iptables: stop 'fixing' kernel sysctl bridge firewalling knobs

Bug #1672922 reported by OpenStack Infra
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
neutron
Fix Released
Low
Boden R

Bug Description

https://review.openstack.org/436315
Dear bug triager. This bug was created since a commit was marked with DOCIMPACT.
Your project "openstack/neutron" is set up so that we directly report the documentation bugs against it. If this needs changing, the docimpact-group option needs to be added for the project. You can ask the OpenStack infra team (#openstack-infra on freenode) for help if you need to.

commit c1dfb53bf1db1fe65ba6a8ef64a0b30151ee5c03
Author: Ihar Hrachyshka <email address hidden>
Date: Sat Feb 11 12:50:04 2017 +0000

    iptables: stop 'fixing' kernel sysctl bridge firewalling knobs

    Those are different on different kernel versions, and have reasonable
    default values on all newer kernel versions, including RHEL. We
    nevertheless made devstack to set those in the past; now I propose to
    clean the code from neutron tree and leave it up to deployment tools to
    fix in an unlikely case the system has broken default values.

    Now that iptables firewall code does not trigger sysctl, we can also
    remove this filter from the corresponding rootwrap .filters file.

    DocImpact make sure deployment docs mention the expected sysctl knob
              values.

    Change-Id: Iabf61021c90b0536be274463d48fb5a572ecc023
    Related-Bug: #1622914

Tags: doc neutron
Boden R (boden)
Changed in neutron:
status: New → Confirmed
importance: Undecided → Low
assignee: nobody → Boden R (boden)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to neutron (master)

Fix proposed to branch: master
Review: https://review.openstack.org/501862

Changed in neutron:
status: Confirmed → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to neutron (master)

Reviewed: https://review.openstack.org/501862
Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=183c82b59a69a308aff13829a153460207aba8b6
Submitter: Jenkins
Branch: master

commit 183c82b59a69a308aff13829a153460207aba8b6
Author: Boden R <email address hidden>
Date: Thu Sep 7 14:16:22 2017 -0600

    doc br_netfilter prereq for linux bridge

    This patch updates our install documentation to account for the fact
    that linux systems must have net.bridge sysctl knobs.

    Change-Id: I8b65e2ef22d57cd6c501f25a33af8c1900f20497
    Closes-Bug: #1672922

Changed in neutron:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/neutron 12.0.0.0b1

This issue was fixed in the openstack/neutron 12.0.0.0b1 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.