puppet-tripleo/releasenotes/notes/neutron_iptables-9ea317c73b79929d.yaml
Emilien Macchi 5086c67bdf Remove neutron-managed firewall rules from /etc/sysconfig/iptables
See https://bugzilla.redhat.com/show_bug.cgi?id=1541528

We don't want IPtables rules managed by Neutron to be persistent, it can
cause issues when rule are recreated while a namespace doesn't exist.
This patch makes sure that in any Neutron node, no IPtables rule will be
persistent if it contains "neutron-" in the name.

Change-Id: Ife465c2c6739c3cbfb9923ed97f370baa745739c
Related-Bug: #1747960
(cherry picked from commit 3c71c483e3)
2018-02-21 06:01:48 +00:00

6 lines
172 B
YAML

---
features:
- |
IPtables rules managed by Neutron won't be persistent on the host anymore.
Instead, they'll be removed (if exist) from /etc/sysconfig/iptables.