port 8080 is needed by candlepin for one-time initialization
Description of problem: Candlepin requires a single API call to port 8080 during initialization. This can be tricky to allow for users with firewall rules that restrict localhost traffic.
Version-Release number of selected component (if applicable): 6.2.7
Candlepin requires access to port 8080 on localhost for the installation to succeed. We can add a firewall rule for this in the docs, but it is a one-time thing that only needs to be enabled during install, and can then be disabled.
Additionally, the firewall rule would have to be crafted to not allow access from other hosts. The server.xml default will bind it to 0.0.0.0 instead of 127.0.0.1. Once the installation is complete, users have to remember to disable 8080 on localhost again.
Ideally, the initialization could occur without this one-time call to this port. Then we could just remove the 8080 listener entirely.
#2 Updated by Ewoud Kohl van Wijngaarden about 1 year ago
- Assignee set to Eric Helms
- Status changed from New to Closed
- Fixed in Releases Katello 3.11.1 added
- Pull request https://github.com/theforeman/puppet-candlepin/pull/113 added
Since commit:e9667efe3684057b93ec834d104b6eb20115a7b1 we no longer listen on 8080.