Hide Forgot
+++ This bug was initially created as a clone of Bug #1293578 +++ Document URL: https://docs.openshift.com/enterprise/3.1/release_notes/ose_3_1_release_notes.html#ose-3-1-1-known-issues Section Number and Name: Known Issues > BZ#1293578 Describe the issue: Documentation only suggest an iptables rule change, this may not be desirable to all customers, and in fact this is not the only option! Livlyness changes to the router can also be made, that if implemented, iptalbes changes and port exposure is not needed. Suggestions for improvement: The docs here need to describe alternative options, to opening up ports with iptables. Docs need to explain how to revert or remove iptables rules that are put in place with Ansible, as they are not need if the liveliness probe is used. # oc get dc/router -o yaml livenessProbe: httpGet: host: localhost ### This needs to be added if you do not setup the iptables rule. path: /healthz port: 1936 scheme: HTTP Additional information:
> Docs need to explain how to revert or remove iptables rules that are put in > place with Ansible, as they are not need if the liveliness probe is used. Ansible never did this. The only time that this would be in place is if they manually did it as part of an effort to remedy the liveness probe on a host where the value of openshift_hostname resolves to a non local IP address. I had already put in a PR based on Kenjiro's comments on the bug this was cloned for. I've updated that PR to simply suggest that they switch the liveness probes to localhost. Please see https://github.com/openshift/openshift-docs/pull/1723 for what i've suggested.
(In reply to Scott Dodson from comment #1) > > Docs need to explain how to revert or remove iptables rules that are put in > > place with Ansible, as they are not need if the liveliness probe is used. > > Ansible never did this. The only time that this would be in place is if they > manually did it as part of an effort to remedy the liveness probe on a host > where the value of openshift_hostname resolves to a non local IP address. > > I had already put in a PR based on Kenjiro's comments on the bug this was > cloned for. I've updated that PR to simply suggest that they switch the > liveness probes to localhost. > > Please see https://github.com/openshift/openshift-docs/pull/1723 for what > i've suggested. Based on Scott's PR and changes [1], I am going to close this bug. Please let me know if you think otherwise. https://docs.openshift.com/enterprise/3.1/install_config/upgrading/manual_upgrades.html#manual-step-ose-3-1-1