Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2222420

Summary:	designate worker notify messages rejected by bind9 when deploying IPv6
Product:	Red Hat OpenStack	Reporter:	Brent Eagles <beagles>
Component:	tripleo-ansible	Assignee:	Lilach Avraham <lavraham>
Status:	CLOSED ERRATA	QA Contact:	Joe H. Rahme <jhakimra>
Severity:	high	Docs Contact:
Priority:	high
Version:	17.0 (Wallaby)	CC:	ashtempl, gbrinn, gregraka, joflynn, lavraham, mariel
Target Milestone:	z2	Keywords:	Triaged
Target Release:	17.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	tripleo-ansible-3.3.1-17.1.20231101230823.4d015bf.el9ost	Doc Type:	Bug Fix
Doc Text:	Before this update, in environments that used IPv6 networks that ran the RHOSP DNS service (designate), the BIND 9 backend server rejected DNS notify messages. With this update, the BIND 9 back-end server does not reject DNS notify messages.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2024-01-16 14:29:56 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Brent Eagles 2023-07-12 17:06:52 UTC

notify messages from the designate worker are sometimes rejected by tripleo deployed bind instances as the worker sometimes use a source address that is not on the allow-notify list in bind configuration. So far this has only been noticed in IPv6 deployments.

Comment 6 Brent Eagles 2023-08-31 12:42:34 UTC

*** Bug 2218148 has been marked as a duplicate of this bug. ***

Comment 12 Lilach Avraham 2023-11-21 09:32:10 UTC

Designate IPV6 job passed [1].
There is a dedicated test for the Notify message named: test_notify_msg_sent_to_nameservers,
and this test passed [2].

Move this BZ to VERIFIED.

[1] -  https://rhos-ci-jenkins.lab.eng.tlv2.redhat.com/view/DFG/view/network/view/openstack-designate/job/DFG-network-openstack-designate-17.1_director-rhel-virthost-3cont_2comp-ipv6-geneve/
[2] - http://rhos-ci-logs.lab.eng.tlv2.redhat.com/logs/rcj/DFG-network-openstack-designate-17.1_director-rhel-virthost-3cont_2comp-ipv6-geneve/57/test_results/tempest-results-designate.1.html

Comment 24 errata-xmlrpc 2024-01-16 14:29:56 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Red Hat OpenStack Platform 17.1.2 bug fix and enhancement advisory), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2024:0209