collection#541
• Firewall HDFS + dependencies rules tdp-collection#567

The question has been raised about where the role and rules definition should be placed. We basically have 4 choices :

1. 😄 The firewall role in tdp-collection and the rules of each component in its collection (e.g. hdfs_dn rules in tdp-collection and kafka_broker rules in tdp-collection-extras)
2. 🎉 The firewall role in tdp-collection-extras and the rules of each component in its collection (e.g. hdfs_dn rules in tdp-collection and kafka_broker rules in tdp-collection-extras)
3. 👀 The firewall role and all the rules in tdp-collection-extras
4. 🚀 The firewall role and all the rules in a dedicated collection tdp-collection-firewall

IMO options 😄 (1.) and 👀 (3.) make more sense as we co-locate the firewall rules with their components.

You can vote with: 😄 (1.) 🎉 (2.) 👀 (3.) 🚀 (4.) below 👇

[rpignolet]

3. 👀 The firewall role and all the rules in tdp-collection-extras