The iptables calls try to reach external and unreachable DNS servers. These calls cause errors in the deployment. It could be prevented if the calls would contain switches -n and -w.
Please add these switches (-n -w) to the iptables calls in the files located in fuel/library/files/fuel-ha-utils/ocf folder enlisted below:
nova-network: ocf_run iptables -t filter -F $filter_chain
nova-network: ocf_run iptables -t nat -F $nat_chain
nova-network: ocf_run iptables -t mangle -F $prefix-POSTROUTING
ns_haproxy: iptables -n -t nat -L | grep -q masquerade-for-haproxy-namespace
ns_haproxy: ocf_run iptables -n -t nat -A POSTROUTING -s "${OCF_RESKEY_namespace_ip}" -j MASQUERADE -m comment --comment "masquerade-for-haproxy-namespace"
ns_vrouter: iptables -n -t nat -L | grep -q masquerade-for-vrouter-namespace
ns_vrouter: ocf_run iptables -n -t nat -A POSTROUTING -s "${OCF_RESKEY_namespace_ip}" -j MASQUERADE -m comment --comment "masquerade-for-vrouter-namespace"
rabbitmq: until $(iptables -nvL | grep -q 'temporary RMQ block') || [ $tries -eq 0 ]; do
rabbitmq: iptables -I INPUT -p tcp -m tcp --dport ${OCF_RESKEY_node_port} -m state --state NEW,RELATED,ESTABLISHED \
rabbitmq: for i in $(iptables -nvL --line-numbers | awk '/temporary RMQ block/ {print $1}'); do
rabbitmq: iptables -D INPUT -p tcp -m tcp --dport ${OCF_RESKEY_node_port} -m state --state NEW,RELATED,ESTABLISHED \
It can cause errors during deployment a new environment and on an already installed one.
How to reproduce:
Make the DNS service unreachable and start to stop/start CRM resources.
The description of the case enlists the files and the calls where the changes should be done. To find them:
fuel/library/files/fuel-ha-utils/ocf$ grep -r -i "iptables " *
MOS7.0 drop_w23.
VERSION:
feature_groups:
- mirantis
production: "docker"
release: "7.0"
openstack_version: "2015.1.0-7.0"
api: "1.0"
build_number: "852"
build_id: "852"
nailgun_sha: "864ff12f07568f528cde18a798006703a6b1f47c"
python-fuelclient_sha: "80a97c3946460d434066192eec7cf8bf98453247"
fuel-agent_sha: "d02d30e61fdcbc20176e56aa3eae3ec74e94804b"
fuel-nailgun-agent_sha: "06305379a1cc2e7db992dfc3db6566766bc8fc31"
astute_sha: "bc04aee030d019c77485ef4326b1b2d63229fab1"
fuel-library_sha: "c29ab66b03223eb2b9e84bf6dd9feef8042f69eb"
fuel-ostf_sha: "fce90d4add96ca9b196bb30b18d4cc8b5319b686"
fuelmain_sha: "f45ec7e3571999d22396272a14281f9264636be5
Please provide a backport for MOS 7.0
master: https:/
stable/mitaka: https:/