Bug 1237009 - Swift proxy port not allowed in undercloud firewall
Summary: Swift proxy port not allowed in undercloud firewall
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: rhosp-director
Version: 7.0 (Kilo)
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 7.0 (Kilo)
Assignee: James Slagle
QA Contact: yeylon@redhat.com
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-06-30 07:50 UTC by Marius Cornea
Modified: 2016-04-18 07:14 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: Known Issue
Doc Text:
The swift proxy port is denied in the Undercloud firewall. This means the swift proxy only accepts connections from localhost. As a workaround, open the swift proxy port in the firewall: # sudo iptables -I INPUT -p tcp --dport 8080 -j ACCEPT This enabled connections to the swift proxy from remote machines.
Clone Of:
Environment:
Last Closed: 2016-01-08 18:55:26 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)

Description Marius Cornea 2015-06-30 07:50:55 UTC 
Description of problem:
The Swift proxy port(8080) is not allowed in undercloud iptables.

Version-Release number of selected component (if applicable):
instack-undercloud-2.1.2-6.el7ost.noarch
instack-0.0.7-1.el7ost.noarch

How reproducible:
100%

Steps to Reproduce:
1. iptables -nL | grep 8080
2.
3.

Actual results:
No entry matches port 8080

Expected results:
I'd expect port 8080 to be allowed. Ironic extra data is stored in swift now and we need to be able to access it for the CFME integration.

Additional info:
Comment 4 chris alfonso 2015-06-30 17:13:23 UTC 
We'll doc the workaround of manually adding the rule when necessary.
Comment 5 Nick Satsia 2016-02-23 04:28:08 UTC 
This issue also exists in OSPd7 as of 19 February '16.
Note You need to log in before you can comment on or make changes to this bug.