Ironic inspector does not support iptables under IPv6 network

Bug #1756012 reported by zhengyong
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ironic Inspector
Fix Released
Undecided
zhengyong

Bug Description

Under IPv6 network, we should use command 'ip6tables' to config firewall, but we only use command 'iptables' to config firewall, we can see here:

# on branch master ironic_inspector/pxe_filter/iptables.py
class IptablesFilter(pxe_filter.BaseFilter):
    """A PXE boot filtering interface implementation."""

    def __init__(self):
        super(IptablesFilter, self).__init__()
        self.blacklist_cache = None
        self.enabled = True
        self.interface = CONF.iptables.dnsmasq_interface
        self.chain = CONF.iptables.firewall_chain
        self.new_chain = self.chain + '_temp'
        self.base_command = ('sudo', 'ironic-inspector-rootwrap',
                             CONF.rootwrap_config, 'iptables')

this should to fixed.

zhengyong (zhengy23)
Changed in ironic-inspector:
assignee: nobody → zhengyong (zhengy23)
description: updated
Dmitry Tantsur (divius)
Changed in ironic-inspector:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.