Project

General

Profile

Actions

action #120411

closed

coordination #121876: [epic] Handle openQA review failures in Yam squad - SLE 15 SP5

Apply firewall restart after each command that change configuration only in SLE

Added by rainerkoenig over 1 year ago. Updated over 1 year ago.

Status:
Resolved
Priority:
High
Assignee:
Target version:
Start date:
2022-11-14
Due date:
% Done:

0%

Estimated time:

Description

Motivation

In the current build 40.1 we have systemic failures in the test modules introduced in #113492 that all fail in validate_script_output:

According to https://bugzilla.suse.com/show_bug.cgi?id=1204893 we need to restart the firewall to validate properly the configuration in SLE due to defaults, reload doesn't work (see why in the bug) and that explains why for openSUSE we don't need a restart.

Acceptance criteria

AC1: Apply firewall restart after each command that change configuration only in SLE

Additional information

https://firewalld.org/documentation/man-pages/firewall-cmd.html (search for FlushAllOnReload)
For UI testing we always avoid conditions, specially those magic ones is_sle, is_tumbleweed, which just have tendency to accumulate and create spaghetti code. For UI we have different patterns to be use.
On the other hand for validation of the system, packages are different between different products and architectures so it is more tricky to avoid conditions. we could use:

  • similar patterns than with UI (too complex, probably it is not worth it)
  • test data or TDD (looks weird in cases like this when only one command is different, some command are set in code other in test data... no-go)
  • conditional logic: Probably the best solution, but only if we know exactly to what is conditional and it is not is_sle and derivatives, in this case that particular setting for firewall, so we can express in the code this difference based on that default that change between products, it is clear code, therefore we could:
    • check the value of FlushAllOnReload (only one at the beginning of the test).
    • restart or not accordingly.
Actions #2

Updated by JERiveraMoya over 1 year ago

  • Tags set to qe-yast-refinement
  • Description updated (diff)
  • Priority changed from Normal to High
  • Target version set to Current
Actions #3

Updated by coolgw over 1 year ago

This is issue of yast, no a ticket for us.
Reload firewall can not take effect.

Actions #4

Updated by JERiveraMoya over 1 year ago

  • Description updated (diff)
Actions #5

Updated by JERiveraMoya over 1 year ago

coolgw wrote:

This is issue of yast, no a ticket for us.
Reload firewall can not take effect.

Let's restart the service then. Updated description.

Actions #6

Updated by JERiveraMoya over 1 year ago

  • Subject changed from Investigate failures in new yast2_firewall* modules using the libyui-rest-api to Apply firewall restart after each command that change configuration only in SLE
  • Description updated (diff)
Actions #7

Updated by JERiveraMoya over 1 year ago

  • Tags deleted (qe-yast-refinement)
  • Status changed from New to Workable
Actions #8

Updated by tinawang123 over 1 year ago

  • Status changed from Workable to In Progress
Actions #9

Updated by tinawang123 over 1 year ago

  • Assignee set to tinawang123
Actions #10

Updated by JERiveraMoya over 1 year ago

  • Parent task set to #121876
Actions #12

Updated by openqa_review over 1 year ago

This is an autogenerated message for openQA integration by the openqa_review script:

This bug is still referenced in a failing openQA test: yast2_gui
https://openqa.suse.de/tests/10226704#step/yast2_firewall_set_default_zone_prepare/1

To prevent further reminder comments one of the following options should be followed:

  1. The test scenario is fixed by applying the bug fix to the tested product or the test is adjusted
  2. The openQA job group is moved to "Released" or "EOL" (End-of-Life)
  3. The bugref in the openQA scenario is removed or replaced, e.g. label:wontfix:boo1234

Expect the next reminder at the earliest in 28 days if nothing changes in this ticket.

Actions #13

Updated by JERiveraMoya over 1 year ago

  • Status changed from In Progress to Resolved
Actions

Also available in: Atom PDF