The Red Hat Enterprise Linux OpenStack Platform Installer does not support UEFI booting. As a result, when attempting to perform a PXE-boot on a UEFI host, the installer will fail to download the required PXE images.

To work around this, switch the host to 'legacy' mode for PXE booting.

During subnet creation of the Public API, Admin API, and Management networks, the Red Hat Enterprise Linux OpenStack Platform installer does not validate whether:

1) IPAM is set to 'DHCP' and boot mode 'dhcp' (provisioning network), or

2) IPAM is set to 'internal db' and boot mode set to 'static'

If IPAM is set to 'internal db', then the range of IP addresses must be greater than or equal to the number of controllers (3) plus the number of VIPs (10-12 depending on which network).

Because these settings are not validated, it is possible for subnets to be created without enough IPs to allocate enough VIPs. In such cases, generating VIPs could result in puppet errors.

To prevent this, you need to manually ensure that your API subnets (Admin, Public, Management) have enough available IP addresses to allocate enough VIPs.

The SELinux policies for the Identity service are missing some enforcement rules for certain operations. As a result, SELinux will cause Identity to malfunction if SELinux is set to enforcing mode. Since this is an early release of Red Hat Enterprise Linux OpenStack Platform 6.0, not all SELinux issues have been found. Red Hat recommends setting SELinux to permissive mode. For more information on how to enable and disable SELinux, see: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/SELinux_Users_and_Administrators_Guide/sect-Security-Enhanced_Linux-Working_with_SELinux-Enabling_and_Disabling_SELinux.html

Known bugs with Microsoft Internet Explorer 9 Cross Origin Resource Sharing (CORS) will prevent Internet Explorer 9 users from leveraging the Red Hat Access plug-in for Red Hat Enterprise Linux OpenStack Platform. There is no workaround other than using a different browser. The inability to use the Red Hat Access plug-in on Internet Explorer 9 will not affect the overall functionality of the OpenStack dashboard. Only Red Hat Access plug-in features will be disabled.

In deployments using IPv6 networks with OpenStack Networking, IPv6 subnets do not have a gateway set. As a result, IPv6 networks do not work as expected.

Stateful DHCPv6 is currently nonfunctional in the Red Hat Enterprise Linux OpenStack Platform 6 (Juno) GA as a result of upstream bug 1377843. Further details are available at https://bugs.launchpad.net/neutron/+bug/1377843.

Due to a missing dependency to python-oslo-utils, python-glanceclient fails to work. As a current workaround, install both the python-oslo-utils and the python-glanceclient package at the same time using the following command: yum install -y python-oslo-utils python-glanceclient

The python-pbr package required by Red Hat Enterprise Linux OpenStack Platform puppet modules is not present in Red Hat Enterprise Linux OpenStack Platform 6. Installation using Packstack will fail if OpenStack Bare Metal Provisioning (ironic), a Technology Preview package, is enabled. Manual installation is required for Bare Metal Provisionin at the moment.

When an overcloud node boots up, it runs os-collect-config as a part of registration. The os-collect-config script saves data from the Orchestration (heat) metadata API locally and then calls os-refresh-config any time that metadata has changed. Subsequent calls to the registration script call subscription-manager again and it returns a non-zero exit code. With the return of a non-zero exit code, the script fails, the stack results in a timeout, and multiple registrations can occur.

There is no current workaround.

An iptables setting in the undercloud causes overcloud nodes to fail to register since the nodes have no external access. As a workaround, run the following command on the undercloud image: iptables -D FORWARD -j REJECT --reject-with icmp-host-prohibited

Previous to the Satellite 6 release, the katello-agent and its dependencies needed the rhel-7-server-rh-common-beta-rpms repository to be enabled. Since the Satellite 6 release, necessary packages have been moved to the rhel-7-server-rh-common-rpms repository. However, upstream code still references the rhel-7-server-rh-common-beta-rpms repository which no longer have the latest packages, causing Satellite instances to fail.

A quiet dependency on a newer version of selinux-policy causes openstack-selinux 0.6.23 to fail to install modules when paired with selinux-policy packages from Red Hat Enterprise Linux 7.0 or 7.0.z. This causes Identity and other OpenStack services to receive 'AVC' denials under some circumstances, causing them to malfunction.

The following workarounds allow the OpenStack services to function correctly:

1) Leave openstack-selinux at 0.6.18-2.el7ost until you are ready to update to Red Hat Enterprise Linux 7.2. At that time, a 'yum update' will resolve the issue.

2) Install the updated selinux-policy and selinux-policy-targeted packages from Red Hat Enterprise Linux 7.2 (version selinux-policy-3.13.1-23.el7 or later), then update openstack-selinux to version 0.6.23-1.el7ost.

When using Red Hat Ceph as a back end for ephemeral storage, the Compute service does not calculate the amount of available storage correctly. Specifically, Compute simply adds up the amount of available storage without factoring in replication. This results in grossly overstated available storage, which in turn could cause unexpected storage oversubscription.

To determine the correct ephemeral storage capacity, query the Ceph service directly instead.