Verify this bug using openshift-ansible-3.9.85-1.git.0.7c950b1.el7.noarch.rpm, without openshift_use_contrail set in ansible inventory file, contrail related iptables rules were NOT applied during installation. TASK [openshift_node : Add iptables allow rules] ******************************* ... changed: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'port': u'10250/tcp', u'service': u'Kubernetes kubelet'}) => {"changed": true, "failed": false, "item": {"port": "10250/tcp", "service": "Kubernetes kubelet"}, "output": ["", "Successfully created chain OS_FIREWALL_ALLOW", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n", "", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n", "", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n"]} changed: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'port': u'10256/tcp', u'service': u'Kubernetes kube-proxy health check for service load balancers'}) => {"changed": true, "failed": false, "item": {"port": "10256/tcp", "service": "Kubernetes kube-proxy health check for service load balancers"}, "output": ["", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n"]} changed: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'port': u'80/tcp', u'service': u'http'}) => {"changed": true, "failed": false, "item": {"port": "80/tcp", "service": "http"}, "output": ["", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n"]} changed: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'port': u'443/tcp', u'service': u'https'}) => {"changed": true, "failed": false, "item": {"port": "443/tcp", "service": "https"}, "output": ["", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n"]} changed: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': u'openshift_use_openshift_sdn | bool', u'port': u'4789/udp', u'service': u'OpenShift OVS sdn'}) => {"changed": true, "failed": false, "item": {"cond": "openshift_use_openshift_sdn | bool", "port": "4789/udp", "service": "OpenShift OVS sdn"}, "output": ["", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n"]} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'179/tcp', u'service': u'Calico BGP Port'}) => {"changed": false, "item": {"cond": false, "port": "179/tcp", "service": "Calico BGP Port"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'/tcp', u'service': u'Kubernetes service NodePort TCP'}) => {"changed": false, "item": {"cond": false, "port": "/tcp", "service": "Kubernetes service NodePort TCP"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'/udp', u'service': u'Kubernetes service NodePort UDP'}) => {"changed": false, "item": {"cond": false, "port": "/udp", "service": "Kubernetes service NodePort UDP"}, "skip_reason": "Conditional result was False", "skipped": true} changed: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'port': u'9000-10000/tcp', u'service': u'Prometheus monitoring'}) => {"changed": true, "failed": false, "item": {"port": "9000-10000/tcp", "service": "Prometheus monitoring"}, "output": ["", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n"]} changed: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': True, u'port': u'1936/tcp', u'service': u'Router stats port'}) => {"changed": true, "failed": false, "item": {"cond": true, "port": "1936/tcp", "service": "Router stats port"}, "output": ["", "iptables: Saving firewall rules to /etc/sysconfig/iptables: [ OK ]\r\n"]} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8085/tcp', u'service': u'Contrail VRouter Agent Introspect'}) => {"changed": false, "item": {"cond": false, "port": "8085/tcp", "service": "Contrail VRouter Agent Introspect"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8097/tcp', u'service': u'Contrail VRouter Agent Metadata Proxy'}) => {"changed": false, "item": {"cond": false, "port": "8097/tcp", "service": "Contrail VRouter Agent Metadata Proxy"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'9091/tcp', u'service': u'Contrail VRouter Agent Port IPC'}) => {"changed": false, "item": {"cond": false, "port": "9091/tcp", "service": "Contrail VRouter Agent Port IPC"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8102/tcp', u'service': u'Contrail VRouter Agent NodeMgr'}) => {"changed": false, "item": {"cond": false, "port": "8102/tcp", "service": "Contrail VRouter Agent NodeMgr"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'6379/tcp', u'service': u'Contrail Redis Query Port'}) => {"changed": false, "item": {"cond": false, "port": "6379/tcp", "service": "Contrail Redis Query Port"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8112/tcp', u'service': u'Contrail Config Database NodeMgr'}) => {"changed": false, "item": {"cond": false, "port": "8112/tcp", "service": "Contrail Config Database NodeMgr"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'9041/tcp', u'service': u'Contrail Config Cassandra'}) => {"changed": false, "item": {"cond": false, "port": "9041/tcp", "service": "Contrail Config Cassandra"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'9161/tcp', u'service': u'Contrail Config Cassandra 2'}) => {"changed": false, "item": {"cond": false, "port": "9161/tcp", "service": "Contrail Config Cassandra 2"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'7010/tcp', u'service': u'Contrail Config