Test cluster could not sync NTP because port 123 had not been opened (firewall-cmd --add-service ntp worked, and has been made --permanent). This opens up the need to look at Bastion NTP config.
At bare minimum the NTP service needs to be added to firewall. This may not be enough however if the Bastion is not able to get to Internet time servers (like RH seems to assume everyone can). This probably needs to be another traffic-light on the "Getting Started" page of the web interface, to flag that something may not work properly later.
Test cluster could not sync NTP because port 123 had not been opened (
firewall-cmd --add-service ntp
worked, and has been made--permanent
). This opens up the need to look at Bastion NTP config.At bare minimum the NTP service needs to be added to firewall. This may not be enough however if the Bastion is not able to get to Internet time servers (like RH seems to assume everyone can). This probably needs to be another traffic-light on the "Getting Started" page of the web interface, to flag that something may not work properly later.