Martin Peřina has submitted this change and it was merged. Change subject: engine: open iptables holes on OVN hosts ...................................................................... engine: open iptables holes on OVN hosts OVN does not currently open any firewall holes for its hosts, and the existing plans are only for firewalld. VDSM needs iptables instead of firewalld. Therefore we need to open iptables holes on our own. Change-Id: I8cda3b30f9ea49cbe5c32c1dfccecce5db4d4f8f Signed-off-by: Marcin Mirecki <mmirecki(a)redhat.com&gt; Bug-Url: https://bugzilla.redhat.com/1416748 --- M packaging/dbscripts/upgrade/pre_upgrade/0000_config.sql 1 file changed, 4 insertions(+), 0 deletions(-) Approvals: Martin Peřina: Looks good to me, approved Marcin Mirecki: Verified Jenkins CI: Passed CI tests Dan Kenigsberg: Looks good to me, but someone else must approve -- To view, visit https://gerrit.ovirt.org/71578 To unsubscribe, visit https://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I8cda3b30f9ea49cbe5c32c1dfccecce5db4d4f8f Gerrit-PatchSet: 3 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Marcin Mirecki <mmirecki(a)redhat.com&gt; Gerrit-Reviewer: Dan Kenigsberg <danken(a)redhat.com&gt; Gerrit-Reviewer: Eli Mesika <emesika(a)redhat.com&gt; Gerrit-Reviewer: Jenkins CI Gerrit-Reviewer: Marcin Mirecki <mmirecki(a)redhat.com&gt; Gerrit-Reviewer: Martin Peřina <mperina(a)redhat.com&gt; Gerrit-Reviewer: Moti Asayag <masayag(a)redhat.com&gt; Gerrit-Reviewer: Sahina Bose <sabose(a)redhat.com&gt; Gerrit-Reviewer: Sandro Bonazzola <sbonazzo(a)redhat.com&gt; Gerrit-Reviewer: Yedidyah Bar David <didi(a)redhat.com&gt; Gerrit-Reviewer: gerrit-hooks <automation(a)ovirt.org&gt;