-
Bug
-
Resolution: Done-Errata
-
Blocker
-
rhos-17.1.7
-
None
-
False
-
-
False
-
No Docs Impact
-
tripleo-ansible-3.3.1-17.1.20250528174225.8debef3.el8ost tripleo-ansible-3.3.1-17.1.20250528171516.8debef3.el9ost
-
rhos-ops-day1day2-upgrades
-
None
-
Release Note Not Required
-
-
-
Approved
-
Critical
To Reproduce Steps to reproduce the behavior:
- Failed stage Undercloud FFU Upgrade 17 on the Job DFG-upgrades-ffu-17.1-from-16.2-latest_cdn-3cont_3db_3msg_2net_3hci_1ipa-ipv4-ovn_uefi
Expected behavior
- That the job passes
The current error:
2025-05-27 23:16:47 | 2025-05-27 23:16:47.060554 | 5dfc53e1-7cd9-40eb-84be-f77368c38c86 | INCLUDED | /usr/share/ansible/roles/tripleo_nftables/tasks/configure.yml | undercloud-0 2025-05-27 23:16:47 | 2025-05-27 23:16:47.088364 | 52540076-bffb-269f-c001-0000000008f0 | TASK | Push empty ruleset 2025-05-27 23:16:47 | 2025-05-27 23:16:47.589045 | 52540076-bffb-269f-c001-0000000008f0 | FATAL | Push empty ruleset | undercloud-0 | error={"msg": "Invalid variable name in 'register' specified: 'iptables-nft-ruleset'"} 2025-05-27 23:16:47 | 2025-05-27 23:16:47.591825 | 52540076-bffb-269f-c001-0000000008f0 | TIMING | tripleo_nftables : Push empty ruleset | undercloud-0 | 0:01:29.801759 | 0.50s
Bug impact
- All upgrades from 16.2 to 17.1
Known workaround
- There is no Workaround. Applied a patch or request a hf.
Additional context
- is triggered by
-
OSPRH-15158 Since nftables switch, input policy is ACCEPT instead of DROP up until nftables services is reloaded or server is rebooted
-
- Closed
-
- links to
-
RHBA-2025:149893 Red Hat OpenStack Platform 17.1 bug fix and enhancement advisory