Bug 1723975 - [osp14][DCN][Spine & Leaf] ssh timeout into compute overcloud nodes post overcloud.AllNodesDeploySteps
Summary: [osp14][DCN][Spine & Leaf] ssh timeout into compute overcloud nodes post over...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-tripleo-heat-templates
Version: 14.0 (Rocky)
Hardware: All
OS: Linux
high
high
Target Milestone: z3
: 14.0 (Rocky)
Assignee: Emilien Macchi
QA Contact: Sasha Smolyak
URL:
Whiteboard:
Depends On: 1722636 1724560 1724565
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-06-25 22:04 UTC by Alex Schultz
Modified: 2019-07-02 20:09 UTC (History)
16 users (show)

Fixed In Version: openstack-tripleo-heat-templates-9.3.1-0.20190513171738.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1722636
Environment:
Last Closed: 2019-07-02 20:09:21 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 667296 0 None MERGED Rocky only - allow SSH from any source 2020-02-07 12:28:03 UTC
Red Hat Product Errata RHBA-2019:1672 0 None None None 2019-07-02 20:09:22 UTC

Comment 5 Bob Fournier 2019-06-30 15:25:16 UTC 
No need for doc text as this is a regression.
Comment 9 bjacot 2019-07-01 19:39:25 UTC 
I performed a iprules check on an OSP14 deployment.  The compute node has the updated rule needed to resolve this issue.

(undercloud) [stack@undercloud-0 ~]$ cat /etc/yum.repos.d/latest-installed 
14  -p 2019-06-26.1

(undercloud) [stack@undercloud-0 ~]$ rpm -qa | grep templates
openstack-tripleo-heat-templates-9.3.1-0.20190513171738.el7ost.noarch

(undercloud) [stack@undercloud-0 ~]$ ssh heat-admin.24.9
Warning: Permanently added '192.168.24.9' (ECDSA) to the list of known hosts.
[heat-admin@overcloud-ceph3-0 ~]$ sudo iptables -L
Chain INPUT (policy ACCEPT)
[...]
ACCEPT     tcp  --  anywhere             anywhere             multiport dports ssh state NEW /* 003 accept ssh from any ipv4 */
Comment 11 errata-xmlrpc 2019-07-02 20:09:21 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:1672
Note You need to log in before you can comment on or make changes to this bug.