Bug 1045224 - iptables.*.rules default location should be under /var/lib/openshift
Summary: iptables.*.rules default location should be under /var/lib/openshift
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: OpenShift Online
Classification: Red Hat
Component: Containers
Version: 2.x
Hardware: Unspecified
OS: Linux
high
high
Target Milestone: ---
: ---
Assignee: Jhon Honce
QA Contact: libra bugs
URL:
Whiteboard:
Depends On: 1070362
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-19 22:14 UTC by Jhon Honce
Modified: 2015-06-11 21:57 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-06-11 21:57:47 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Jhon Honce 2013-12-19 22:14:58 UTC
Description of problem:
The /etc/openshift/iptables.*.rules files are misplaced. All other proxy configuration is located in /var/lib/openshift which allows OpenShift Operators to backup one mountpoint for all routing and gear information

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:
Configuration information in /etc/openshift

Expected results:
Configuration information under /var/lib/openshift

Additional info:
Suggested directories:
#1 /var/lib/openshift/.http.d
#2 /var/lib/openshift/.routing

Comment 1 openshift-github-bot 2014-02-11 18:28:24 UTC
Commit pushed to master at https://github.com/openshift/origin-server

https://github.com/openshift/origin-server/commit/aa4f7641f9835de4742276829ad6c14f6717c01c
Bug 1045224 - install iptables rules in new dir

install iptables.*.rules in /var/lib/openshift/.httpd.d instead of
/etc/openshift.

solve 'files listed twice' warning during rpmbuild for
rubygem-openshift-origin-node

	modified:   node/misc/bin/oo-iptables-port-proxy
	modified:   node/misc/sbin/oo-admin-ctl-iptables-port-proxy
	modified:   node/rubygem-openshift-origin-node.spec

Comment 2 Lokesh Mandvekar 2014-02-11 18:29:37 UTC
https://github.com/openshift/origin-server/pull/4720

Comment 3 Meng Bo 2014-02-12 06:25:01 UTC
Checked on devenv_4363, the iptables.nat.rules and iptables.filter.rules are placed under /var/lib/openshift/.httpd.d/ now.

[root@ip-10-232-39-225 ~]# ls /var/lib/openshift/.httpd.d/|grep iptables
iptables.filter.rules
iptables.filter.rules.bak
iptables.nat.rules
iptables.nat.rules.bak
[root@ip-10-232-39-225 ~]# ls /etc/openshift/|grep iptables
[root@ip-10-232-39-225 ~]# 


Move bug to verified.


Note You need to log in before you can comment on or make changes to this bug.