Foreman puppet quickstack module creates firewall rules which are not resilient. After a reboot or iptables restart Openstack won't work because the firewall rules are not available in /etc/sysconfi/iptables file. Workaround: Re run puppet agent to force the rules to be recreated. Although the idempotent role of puppet to realign the server configuration works one cannot consider the server to be properly configured until the firewall rules are made resilient. Tested RHEL6.5: - RDO Havana 7 - RHOS4
Moving this to follow: https://bugzilla.redhat.com/show_bug.cgi?id=1034538
Can we confirm this is still an issue?
Ivan fixed this. Am assigning this to him, so he makes sure it actually work
The firewall puppet module was upgraded an the firewall rules are persistent across reboots with a packstack installation, Gilles, can you confirm this on Quickstack please?
I confirm, the firewall rules are persistent - Tested on RHOS5/RHEL7 Just a note as a reminder for the OPM module to be backported to Havana.