I have deployed a new cluster on versions:
3 Hosts: Centos 8.3 and last update
Ovirt: 4.4.4.7-1.el8
Cluster properties: switch - OVS; Firewall - Firewalld
During the initial deployment of the host in such a cluster, everything is successfully
installed, all virtual networks and bridges are created, and the host is activated.
But after that, Firewalld does not work correctly, for example, when executing the
command
firewall-cmd --reload
Issued by:
Error: COMMAND_FAILED: 'python-nftables' failed:
JSON blob:
{"nftables": [{"metainfo": {"json_schema_version": 1}},
{"add": {"table": {"family": "inet",
"name": "firewalld_policy_drop"}}}, {"add":
{"chain": {"family": "inet", "table":
"firewalld_policy_drop", "name": "filter_input",
"type": "filter", "hook": "input",
"prio": 9, "policy": "drop"}}}, {"add":
{"chain": {"family": "inet", "table":
"firewalld_policy_drop", "name": "filter_forward",
"type": "filter", "hook": "forward",
"prio": 9, "policy": "drop"}}}, {"add":
{"chain": {"family": "inet", "table":
"firewalld_policy_drop", "name": "filter_output",
"type": "filter", "hook": "output",
"prio": 9, "policy": "drop"}}}, {"add":
{"rule": {"family": "inet", "table":
"firewalld_policy_drop", "chain": "filter_input",
"expr": [{"match": {"left": {"ct":
{"key": "state"}}, "op": "in", "right":
{"set": ["established", "related"]}}}, {"accept":
null}]}}}, {"add": {"rule": {"family": "inet",
"table": "firewalld_policy_drop", "chain":
"filter_forward", "expr": [{"match": {"left":
{"ct": {"key": "state"}}, "op": "in",
"right": {"set": ["established", "related"]}}},
{"accept": null}]}}}, {"add": {"rule": {"family":
"inet", "table": "firewalld_policy_drop", "chain":
"filter_output", "expr": [{"match": {"left":
{"ct": {"key": "state"}}, "op": "in",
"right": {"set": ["established", "related"]}}},
{"accept": null}]}}}]}
Now all ansible-playbook ovirt starts to execute uncorrectly
For example this error is thrown every time I try to reinstall the host:
VDSM SMnode02 command CollectVdsNetworkDataAfterInstallationVDS failed: Internal JSON-RPC
error: {'reason': ’management’}
I understand that ovirt correctly executes scripts, and this problem is related to the
applications Firewalld, openvswitch, NetworkManager.
Is there some workaround so that at least ovirt can re-install hosts?