Bug 1723975

Summary: [osp14][DCN][Spine & Leaf] ssh timeout into compute overcloud nodes post overcloud.AllNodesDeploySteps
Product: Red Hat OpenStack Reporter: Alex Schultz <aschultz>
Component: openstack-tripleo-heat-templatesAssignee: Emilien Macchi <emacchi>
Status: CLOSED ERRATA QA Contact: Sasha Smolyak <ssmolyak>
Severity: high Docs Contact:
Priority: high    
Version: 14.0 (Rocky)CC: agurenko, apevec, aschultz, bfournie, bjacot, cjeanner, dsneddon, emacchi, hjensas, jcoufal, lhh, mburns, rheslop, slinaber, ssmolyak, yobshans
Target Milestone: z3Keywords: Triaged, ZStream
Target Release: 14.0 (Rocky)   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-9.3.1-0.20190513171738.el7ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1722636 Environment:
Last Closed: 2019-07-02 20:09:21 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1722636, 1724560, 1724565    
Bug Blocks:    

Comment 5 Bob Fournier 2019-06-30 15:25:16 UTC 
No need for doc text as this is a regression.
Comment 9 bjacot 2019-07-01 19:39:25 UTC 
I performed a iprules check on an OSP14 deployment.  The compute node has the updated rule needed to resolve this issue.

(undercloud) [stack@undercloud-0 ~]$ cat /etc/yum.repos.d/latest-installed 
14  -p 2019-06-26.1

(undercloud) [stack@undercloud-0 ~]$ rpm -qa | grep templates
openstack-tripleo-heat-templates-9.3.1-0.20190513171738.el7ost.noarch

(undercloud) [stack@undercloud-0 ~]$ ssh heat-admin.24.9
Warning: Permanently added '192.168.24.9' (ECDSA) to the list of known hosts.
[heat-admin@overcloud-ceph3-0 ~]$ sudo iptables -L
Chain INPUT (policy ACCEPT)
[...]
ACCEPT     tcp  --  anywhere             anywhere             multiport dports ssh state NEW /* 003 accept ssh from any ipv4 */
Comment 11 errata-xmlrpc 2019-07-02 20:09:21 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:1672