Bug 2024775
| Summary: | ensure zone exists and can be used in subsequent operations | |||
|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | Rich Megginson <rmeggins> | |
| Component: | rhel-system-roles | Assignee: | Rich Megginson <rmeggins> | |
| Status: | CLOSED ERRATA | QA Contact: | Jakub Haruda <jharuda> | |
| Severity: | medium | Docs Contact: | ||
| Priority: | medium | |||
| Version: | 9.0 | CC: | briasmit, jharuda, nhosoi, pkettman, ptoal, spetrosi, vpunj | |
| Target Milestone: | rc | Keywords: | Triaged | |
| Target Release: | 9.0 | Flags: | pm-rhel:
mirror+
|
|
| Hardware: | Unspecified | |||
| OS: | Unspecified | |||
| Whiteboard: | role:firewall | |||
| Fixed In Version: | rhel-system-roles-1.13.0-1.el9 | Doc Type: | No Doc Update | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | ||||
| : | 2042541 (view as bug list) | Environment: | ||
| Last Closed: | 2022-05-17 13:03:10 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
@rmeggins Do we have a corresponding BZ for RHEL 8? (In reply to Brian Smith from comment #1) > @rmeggins Do we have a corresponding BZ for RHEL 8? No, not yet. Let's have all of the discussion and whatnot here, then I will clone it, then the clone will have all of the discussion and etc. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (new packages: rhel-system-roles), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:2443 |
Description of problem: When adding a zone in a list of other operations, you cannot use the newly added zone until the firewall config is reloaded. The problem is that the role takes a list of firewall settings: firewall: - zone: my_new_zone state: present - port: 54321 zone: my_new_zone state: enabled If you are using something like satellite, you do not have access to the playbook, so you cannot insert a task to reload between creating the zone and using the zone. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: When adding or removing a zone, the operation should take effect immediately, so that the zone can be used in subsequent operations in the list (or not if the zone was removed). Additional info: