puppet-tripleo/releasenotes/notes/neutron_iptables-9ea317c73b79929d.yaml
Emilien Macchi 3c71c483e3 Remove neutron-managed firewall rules from /etc/sysconfig/iptables
See https://bugzilla.redhat.com/show_bug.cgi?id=1541528

We don't want IPtables rules managed by Neutron to be persistent, it can
cause issues when rule are recreated while a namespace doesn't exist.

This patch makes sure that in any Neutron node, no IPtables rule will be
persistent if it contains "neutron-" in the name.

Change-Id: Ife465c2c6739c3cbfb9923ed97f370baa745739c
Related-Bug: #1747960
2018-02-14 21:44:51 -08:00

6 lines
172 B
YAML

---
features:
- |
IPtables rules managed by Neutron won't be persistent on the host anymore.
Instead, they'll be removed (if exist) from /etc/sysconfig/iptables.