Bug 1266538

Summary:	"Automatically configure host firewall" option at the "Host Approval" window
Product:	Red Hat Enterprise Virtualization Manager	Reporter:	Alexandros Gkesos <agkesos>
Component:	ovirt-engine	Assignee:	Eli Mesika <emesika>
Status:	CLOSED ERRATA	QA Contact:	Petr Matyáš <pmatyas>
Severity:	high	Docs Contact:
Priority:	high
Version:	3.5.4	CC:	gklein, lsurette, lsvaty, oourfali, ppostler, pstehlik, rbalakri, Rhev-m-bugs, srevivo, ykaul
Target Milestone:	ovirt-4.0.0-rc
Target Release:	4.0.0
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-08-23 20:29:34 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1319708
Bug Blocks:

Description Alexandros Gkesos 2015-09-25 14:29:45 UTC

Description of problem:
As described in Bug 1266530, the default Display Network port range on a newly installed RHEV-Hypervisor is 5634:6166 instead of 5900:6923.
When you "Add" the host, the port range is being replaced as in the "Add" window there is the option "Automatically configure host firewall"
But when you "Approve" a host the port range stays the same, as there is no such option.

Version-Release number of selected component:
RHEV-M 3.5.4.2-1.3

How reproducible:
Everytime

Steps to Reproduce:
1. Install and configure from Admin TUI a RHEV-Hypervisor
2. Check Display Network port range at iptables
3. Approve the Hypervisor from the Manager
4. Check Display Network port range again

or just a step 3. Check the Approval window for the missing option

Summary: 
We want "Automatically configure host firewall" option at Approval window

Comment 1 Moti Asayag 2015-10-21 08:55:38 UTC

Moving to 4.0 since updating IP tables rules for ovirt-node is not supported - hence exposing the parameter in the webadmin is useless.

Comment 2 Oved Ourfali 2016-03-15 08:11:14 UTC

Putting on Eli.
Eli - please add a dependency for this one on the next-gen-node work.
This will be fixed by that work, as the "approve" will no longer be relevant in next-gen-node.

Comment 3 Yaniv Lavi 2016-05-09 10:57:49 UTC

oVirt 4.0 Alpha has been released, moving to oVirt 4.0 Beta target.

Comment 6 Oved Ourfali 2016-05-25 14:02:17 UTC

As the approval process isn't relevant to next-gen-node, this is fixed in 4.0.

Comment 7 Pavol Brilla 2016-08-16 15:33:37 UTC

As the approval process isn't relevant to next-gen-node, this is fixed in 4.0.

Add Host -> Advanced Parameters -> Automatically configure host firewall

option is visible during add host which is only available for rhvh

Comment 8 Pavol Brilla 2016-08-16 15:34:19 UTC

Verified in rhevm 4.0.2-0.1.rc.el7ev

Comment 10 errata-xmlrpc 2016-08-23 20:29:34 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-1743.html