Description of problem: Tripleo is not including the rsyslog port (UDP/514) for log offloading in the lb-health-mgr-sec-grp security group that is applied to the health manager ports on the controllers. The configuration for the main health manager port is here: https://opendev.org/openstack/tripleo-ansible/src/branch/master/tripleo_ansible/roles/octavia_overcloud_config/tasks/network.yml#L89 Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
The Neutron security group is created but is not added to the Neutron port associated with the o-hm0 interface. However, unless I am missing something, TripleO does nonetheless firewall the health manager port (o-hm0) and allows UDP/514: https://github.com/openstack/tripleo-heat-templates/blob/7ae30d403052e1f811cbc530a3cc9ade2ff6aa68/deployment/octavia/octavia-health-manager-container-puppet.yaml#L95-L98
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Release of components for Red Hat OpenStack Platform 16.2.2), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:1001