Bug 1445194
Summary: | [3.4] Installer fails to add/check iptables rule due to lock on xtables | |||
---|---|---|---|---|
Product: | OpenShift Container Platform | Reporter: | Paul Dwyer <pdwyer> | |
Component: | Installer | Assignee: | Scott Dodson <sdodson> | |
Status: | CLOSED ERRATA | QA Contact: | Wenkai Shi <weshi> | |
Severity: | medium | Docs Contact: | ||
Priority: | medium | |||
Version: | 3.4.0 | CC: | jokerman, mmccomas, sreber | |
Target Milestone: | --- | |||
Target Release: | 3.4.z | |||
Hardware: | x86_64 | |||
OS: | Linux | |||
Whiteboard: | ||||
Fixed In Version: | Doc Type: | Bug Fix | ||
Doc Text: |
Previously the installer may have failed to add iptables rules if other iptables rules were being updated at the same time. Now the installer waits to obtain a lock when updating iptables rules ensuring that rules are properly created.
|
Story Points: | --- | |
Clone Of: | ||||
: | 1445282 (view as bug list) | Environment: | ||
Last Closed: | 2017-05-17 17:40:23 UTC | Type: | Bug | |
Regression: | --- | Mount Type: | --- | |
Documentation: | --- | CRM: | ||
Verified Versions: | Category: | --- | ||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
Cloudforms Team: | --- | Target Upstream Version: | ||
Embargoed: | ||||
Bug Depends On: | 1415800 | |||
Bug Blocks: | 1445282 |
Description
Paul Dwyer
2017-04-25 08:46:09 UTC
Verified with version openshift-ansible-3.4.80-1.git.0.4eee9b7.el7.noarch. During installation, run a while loop of iptables command on hosts, installer will be slow down at "TASK [os_firewall : Add iptables allow rules]" step, once stop the while loop, installer continue with normal speed. [root@master ~]# while true; do iptables -nL; done ... [root@ansible ~]# ansible-playbook -i hosts -v /usr/share/ansible/openshift-ansible/playbooks/byo/config.yml ... TASK [os_firewall : Add iptables allow rules] ********************************** ... (slow down here during the "while loop" alive) ... Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:1244 |