[library] network namespaces require net.ipv4.ip_forward

Bug #1340968 reported by Andrew Woodward
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Released
High
Sergey Vasilenko
5.0.x
Fix Released
High
Sergey Vasilenko

Bug Description

any usage of a network namespace requires net.ipv4.ip_forward = 1, however we are simply lucky that its enabled as some of the uses don't have it defined. We need to add more uses of:

  if !defined(Sysctl::Value['net.ipv4.ip_forward']) {
    sysctl::value { 'net.ipv4.ip_forward': value => '1'}
  }

to the manifests where it is required so that it won't be missed if the components are separated more.

currently the network role entry point into puppet-neutron use this, but ns_IPaddr2 needs it, and probably each puppet-neutron service that run in network namespaces.

Tags: library
Dmitry Ilyin (idv1985)
summary: - network namespaces require net.ipv4.ip_forward
+ [library] network namespaces require net.ipv4.ip_forward
Changed in fuel:
assignee: Andrew Woodward (xarses) → Sergey Vasilenko (xenolog)
status: Triaged → In Progress
Changed in fuel:
importance: Medium → High
Changed in fuel:
assignee: Sergey Vasilenko (xenolog) → Sergii Golovatiuk (sgolovatiuk)
Changed in fuel:
assignee: Sergii Golovatiuk (sgolovatiuk) → Sergey Vasilenko (xenolog)
Revision history for this message
Bogdan Dobrelya (bogdando) wrote :

Checking if the value was defined is an overkill, puppet ensures it *will* be by its declarative nature, e.g. like for this case https://github.com/stackforge/fuel-library/blob/master/deployment/puppet/openstack/manifests/keepalive.pp

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/107046
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=0c60c1935b9d29d46bbb0080f7f30bc387294cb7
Submitter: Jenkins
Branch: master

commit 0c60c1935b9d29d46bbb0080f7f30bc387294cb7
Author: Sergey Vasilenko <email address hidden>
Date: Tue Jul 15 17:18:15 2014 +0400

    Setup IP forwarding in base system for ns_IPaddr2 resources

    Closes-bug: #1342073
    Closes-bug: #1340968

    Change-Id: I9aeafdd458aab0545ec08a01f43e39f0499b020d

Changed in fuel:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (stable/5.0)

Fix proposed to branch: stable/5.0
Review: https://review.openstack.org/116854

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (stable/5.0)

Reviewed: https://review.openstack.org/116854
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=f0ec746f42336e1a192cd3043ed43aaf4273912e
Submitter: Jenkins
Branch: stable/5.0

commit f0ec746f42336e1a192cd3043ed43aaf4273912e
Author: Sergey Vasilenko <email address hidden>
Date: Tue Jul 15 17:18:15 2014 +0400

    Setup IP forwarding in base system for ns_IPaddr2 resources

    Closes-bug: #1342073
    Closes-bug: #1340968

    Change-Id: I9aeafdd458aab0545ec08a01f43e39f0499b020d
    (cherry picked from commit 0c60c1935b9d29d46bbb0080f7f30bc387294cb7)

Changed in fuel:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.