Bug 1223022 – Ceilometer API port not allowed in firewall rules on undercloud

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1223022 - Ceilometer API port not allowed in firewall rules on undercloud

Summary:	Ceilometer API port not allowed in firewall rules on undercloud

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat OpenStack
Classification:	Red Hat
Component:	instack-undercloud (Show other bugs)
Sub Component:
Version:	7.0 (Kilo)
Hardware:	Unspecified Unspecified

Priority	high Severity high
Target Milestone:	y1
Target Release:	7.0 (Kilo)
Assigned To:	James Slagle
QA Contact:	Marius Cornea
Docs Contact:

URL:
Whiteboard:
Keywords:	Triaged, ZStream

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2015-05-19 11:42 EDT by Marius Cornea
Modified:	2015-10-08 08:08 EDT (History)
CC List:	5 users (show)

See Also:
Fixed In Version:	instack-undercloud-2.1.2-24.el7ost
Doc Type:	Bug Fix
Doc Text:	A missing firewall rule restricted access to the Ceilometer API. This fix adds the firewall rule. Users now have access to the Ceilometer API.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2015-10-08 08:08:46 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
iptables output (4.61 KB, text/plain) 2015-05-19 11:42 EDT, Marius Cornea	no flags	Details
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
Gerrithub.io	244248	None	None	None	Never
Red Hat Product Errata	RHSA-2015:1862	normal	SHIPPED_LIVE	Moderate: Red Hat Enterprise Linux OpenStack Platform 7 director update	2015-10-08 12:05:50 EDT

Groups: None (edit)

Description Marius Cornea 2015-05-19 11:42:26 EDT

Created attachment 1027287 [details]
iptables output

Description of problem:
The Ceilometer API port (8777) is not allowed in firewall rules deployed on the undercloud node.

Version-Release number of selected component (if applicable):
RHEL 7.1
openstack-tripleo-puppet-elements-0.0.1-dev63.el7.centos.noarch
tripleo-common-0.0.0-post4.el7.centos.noarch
openstack-tripleo-image-elements-0.9.5-post1.el7.centos.noarch
openstack-tripleo-0.0.6-dev1717.el7.centos.noarch
openstack-tripleo-heat-templates-0.8.6-dev5.el7.centos.noarch


How reproducible:
100%

Steps to Reproduce:
1. Install according to the docs in virtual environment.
2. sudo iptables -nL
3.

Actual results:
None of the rules matche tcp port 8777

Expected results:
Connection to tcp port 8777 are allowed.

Additional info:
Output of iptables -nL attached.

Comment 5 Marius Cornea 2015-09-07 08:58:17 EDT

[stack@instack ~]$ rpm -qa | grep instack-undercloud
instack-undercloud-2.1.2-25.el7ost.noarch
[stack@instack ~]$ sudo iptables -nL | grep 8777
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:8777

Comment 7 errata-xmlrpc 2015-10-08 08:08:46 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2015:1862

Note You need to log in before you can comment on or make changes to this bug.