Bug 2276865

Summary: Tracking BZ for tripleo_nftables backports
Product: Red Hat OpenStack Reporter: Brendan Shephard <bshephar>
Component: tripleo-ansibleAssignee: Brendan Shephard <bshephar>
Status: CLOSED ERRATA QA Contact: Joe H. Rahme <jhakimra>
Severity: high Docs Contact:
Priority: high    
Version: 17.1 (Wallaby)CC: astupnik, drosenfe, joflynn, jpretori, jslagle, kgilliga, mariel, pweeks
Target Milestone: z4Keywords: Triaged
Target Release: 17.1   
Hardware: All   
OS: Unspecified   
Whiteboard:
Fixed In Version: tripleo-ansible-3.3.1-17.1.20240918100824.8debef3.el9ost openstack-tripleo-heat-templates-14.3.1-17.1.20240919130751.e7c7ce3.el9ost Doc Type: Bug Fix
Doc Text:
Before this update, the `tripleo_iptables` role depended on the `iptables` module, which could not insert rules at specific locations within a rule chain. With this update, the `iptables` module is migrated to the `nftables` module. Firewall rules are now applied on the overcloud by using `nftables`.
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-11-21 09:30:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 6 pweeks 2024-08-14 11:31:46 UTC
*** Bug 2269002 has been marked as a duplicate of this bug. ***

Comment 25 errata-xmlrpc 2024-11-21 09:30:16 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: RHOSP 17.1.4 (openstack-tripleo-heat-templates) security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2024:9978