When using CONFIG_NEUTRON_FWAAS=y in the answers file FWaaS is not working after a successful run of packstack. Trying to create a new firewall assigned to a router will fail with the following log entry: 2015-07-31 17:12:04.449 14979 TRACE neutron.api.v2.resource ProgrammingError: (ProgrammingError) (1146, "Table 'neutron.firewall_router_associations' doesn't exist") 'SELECT firewall_router_associations.router_id AS firewall_router_associations_router_id \nFROM firewall_router_associations \nWHERE firewall_router_associations.router_id IN (%s) AND firewall_router_associations.fw_id IS NOT NULL' ('8955cdf2-28d2-4857-8b8b-c2414f6d8db7',) After manually running neutron-db-manage --service fwaas upgrade head on the controller node it is possible to use FWaaS.
This bug is against a Version which has reached End of Life. If it's still present in supported release (http://releases.openstack.org), please update Version and reopen.