Cassandra 3'}) => {"changed": false, "item": {"cond": false, "port": "7010/tcp", "service": "Contrail Config Cassandra 3"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'2181/tcp', u'service': u'Contrail Config Zookeeper 1'}) => {"changed": false, "item": {"cond": false, "port": "2181/tcp", "service": "Contrail Config Zookeeper 1"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'43391/tcp', u'service': u'Contrail Config Zookeeper 2'}) => {"changed": false, "item": {"cond": false, "port": "43391/tcp", "service": "Contrail Config Zookeeper 2"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'2888/tcp', u'service': u'Contrail Config Zookeeper 3'}) => {"changed": false, "item": {"cond": false, "port": "2888/tcp", "service": "Contrail Config Zookeeper 3"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'3888/tcp', u'service': u'Contrail Config Zookeeper 4'}) => {"changed": false, "item": {"cond": false, "port": "3888/tcp", "service": "Contrail Config Zookeeper 4"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'4369/tcp', u'service': u'Contrail RabbitMQ'}) => {"changed": false, "item": {"cond": false, "port": "4369/tcp", "service": "Contrail RabbitMQ"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'25672/tcp', u'service': u'Contrail RabbitMQ 2'}) => {"changed": false, "item": {"cond": false, "port": "25672/tcp", "service": "Contrail RabbitMQ 2"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'5672/tcp', u'service': u'Contrail RabbitMQ 3'}) => {"changed": false, "item": {"cond": false, "port": "5672/tcp", "service": "Contrail RabbitMQ 3"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8103/tcp', u'service': u'Contrail Controller Database NodeMgr'}) => {"changed": false, "item": {"cond": false, "port": "8103/tcp", "service": "Contrail Controller Database NodeMgr"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'9092/tcp', u'service': u'Contrail Kafka'}) => {"changed": false, "item": {"cond": false, "port": "9092/tcp", "service": "Contrail Kafka"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'33994/tcp', u'service': u'Contrail Kafka 2'}) => {"changed": false, "item": {"cond": false, "port": "33994/tcp", "service": "Contrail Kafka 2"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'9042/tcp', u'service': u'Contrail Analytics Cassandra 1'}) => {"changed": false, "item": {"cond": false, "port": "9042/tcp", "service": "Contrail Analytics Cassandra 1"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'9160/tcp', u'service': u'Contrail Analytics Cassandra 2'}) => {"changed": false, "item": {"cond": false, "port": "9160/tcp", "service": "Contrail Analytics Cassandra 2"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'7000/tcp', u'service': u'Contrail Analytics Cassandra 3'}) => {"changed": false, "item": {"cond": false, "port": "7000/tcp", "service": "Contrail Analytics Cassandra 3"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'2182/tcp', u'service': u'Contrail Analytics Zookeeper'}) => {"changed": false, "item": {"cond": false, "port": "2182/tcp", "service": "Contrail Analytics Zookeeper"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'40799/tcp', u'service': u'Contrail Analytics Zookeeper 2'}) => {"changed": false, "item": {"cond": false, "port": "40799/tcp", "service": "Contrail Analytics Zookeeper 2"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8090/tcp', u'service': u'Contrail Analytics HTTP Opserver'}) => {"changed": false, "item": {"cond": false, "port": "8090/tcp", "service": "Contrail Analytics HTTP Opserver"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'4888/tcp', u'service': u'Contrail Analytics Zookeeper 3'}) => {"changed": false, "item": {"cond": false, "port": "4888/tcp", "service": "Contrail Analytics Zookeeper 3"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'5888/tcp', u'service': u'Contrail Analytics Zookeeper 4'}) => {"changed": false, "item": {"cond": false, "port": "5888/tcp", "service": "Contrail Analytics Zookeeper 4"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8081/tcp', u'service': u'Contrail Analytics Opserver'}) => {"changed": false, "item": {"cond": false, "port": "8081/tcp", "service": "Contrail Analytics Opserver"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8089/tcp', u'service': u'Contrail Analytics HTTP Collector'}) => {"changed": false, "item": {"cond": false, "port": "8089/tcp", "service": "Contrail Analytics HTTP Collector"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8086/tcp', u'service': u'Contrail Analytic Collector'}) => {"changed": false, "item": {"cond": false, "port": "8086/tcp", "service": "Contrail Analytic Collector"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'3514/tcp', u'service': u'Contrail Analytics Collector Structured Syslog'}) => {"changed": false, "item": {"cond": false, "port": "3514/tcp", "service": "Contrail Analytics Collector Structured Syslog"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8091/tcp', u'service': u'Contrail Analytics Query Engine'}) => {"changed": false, "item": {"cond": false, "port": "8091/tcp", "service": "Contrail Analytics Query Engine"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'5920/tcp', u'service': u'Contrail Analytics Snmp