Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

This project is now read‑only. Starting Monday, February 2, please use https://ibm-ceph.atlassian.net/ for all bug tracking management.

Bug 2154752

Summary:	[RFE] [Ref eng BZ 2152986 ] : Check and modify iptables config before installation procedure
Product:	[Red Hat Storage] Red Hat Ceph Storage	Reporter:	Vasishta <vashastr>
Component:	Documentation	Assignee:	lysanche
Documentation sub component:	Install Guide	QA Contact:	Manisha Saini <msaini>
Status:	CLOSED CURRENTRELEASE	Docs Contact:
Severity:	high
Priority:	unspecified	CC:	asriram, bhubbard, msaini, pdhange, rmandyam, saraut
Version:	5.3	Keywords:	FutureFeature
Target Milestone:	---
Target Release:	6.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-06-21 06:59:51 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2152986
Bug Blocks:

Description Vasishta 2022-12-19 05:58:22 UTC

Describe the issue:
Some configurations in iptables config caused OSDs to go down when a node was restarted (or ip config restart).
We need to ask users to remove those configs before installation so that refresh off iptables services doesn't cause issues to the cluster.

Describe the task you were trying to accomplish:
Installation and management of services.

Suggestions for improvement:
Commands to check and update iptables config remove configs which are not compatible to ceph cluster.

Chapter/Section Number and Title:
Somewhere before installation procedure as pre-req.

Product Version:
5.3

Any other versions of this document that also needs this update:
6.0

Additional information:
Refer 2152986 for more details on context and the need.

Comment 2 Brad Hubbard 2022-12-20 04:48:55 UTC

Is this inadequate?

https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/5/html-single/configuration_guide/index#ceph-network-configuration

Comment 8 lysanche 2023-03-21 14:37:38 UTC

Hi Vasishta,

Here are my proposed changes for the Installation Guide and Configuration Guide. Please feel free to make any changes that are needed in the text or placement of the text.

In the Installation Guide, Chapter 3. Red Hat Ceph Storage installation, add the following prerequisite as the last bullet:

https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/6/html-single/installation_guide/index#red-hat-ceph-storage-installation

Prerequisites

- Removal of some configurations in iptables configuration so that refresh of iptables services does not cause issues to the cluster. See Configuration Guide, 2.1. Network configuration for Ceph for more information.

In the Configuration Guide, section 2.1. Network configuration for Ceph, make the following changes. Please provide the Syntax and an Example. Also please provide what configurations need to be removed.

https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/6/html-single/configuration_guide/index#network-configuration-for-ceph_conf

Change this:

Some deployment utilities, such as cephadm creates a configuration file for you. Do not set these values if the deployment utility does it for you.

to this:

Some deployment utilities, such as cephadm creates a configuration file for you. Do not set these values if the deployment utility does it for you.

Remove the following configurations in iptables configuration so that refresh of iptables services does not cause issues to the cluster:

_______________

Syntax

Example

Thanks very much.
Lynn

Comment 9 Vasishta 2023-03-27 06:25:12 UTC

Hi Lynn,

(In reply to lysanche from comment #8)

> Prerequisites
> 
> - Removal of some configurations in iptables configuration so that refresh
> of iptables services does not cause issues to the cluster. See Configuration
> Guide, 2.1. Network configuration for Ceph for more information.
> 

IMO, it could be something like
> - Remove troubling configurations in iptables configurations so that refresh
> of iptables services does not cause issues to the cluster. Refer configuration guide for example.

For configuration guide -
Contents are already present in Step 1.ii
https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/5/html-single/configuration_guide/index#verifying-firewall-rules-are-configured-for-default-Ceph-ports_conf

Comment 10 lysanche 2023-03-27 18:06:59 UTC

Hi Ranjini,

Could you please peer review?

MR: https://gitlab.cee.redhat.com/red-hat-ceph-storage-documentation/red-hat-ceph-storage-6/-/merge_requests/91


Preview: https://jenkins.dxp.redhat.com/job/CCS/job/ccs-mr-preview/45186/artifact/titles/installation/preview/index.html#red-hat-ceph-storage-installation

Thanks,
Lynn

Comment 12 lysanche 2023-04-04 12:28:06 UTC

Hi Manisha,

This is ready for QE.

MR: https://gitlab.cee.redhat.com/red-hat-ceph-storage-documentation/red-hat-ceph-storage-6/-/merge_requests/93

Preview: https://jenkins.dxp.redhat.com/job/CCS/job/ccs-mr-preview/45620/artifact/titles/installation/preview/index.html#red-hat-ceph-storage-installation

Thanks,
Lynn

Comment 13 Manisha Saini 2023-04-11 15:45:32 UTC

Changes looks good to me. Moving this to Verified state.

Comment 14 lysanche 2023-04-17 12:06:53 UTC

Same changes made to 5.3:

MR: https://gitlab.cee.redhat.com/red-hat-ceph-storage-documentation/doc-Red_Hat_Ceph_Storage_5-Installation_Guide/-/merge_requests/439

Preview: https://jenkins.dxp.redhat.com/job/CCS/job/ccs-mr-preview/46265/artifact/preview/index.html#red-hat-ceph-storage-installation

Comment 15 lysanche 2023-04-17 14:10:14 UTC

Changes made to IBM 5.x:

https://ibmdocs-test.dcs.ibm.com/docs/en/storage-ceph/5?topic=installing-storage-ceph-installation

Comment 16 lysanche 2023-04-28 11:57:31 UTC

Changes merged and moving to release_pending.