USHIFT-1250: Add an option to build.sh to customize open firewall ports

docs/rhel4edge_iso.md

@@ -67,6 +67,9 @@ Optional arguments:
   -authorized_keys_file path_to_file
           Path to an SSH authorized_keys file to allow SSH access
           into the default 'redhat' account
+  -open_firewall_ports port1[:protocol1],...,portN[:protocolN]
+          One or more comma-separated ports (optionally with protocol)
+          to be allowed by firewall (default: none)
   -prometheus
           Add Prometheus process exporter to the image. See
           https://github.com/ncabatoff/process-exporter for more information

scripts/image-builder/build.sh

@@ -55,14 +55,17 @@ usage() {
     echo "  -authorized_keys_file path_to_file"
     echo "          Path to an SSH authorized_keys file to allow SSH access"
     echo "          into the default 'redhat' account"
+    echo "  -open_firewall_ports port1[:protocol1],...,portN[:protocolN]"
+    echo "          One or more comma-separated ports (optionally with protocol)"
+    echo "          to be allowed by firewall (default: none)"
     echo "  -prometheus"
     echo "          Add Prometheus process exporter to the image. See"
     echo "          https://github.com/ncabatoff/process-exporter for more information"
     exit 1
 }
 
 title() {
-    echo -e "\E[34m\n# $1\E[00m";
+    echo -e "\E[34m\n# $1\E[00m"
 }
 
 waitfor_image() {
@@ -214,6 +217,12 @@ while [ $# -gt 0 ] ; do
         [ -z "${AUTHORIZED_KEYS_FILE}" ] && usage "Authorized keys file not specified"
         shift
         ;;
+     -open_firewall_ports)
+        shift
+        OPEN_FIREWALL_PORTS="$1"
+        [ -z "${OPEN_FIREWALL_PORTS}" ] && usage "Firewall ports not specified"
+        shift
+        ;;
     -prometheus)
         PROMETHEUS=true
         shift
@@ -336,6 +345,17 @@ if ${EMBED_CONTAINERS} ; then
         >> blueprint_v0.0.1.toml
 fi
 
+# Add open firewall ports
+if [ -n "${OPEN_FIREWALL_PORTS}" ] ; then
+    for port in ${OPEN_FIREWALL_PORTS//,/ } ; do
+        cat >> blueprint_v0.0.1.toml <<EOF
+
+[customizations.firewall]
+ports = ["${port}"]
+EOF
+    done
+fi
+
 # Add the firewall customization required by Prometheus
 if ${PROMETHEUS} ; then
     cat >> blueprint_v0.0.1.toml <<EOF