probably one of the problems that I
haven't switched the cluster from iptables to firewalld. But this is just
my guess.
When switching to from 4.2.8 to 4.3.3 I did not change one host from iptables to firewalld
as well. I was still able to change it later even if the documentation somewhere said
iptables support is to be removed in 4.3.