import UBI firewalld-0.9.11-10.el8_10

SOURCES/0031-v2.2.0-fix-service-update-highest-port-number-for-ce.patch

@@ -0,0 +1,29 @@
+From 4c95c843cd21f618677fe4d047b187facb00d027 Mon Sep 17 00:00:00 2001
+From: Pierre Riteau <pierre@stackhpc.com>
+Date: Mon, 22 Apr 2024 11:50:25 +0200
+Subject: [PATCH] v2.2.0: fix(service): update highest port number for ceph
+
+The highest port number used by Ceph was updated in
+https://github.com/ceph/ceph/pull/42210.
+
+Fixes https://github.com/firewalld/firewalld/issues/1329
+
+(cherry picked from commit f514a3ea4b59a0be11467d1b68a992329b6dc8dd)
+---
+ config/services/ceph.xml | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/config/services/ceph.xml b/config/services/ceph.xml
+index efed53691afd..eb6a3f2d1e3d 100644
+--- a/config/services/ceph.xml
++++ b/config/services/ceph.xml
+@@ -2,5 +2,5 @@
+ <service>
+   <short>ceph</short>
+   <description>Ceph is a distributed object store and file system. Enable this option to support Ceph's Object Storage Daemons (OSD), Metadata Server Daemons (MDS), or Manager Daemons (MGR).</description>
+-  <port protocol="tcp" port="6800-7300"/>
++  <port protocol="tcp" port="6800-7568"/>
+ </service>
+-- 
+2.43.0
+

SPECS/firewalld.spec

@@ -1,7 +1,7 @@
 Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
 Name: firewalld
 Version: 0.9.11
-Release: 9%{?dist}
+Release: 10%{?dist}
 URL:     http://www.firewalld.org
 License: GPLv2+
 Source0: https://github.com/firewalld/firewalld/releases/download/v%{version}/firewalld-%{version}.tar.gz
@@ -35,6 +35,7 @@ Patch27: 0027-v2.0.0-test-atlocal-pass-EBTABLES-to-testsuite.patch
 Patch28: 0028-v2.0.0-chore-direct-add-has_runtime_configuration.patch
 Patch29: 0029-v2.0.0-feat-direct-avoid-iptables-flush-if-using-nft.patch
 Patch30: 0030-v2.0.0-test-direct-avoid-iptables-flush-if-using-nft.patch
+Patch31: 0031-v2.2.0-fix-service-update-highest-port-number-for-ce.patch
 
 BuildArch: noarch
 BuildRequires: autoconf
@@ -236,6 +237,9 @@ desktop-file-install --delete-original \
 %{_mandir}/man1/firewall-config*.1*
 
 %changelog
+* Tue Feb 04 2025 Eric Garver <egarver@redhat.com> - 0.9.11-10
+- fix(service): update highest port number for ceph
+
 * Fri Aug 02 2024 Eric Garver <egarver@redhat.com> - 0.9.11-9
 - feat(direct): avoid iptables flush if using nftables backend