Bug 1490866 – [RFE] Deprecate iptables firewall type for hosts

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1490866 - [RFE] Deprecate iptables firewall type for hosts

Summary:	[RFE] Deprecate iptables firewall type for hosts

Status:	CLOSED ERRATA

Aliases:	None

Product:	Red Hat Enterprise Virtualization Manager
Classification:	Red Hat
Component:	ovirt-engine (Show other bugs)
Sub Component:
Version:	4.2.0
Hardware:	Unspecified Unspecified

Priority	high Severity medium
Target Milestone:	ovirt-4.2.0
Target Release:	---
Assigned To:	Martin Perina
QA Contact:	Petr Kubica
Docs Contact:

URL:
Whiteboard:
Keywords:	FutureFeature

Depends On:	ovirt_firewalld_support
Blocks:
	Show dependency tree / graph

Reported:	2017-09-12 07:58 EDT by Martin Perina
Modified:	2018-05-15 13:46 EDT (History)
CC List:	11 users (show)

See Also:
Fixed In Version:
Doc Type:	Enhancement
Doc Text:	Iptables has been deprecated in Red Hat Virtualization 4.2 and will be completely removed in version 4.3. Administrators must switch to firewalld, which is introduced in version 4.2. Otherwise, the Manager will review the clusters every 30 days and raise warning events in the audit log. A warning message has been added to engine-config help for all Iptables-related settings.
Story Points:	---
Clone Of:
Environment:
Last Closed:	2018-05-15 13:45:15 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	Infra
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Flags:	pstehlik: testing_plan_complete-

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
oVirt gerrit	82598	master	MERGED	core: Deprecate IPTables firewall	2017-10-10 07:17 EDT
Red Hat Product Errata	RHEA-2018:1488	None	None	None	2018-05-15 13:46 EDT

Groups: None (edit)

Description Martin Perina 2017-09-12 07:58:57 EDT

Description of problem:

As firewalld support for hosts has been introduced in 4.2 (BZ995362), iptables support for host is now deprecated and it will be removed in 4.3.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 2 Yaniv Kaul 2017-10-15 09:12:05 EDT

Are there additional patches that are needed, or can this BZ move to MODIFIED?

Comment 3 Martin Perina 2017-10-17 14:13:14 EDT

No additional patches needed

Comment 5 Petr Kubica 2018-01-29 10:05:38 EST

Verified 4.2.1.3-0.1.el7

Comment 9 errata-xmlrpc 2018-05-15 13:45:15 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2018:1488

Note You need to log in before you can comment on or make changes to this bug.