Background: This bug was discovered while validating BZ2114617 in conjunction with additional patches: https://review.opendev.org/c/openstack/tripleo-heat-templates/+/851889/ https://review.opendev.org/c/openstack/tripleo-heat-templates/+/853101/ See BZ2114617comment13: https://bugzilla.redhat.com/show_bug.cgi?id=2114617#c13 Description of problem: It looks like THT for ovn-dbs-cluster-ansible.yaml[1] does not handle creating ip rules when there are multiple subnets defined in a network data yaml, e.i. [2]. We only create iptable rule for one subnet but not all. This results in traffic block for the subnets that are not defined (we block all by default for TLS/SSL environments) [1] https://code.engineering.redhat.com/gerrit/c/openstack-tripleo-heat-templates/+/425236/3/deployment/ovn/ovn-dbs-cluster-ansible.yaml#96 [2] https://code.engineering.redhat.com/gerrit/plugins/gitiles/rhos-infrared/+/refs/heads/master/settings/installer/ospd/deployment/edge/osp-17-spine-leaf-ovn-dmbs-ipv6/central/network/network_data_v2.yaml#77
*** Bug 2123404 has been marked as a duplicate of this bug. ***
*** Bug 2123166 has been marked as a duplicate of this bug. ***
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Release of components for Red Hat OpenStack Platform 17.0 (Wallaby)), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2022:6543