Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1811680

Summary:	Missing firewall rules for RabbitMQ CLI tools
Product:	Red Hat OpenStack	Reporter:	John Eckersberg <jeckersb>
Component:	openstack-tripleo-heat-templates	Assignee:	John Eckersberg <jeckersb>
Status:	CLOSED ERRATA	QA Contact:	David Rosenfeld <drosenfe>
Severity:	high	Docs Contact:
Priority:	high
Version:	16.0 (Train)	CC:	dabarzil, knoha, lmiccini, mburns, michele
Target Milestone:	beta	Keywords:	Triaged
Target Release:	16.1 (Train on RHEL 8.2)
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	openstack-tripleo-heat-templates-11.3.2-0.20200315025718.033aae9.el8ost	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-07-29 07:50:57 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description John Eckersberg 2020-03-09 14:31:17 UTC

Description of problem:
With newer RabbitMQ, the CLI tools need to be able to bind and receive callback messages on 35672-35682 for certain operations such as listing queues and connections.

See: https://www.rabbitmq.com/networking.html#ports

Version-Release number of selected component (if applicable):
rabbitmq-server-3.7.23-2.el8ost.x86_64
openstack-tripleo-heat-templates-11.3.2-0.20200211065543.d3d6dc3.el8ost.noarch

How reproducible:
Always

Steps to Reproduce:
1. Within rabbitmq bundle, `rabbitmqctl list_queues`

Actual results:
Local queues will print, and then the command will hang while it waits for replies from other cluster members, eventually failing with:

{:badrpc, {:timeout, 60.0, "Some queue(s) are unresponsive, use list_unresponsive_queues command."}}


Expected results:
All queues print and the command returns successfully after only one second or so.

Comment 5 Luca Miccini 2020-03-17 11:41:38 UTC

Last login: Tue Mar 17 11:40:14 2020 from 192.168.24.254
[heat-admin@messaging-0 ~]$ sudo -i
[root@messaging-0 ~]# iptables -L |grep -i rabb
ACCEPT     tcp  --  anywhere             anywhere             multiport dports vtr-emulator,epmd,amqp,25672,25673:25683 state NEW /* 109 rabbitmq-bundle ipv4 */

Comment 8 Alex McLeod 2020-06-16 12:28:49 UTC

If this bug requires doc text for errata release, please set the 'Doc Type' and provide draft text according to the template in the 'Doc Text' field. The documentation team will review, edit, and approve the text.

If this bug does not require doc text, please set the 'requires_doc_text' flag to '-'.

Comment 10 errata-xmlrpc 2020-07-29 07:50:57 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:3148