Octavia health manager doesn't receive heartbeat message from amp on composable role

[Carlos Goncalves]

The Octavia health manager service does not receive heartbeat messages sent from amphorae. Firewall on networker node drops packets. Firewall rule (protocol UDP, port 5555, interface o-hm0) is missing.

Steps to Reproduce:
1. create new load balancer
2. wait for provisioning_status to go ACTIVE
3. observe that operating_status will never go ONLINE

This only affects composable Octavia deployments.

Original report: https://bugzilla.redhat.com/show_bug.cgi?id=1658688

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/624775

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/625538

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/625539

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/624775
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=29da33fae27cd78cf07acbbbbb95914914c782a6
Submitter: Zuul
Branch: master

commit 29da33fae27cd78cf07acbbbbb95914914c782a6
Author: Carlos Goncalves <email address hidden>
Date: Wed Dec 12 18:06:34 2018 +0100

    Fix misnaming of service in firewall rule

    On Octavia-enabled composable role deployments where the Octavia health
    manager service doesn't run co-located with the API service, the
    firewall rule to allow messages in to the o-hm0 interface was not being
    created. As a result of that, the load balancers were not going ONLINE.

    Closes-Bug: #1808190
    Depends-On: https://review.openstack.org/#/c/624403/
    Change-Id: Icc568a551b902e6d9f003250226468ed38a776fc

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/625539
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=a68197ba7514a5876f426f3bd06f7be6f256bcf4
Submitter: Zuul
Branch: stable/queens

commit a68197ba7514a5876f426f3bd06f7be6f256bcf4
Author: Carlos Goncalves <email address hidden>
Date: Wed Dec 12 18:06:34 2018 +0100

    Fix misnaming of service in firewall rule

    On Octavia-enabled composable role deployments where the Octavia health
    manager service doesn't run co-located with the API service, the
    firewall rule to allow messages in to the o-hm0 interface was not being
    created. As a result of that, the load balancers were not going ONLINE.

    Conflicts:
        puppet/services/octavia-health-manager.yaml

    Closes-Bug: #1808190
    Depends-On: https://review.openstack.org/#/c/624403/
    Change-Id: Icc568a551b902e6d9f003250226468ed38a776fc
    (cherry picked from commit 29da33fae27cd78cf07acbbbbb95914914c782a6)
    (cherry picked from commit a74808fafd41c5d12004f50fc336ee47e6575196)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/625538
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=a74808fafd41c5d12004f50fc336ee47e6575196
Submitter: Zuul
Branch: stable/rocky

commit a74808fafd41c5d12004f50fc336ee47e6575196
Author: Carlos Goncalves <email address hidden>
Date: Wed Dec 12 18:06:34 2018 +0100

    Fix misnaming of service in firewall rule

    On Octavia-enabled composable role deployments where the Octavia health
    manager service doesn't run co-located with the API service, the
    firewall rule to allow messages in to the o-hm0 interface was not being
    created. As a result of that, the load balancers were not going ONLINE.

    Conflicts:
        puppet/services/octavia-health-manager.yaml

    Closes-Bug: #1808190
    Depends-On: https://review.openstack.org/#/c/624403/
    Change-Id: Icc568a551b902e6d9f003250226468ed38a776fc
    (cherry picked from commit 29da33fae27cd78cf07acbbbbb95914914c782a6)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 10.3.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 8.3.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 9.3.0 release.