Collector'}) => {"changed": false, "item": {"cond": false, "port": "5920/tcp", "service": "Contrail Analytics Snmp Collector"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'5921/tcp', u'service': u'Contrail Analytics Port Topology'}) => {"changed": false, "item": {"cond": false, "port": "5921/tcp", "service": "Contrail Analytics Port Topology"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8104/tcp', u'service': u'Contrail Analytics NodeMgr'}) => {"changed": false, "item": {"cond": false, "port": "8104/tcp", "service": "Contrail Analytics NodeMgr"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'5995/tcp', u'service': u'Contrail Analytics Alarm Generator'}) => {"changed": false, "item": {"cond": false, "port": "5995/tcp", "service": "Contrail Analytics Alarm Generator"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'5269/tcp', u'service': u'Contrail Control XMPP'}) => {"changed": false, "item": {"cond": false, "port": "5269/tcp", "service": "Contrail Control XMPP"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8083/tcp', u'service': u'Contrail Control Control'}) => {"changed": false, "item": {"cond": false, "port": "8083/tcp", "service": "Contrail Control Control"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8092/udp', u'service': u'Contrail Control DNS'}) => {"changed": false, "item": {"cond": false, "port": "8092/udp", "service": "Contrail Control DNS"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8093/tcp', u'service': u'Contrail Control DNS XMPP'}) => {"changed": false, "item": {"cond": false, "port": "8093/tcp", "service": "Contrail Control DNS XMPP"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8101/tcp', u'service': u'Contrail Control NodeMgr'}) => {"changed": false, "item": {"cond": false, "port": "8101/tcp", "service": "Contrail Control NodeMgr"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'179/tcp', u'service': u'Contrail Control BGP'}) => {"changed": false, "item": {"cond": false, "port": "179/tcp", "service": "Contrail Control BGP"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8082/tcp', u'service': u'Contrail Config API server'}) => {"changed": false, "item": {"cond": false, "port": "8082/tcp", "service": "Contrail Config API server"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8084/tcp', u'service': u'Contrail Config HTTP API server'}) => {"changed": false, "item": {"cond": false, "port": "8084/tcp", "service": "Contrail Config HTTP API server"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8087/tcp', u'service': u'Contrail Config Schema Transformer'}) => {"changed": false, "item": {"cond": false, "port": "8087/tcp", "service": "Contrail Config Schema Transformer"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8088/tcp', u'service': u'Contrail Config Service Monitor'}) => {"changed": false, "item": {"cond": false, "port": "8088/tcp", "service": "Contrail Config Service Monitor"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8096/tcp', u'service': u'Contrail Config Device Manager'}) => {"changed": false, "item": {"cond": false, "port": "8096/tcp", "service": "Contrail Config Device Manager"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8100/tcp', u'service': u'Contrail Config NodeMgr'}) => {"changed": false, "item": {"cond": false, "port": "8100/tcp", "service": "Contrail Config NodeMgr"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'9100/tcp', u'service': u'Contrail Config API Backend'}) => {"changed": false, "item": {"cond": false, "port": "9100/tcp", "service": "Contrail Config API Backend"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8143/tcp', u'service': u'Contrail WebUI'}) => {"changed": false, "item": {"cond": false, "port": "8143/tcp", "service": "Contrail WebUI"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8180/tcp', u'service': u'Contrail WebUI 2'}) => {"changed": false, "item": {"cond": false, "port": "8180/tcp", "service": "Contrail WebUI 2"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8080/tcp', u'service': u'Contrail WebUI Console'}) => {"changed": false, "item": {"cond": false, "port": "8080/tcp", "service": "Contrail WebUI Console"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'8108/tcp', u'service': u'Contrail KubeManager Introspect'}) => {"changed": false, "item": {"cond": false, "port": "8108/tcp", "service": "Contrail KubeManager Introspect"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'18443/tcp', u'service': u'Contrail Openshift WebConsole'}) => {"changed": false, "item": {"cond": false, "port": "18443/tcp", "service": "Contrail Openshift WebConsole"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'53/tcp', u'service': u'skydns tcp 2 contrail_dns'}) => {"changed": false, "item": {"cond": false, "port": "53/tcp", "service": "skydns tcp 2 contrail_dns"}, "skip_reason": "Conditional result was False", "skipped": true} skipping: [ec2-54-147-200-216.compute-1.amazonaws.com] => (item={u'cond': False, u'port': u'53/udp', u'service': u'skydns udp 2 contrail_dns'}) => {"changed": false, "item": {"cond": false, "port": "53/udp", "service": "skydns udp 2 contrail_dns"}, "skip_reason": "Conditional result was False", "skipped": true}
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:1642