Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1413447 - firewalld should be installed in containerized RHEL installation
firewalld should be installed in containerized RHEL installation
Status: CLOSED CURRENTRELEASE
Product: OpenShift Container Platform
Classification: Red Hat
Component: Installer (Show other bugs)
3.5.0
Unspecified Unspecified
medium Severity medium
: ---
: ---
Assigned To: Russell Teague
Gan Huang
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2017-01-15 21:42 EST by Gan Huang
Modified: 2017-07-24 10 EDT (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: A 'when' clause was present on the firewalld service installation task. Consequence: The installation was skipped for firewalld when running a containerized install. Fix: Removed 'when' clause from firewalld installation task. Result: firewalld is installed properly when running a containerized install.
Story Points: ---
Clone Of:
Environment:
Last Closed: 2017-03-08 08:50:29 EST
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2017:0903 normal SHIPPED_LIVE OpenShift Container Platform atomic-openshift-utils bug fix and enhancement 2017-04-12 18:45:42 EDT

  None (edit)
Description Gan Huang 2017-01-15 21:42:53 EST
Description of problem:
Trigger a containerized installation on RHEL (firewalld not installed), installer would fail at "Start and enable firewalld service"

Version-Release number of selected component (if applicable):
openshift-ansible-3.5.0-1.git.0.847bfb9.el7.noarch.rpm

How reproducible:
always

Steps to Reproduce:
1. Trigger a containerized installation on RHEL (firewalld not installed)


Actual results:
TASK [os_firewall : Install firewalld packages] ********************************
Monday 16 January 2017  02:15:08 +0000 (0:00:00.121)       0:00:34.161 ******** 
skipping: [ec2-54-221-84-253.compute-1.amazonaws.com] => {"changed": false, "skip_reason": "Conditional check failed", "skipped": true}

TASK [os_firewall : Ensure iptables services are not enabled] ******************
Monday 16 January 2017  02:15:09 +0000 (0:00:00.168)       0:00:34.329 ******** 

ok: [ec2-54-221-84-253.compute-1.amazonaws.com] => (item=iptables) => {"failed": false, "failed_when_result": false, "item": "iptables", "msg": "Could not find the requested service \"'iptables'\": "}
ok: [ec2-54-221-84-253.compute-1.amazonaws.com] => (item=ip6tables) => {"failed": false, "failed_when_result": false, "item": "ip6tables", "msg": "Could not find the requested service \"'ip6tables'\": "}

TASK [os_firewall : Start and enable firewalld service] ************************
Monday 16 January 2017  02:15:10 +0000 (0:00:01.290)       0:00:35.620 ******** 

fatal: [ec2-54-221-84-253.compute-1.amazonaws.com]: FAILED! => {"changed": false, "failed": true, "msg": "Could not find the requested service \"'firewalld'\": "}

Expected results:
Firewalld should be installed at task "Install firewalld packages"

Additional info:
Comment 1 Russell Teague 2017-01-24 13:41:38 EST
Proposed: https://github.com/openshift/openshift-ansible/pull/3164
Comment 2 Russell Teague 2017-01-25 08:22:28 EST
Merged: https://github.com/openshift/openshift-ansible/pull/3164
Comment 3 Gan Huang 2017-02-06 00:41:14 EST
Verified with openshift-ansible-3.5.3-1.git.0.80c2436.el7.noarch.rpm

Containerized installation succeed on RHEL 7 (firewalld not installed) and Atomic Host

Note You need to log in before you can comment on or make changes to this bug.