Bug 1356921

Summary: iptables auto-configuration doesn't add ports for glusterfs
Product: [oVirt] ovirt-hosted-engine-setup Reporter: Wee Sritippho <weeix>
Component: NetworkAssignee: Sahina Bose <sabose>
Status: CLOSED DUPLICATE QA Contact: meital avital <mavital>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 2.0.0.1CC: bugs, sabose, sbonazzo, weeix, ylavi
Target Milestone: ovirt-4.1.0-betaFlags: sabose: ovirt-4.1?
rule-engine: planning_ack?
rule-engine: devel_ack?
rule-engine: testing_ack?
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-12-22 06:28:42 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Gluster RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
answer file on 1st host
none
oVirt engine setup log
none
deploy log on 1st host
none
deploy log on 2nd host
none
deploy log on 3rd host none

Description Wee Sritippho 2016-07-15 09:34:13 UTC
Created attachment 1180083 [details]
answer file on 1st host

Description of problem:
When deploying hyper converged hosted-engine environments, if we allow the setup to configure iptables for us, it would allow only ovirt/vdsm ports but not glusterfs ports such as TCP/24007.

Version-Release number of selected component (if applicable):
ovirt-hosted-engine-setup-2.0.0.2-1.el7.centos.noarch
vdsm-4.18.4.1-0.el7.centos.x86_64

How reproducible:
100%

Steps to Reproduce:
1. Install ovirt repo
2. Install and configure glusterfs on 3 hosts (which we will also use for hosted-engine installation)
3. 'hosted-engine --deploy' in 1st host
4. When asked about iptables auto-configuration, accept the default vaule (Yes)
5. Try to deploy another HE hosts on the same data domain

Actual results:
Fail to deploy another HE hosts because they couldn't access gluster brick(s) in 1st host, so the volume become read-only.

Expected results:
If ovirt-hosted-engine-setup detects that setup is hyper converged, also add gluster ports to iptables

Additional info:

Comment 1 Yaniv Lavi 2016-07-21 08:13:18 UTC
Can you please attach logs?

Comment 2 Wee Sritippho 2016-07-21 09:29:26 UTC
Yes, which logs would you like. I'll fetch them when I'm able to access the machines.

Comment 3 Sandro Bonazzola 2016-08-01 08:05:57 UTC
Moving back to Gluster.
This looks like a hyperconverged specific issue since it can't be reproduced on non HC setup.
Can you please attach ovirt-hosted-engine-setup and ovirt-host-deploy logs?
Sahina, if a port is missing probably the engine DB should be changed for including the additional port required by HC

Comment 4 Wee Sritippho 2016-08-01 09:06:57 UTC
Created attachment 1186305 [details]
oVirt engine setup log

Comment 5 Wee Sritippho 2016-08-01 09:10:42 UTC
Created attachment 1186306 [details]
deploy log on 1st host

Comment 6 Wee Sritippho 2016-08-01 09:11:25 UTC
Created attachment 1186308 [details]
deploy log on 2nd host

Comment 7 Wee Sritippho 2016-08-01 09:12:15 UTC
Created attachment 1186309 [details]
deploy log on 3rd host

Comment 8 Sahina Bose 2016-12-22 06:28:42 UTC

*** This bug has been marked as a duplicate of bug 1288979 ***