Packstack does not open iptables for horizon/client access to Neutron API

[Lars Kellogg-Stedman]

Packstack does not properly open up the firewall on the neutron server host.

The following services need access to the neutron api:

- Horizon
- Nova-api (which proxies some requests to neutron)
- The host on which the client tools are installed.

The current implementation only opens up access from the nova-compute hosts.

[Lars Kellogg-Stedman (larsks)]

I've submitted a fix for this bug:

https://review.openstack.org/#/c/78442/

[Pádraig Brady (p-draigbrady)]

Diagnosed by Shake Chen in https://www.redhat.com/archives/rdo-list/2014-March/msg00009.html

[Lars Kellogg-Stedman (larsks)]

mmagr proposed a new fix in https://review.openstack.org/#/c/77634/

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/77634
Committed: https://git.openstack.org/cgit/stackforge/packstack/commit/?id=7f536f7e51bbb27a9a3cadb7a5ca73aeb10c190e
Submitter: Jenkins
Branch: master

commit 7f536f7e51bbb27a9a3cadb7a5ca73aeb10c190e
Author: Martin Magr <email address hidden>
Date: Mon Mar 3 15:10:17 2014 +0100

    Fixed Neutron ML2 issues

    - Value of CONFIG_NEUTRON_ML2_VXLAN_GROUP is missing quotes which generates
    Puppet syntax error when it is used

    - Command 'neutron-db-manage upgrade' is run only on certain host, so race
    condition has to be set only on relevant host

    - In case of multihost installation Neutron API has to be available for OSCLIENT_HOST
    and HORIZON_HOST

    Fixes: rhbz#1066519, rhbz#1068962
    Closes-bug: 1288447

    Change-Id: I40a7cd0c3117152eac945ab26bf0b51e911a4765

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: havana
Review: https://review.openstack.org/80578

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/80578
Committed: https://git.openstack.org/cgit/stackforge/packstack/commit/?id=355c98d13d0557d507746a4782fd914e1a1fa92a
Submitter: Jenkins
Branch: havana

commit 355c98d13d0557d507746a4782fd914e1a1fa92a
Author: Martin Magr <email address hidden>
Date: Mon Mar 3 15:10:17 2014 +0100

    Fixed Neutron ML2 issues

    - Value of CONFIG_NEUTRON_ML2_VXLAN_GROUP is missing quotes which generates
    Puppet syntax error when it is used

    - Command 'neutron-db-manage upgrade' is run only on certain host, so race
    condition has to be set only on relevant host

    - In case of multihost installation Neutron API has to be available for OSCLIENT_HOST
    and HORIZON_HOST

    Fixes: rhbz#1066519, rhbz#1068962
    Closes-bug: 1288447

    Change-Id: I40a7cd0c3117152eac945ab26bf0b51e911a4765
    (cherry picked from commit 7f536f7e51bbb27a9a3cadb7a5ca73aeb10c190e)

[Ivan Chavero (imcsk8) (ichavero-ichavero)]

The status of this bug report was changed automatically.