OSP17.1: Deployment stuck in "Manage firewall rules" phase

Solution Verified - Updated -

Issue

  • During the deployment of OSP17.1 the Manage firewall rules section gets stuck with almost no activity on the overcloud nodes.

  • It's only the Controller nodes where it takes long:

    2023-08-23 11:54:40,116 p=89502 u=stack n=ansible | 2023-08-23 11:54:40.115993 | fa163e1d-f3ca-004e-1d59-000000003703 |    SUMMARY | overcloud-controller-1 | tripleo_firewall : Manage firewall rules | 3335.07s
    2023-08-23 11:54:40,116 p=89502 u=stack n=ansible | 2023-08-23 11:54:40.116415 | fa163e1d-f3ca-004e-1d59-000000003703 |    SUMMARY | overcloud-controller-0 | tripleo_firewall : Manage firewall rules | 3072.81s
    2023-08-23 11:54:40,117 p=89502 u=stack n=ansible | 2023-08-23 11:54:40.116855 | fa163e1d-f3ca-004e-1d59-000000003703 |    SUMMARY | overcloud-controller-2 | tripleo_firewall : Manage firewall rules | 2229.57s
    
  • The nodes become UNREACHABLE at some point too:

    2023-08-23 11:26:18,143 p=89502 u=stack n=ansible | 2023-08-23 11:26:18.143012 | fa163e1d-f3ca-004e-1d59-000000003703 | UNREACHABLE | Manage firewall rules | overcloud-controller-2
    2023-08-23 11:40:22,216 p=89502 u=stack n=ansible | 2023-08-23 11:40:22.215375 | fa163e1d-f3ca-004e-1d59-000000003703 | UNREACHABLE | Manage firewall rules | overcloud-controller-0
    2023-08-23 11:44:44,994 p=89502 u=stack n=ansible | 2023-08-23 11:44:44.994172 | fa163e1d-f3ca-004e-1d59-000000003703 | UNREACHABLE | Manage firewall rules | overcloud-controller-1
    2023-08-23 11:54:40,116 p=89502 u=stack n=ansible | 2023-08-23 11:54:40.115993 | fa163e1d-f3ca-004e-1d59-000000003703 |    SUMMARY | overcloud-controller-1 | tripleo_firewall : Manage firewall rules | 3335.07s
    2023-08-23 11:54:40,116 p=89502 u=stack n=ansible | 2023-08-23 11:54:40.116415 | fa163e1d-f3ca-004e-1d59-000000003703 |    SUMMARY | overcloud-controller-0 | tripleo_firewall : Manage firewall rules | 3072.81s
    2023-08-23 11:54:40,117 p=89502 u=stack n=ansible | 2023-08-23 11:54:40.116855 | fa163e1d-f3ca-004e-1d59-000000003703 |    SUMMARY | overcloud-controller-2 | tripleo_firewall : Manage firewall rules | 2229.57s
    

Environment

  • Red Hat OpenStack Platform release 17.1.2 and older releases.

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content