I’m in the same boat, puppet managing iptables rules, and was able to continue 
forcing it on my 4.3.x ovirt systems. Engine-setup complains all the time, but 
so far it hasn’t broken anything.

  -Darrell


> On Jul 4, 2019, at 9:38 AM, Jordan Conway <jcon...@linuxfoundation.org> wrote:
> 
> Hello,
> I'm working on migrating an existing ovirt setup to a new hosted-engine setup 
> and I've been seeing messages about iptables support being deprecated and 
> slated to be removed.
> Can I continue using iptables to manage the firewalls on my ovirt hosts if I 
> don't care about allowing ovirt to configure the firewalls?
> We manage all of our machines with puppet and iptables is deeply integrated 
> into this. It would be non-trivial to migrate to firewalld support.
> As it stands I already manage the firewall rules for our ovirt hosts with 
> puppet and iptables and have always ignored the "Automatically Configure 
> Firewall" option when adding new hosts. Will this continue to work?
> 
> Also with hosted engine, I had to cowboy enable firewalld to get the engine 
> installed, but now that I've got a cluster up and running with hosted engine 
> enabled on several hosts, can I just switch back from firewalld to iptables 
> assuming I've got all the correct ports open?
> 
> Thank you,
> Jordan Conway
> _______________________________________________
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/site/privacy-policy/
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/CFKUWD44EKAOGHSR5PBOC5CL5YMXZCR4/
_______________________________________________
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/7HKXXY6KFVICSGFYAPTKTYPRUWCF35FU/

Reply via email to