RHBA-2013:0878 - Bug Fix Advisory

Topic

New and updated packages that fix various bugs and add enhancements are now
available for Red Hat OpenStack 3.0 ("Grizzly") Preview.

Description

The Red Hat OpenStack 3.0 ("Grizzly") Preview packages provide the facilities
for building a private or public infrastructure-as-a-service (IaaS) cloud
running on standard physical hardware. The packages provided include:

• OpenStack Compute ("Nova").
• OpenStack Image Service ("Glance").
• OpenStack Identity ("Keystone").
• OpenStack Networking Service.
• OpenStack Object Storage ("Swift").
• OpenStack Volume ("Cinder").
• OpenStack Dashboard ("Horizon").
• OpenStack Metering ("Ceilometer") - Technical Preview.
• OpenStack Orchestration ("Heat") - Technical Preview.

More information about each of these components and the ways in which they
interact is available in the Red Hat OpenStack release notes document:

https://access.redhat.com/site/documentation/en-US/Red_Hat_OpenStack/3/html/Release_Notes/index.html

These Red Hat OpenStack 3.0 ("Grizzly") Preview packages also include:

• Oz, a tool for performing automated guest operating system installations and

building cloud-friendly virtual machine images.

• Nagios, an infrastructure monitoring dashboard for system administrators.
• PackStack, a utility for rapidly deploying proof of concept OpenStack clouds.

The following known issues have been identified with these packages:

• For an optimal user experience users of this Red Hat OpenStack 3.0 preview

release must set SELinux to permissive mode. To do this log in as the the root
user on each node in the environment and run the "setenforce 0" command. A
future update to the Red Hat OpenStack 3.0 preview will include the SELinux
policies required to support the use of enforcing mode in combination with Red
Hat OpenStack.

• The Ceilometer services included in this preview do not access the

distribution configuration file /usr/share/ceilometer/ceilometer-dist.conf.
Failure to access this file means several important configuration keys appear to
the service as not being set. To work around this issue the user must set the
"logdir", "sql_connection", "rpc_backend", and "enable_v1_api" configuration
keys in the /etc/ceilometer/ceilometer.conf file. The values used for these
configuration keys must be equivalent to those provided in the
/usr/share/ceilometer/ceilometer-dist.conf file.

• The recommended database backend for Ceilometer is provided by the mongodb

package. This package is not currently included in this preview. Users wishing
to install the Ceilometer service, currently available as a technical preview,
must also install the mongodb package from the Extra Packages for Enterprise
Linux (EPEL) repository at this time.

• The OpenStack Networking configuration included in this preview expects a

kernel with network namespaces enabled. As such a kernel is not yet available in
Red Hat Enterprise Linux users must:

• Set the value of the allow_overlapping_ips configuration key in the

/etc/quantum/quantum.conf file to "False".

• Set the value of the use_namespaces configuration key in the

/etc/quantum/dhcp-agent.ini and /etc/quantum/l3-agent.ini files to "False".

Additionally users of the Open vSwitch plug-in must:

• Set the value of the ovs_use_veth configuration key in

/etc/quantum/quantum.conf to "False".

• Set the value of the libvirt_vif_driver configuration key in the

/etc/nova/nova.conf file on each compute node to
"nova.virt.libvirt.vif.LibvirtHybridOVSBridgeDriver".

These configuration changes will disable network namespaces support in OpenStack
Networking. It is recommended that users use a provider network rather than the
L3 agent to provide external network access until such time as network
namespaces support is available.

All users with access to the Red Hat OpenStack 3.0 ("Grizzly") Preview are
advised to install these new and updated packages.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Documentation for both stable and preview releases of Red Hat OpenStack is
available at:

https://access.redhat.com/site/documentation/en-US/Red_Hat_OpenStack/

In particular it is highly recommended that all users read the Release Notes
document for the relevant Red Hat OpenStack release prior to installation.

Affected Products

• Red Hat OpenStack grizzly x86_64

Fixes

• BZ - 888980 - Attempting to delete volume in use leaves Traceback in error_log
• BZ - 888995 - [RFE] Horizon to display network names next to IPs assigned to instance
• BZ - 889878 - No ability to configure PORT name under network ( quantum ) section
• BZ - 889881 - user can't change admin status of a port / network
• BZ - 890207 - Ensure that glance operates properly with v2 API disabled
• BZ - 892327 - Unable to authenticate to any projects if user has not been assigned to a role
• BZ - 894783 - Add migrate operation support to Horizon
• BZ - 894820 - Add support to Nova scheduler for chosing destination for guest live migration
• BZ - 894839 - Change Quantum DHCP agent to use RPC rather than notifications
• BZ - 894925 - Keystone support for trusts
• BZ - 905903 - Ajax notifications for success of actions should disappear after a set amount of time rather than require you to manually close
• BZ - 910415 - Nova: 'nova actions' the command always returns - ERROR: n/a (HTTP 404).
• BZ - 916284 - make copy_to_volume to convert from qcow2 to raw on the fly if needed
• BZ - 917657 - Swift services don't contain "openstack-swift-" in the `status`
• BZ - 918770 - cinder client does not catch gracefully a keyboard interrupt (ctrl-c)
• BZ - 920291 - keystonerc_admin PS1 doesn't handle \$
• BZ - 923519 - revocation list cache times out immeditately
• BZ - 923844 - "glance add" tries to read from the stdin(0) when the copy_from specified
• BZ - 927299 - Horizon doesn't display proper error when Quantum quota exceeded when adding subnets
• BZ - 928822 - Provide ability to add additional compute nodes to an existing packstack deployment
• BZ - 948283 - Horizon fails with an error while trying to terminate a suspended or paused instance
• BZ - 957495 - nova client "network-delete/modify" command is missing
• BZ - 957549 - Security groups can't be created with spaces in their name
• BZ - 958497 - Add /usr/share/$project/$project-dist.conf to the default config set
• BZ - 958753 - security group list of all tenants queried by the admin user is not informative
• BZ - 965001 - Packstack puts selinux to permissive
• BZ - 966413 - quantum-server-setup files when trying to perform the symbolic link
• BZ - 966551 - quantum service does not start due to incorrect webob dependency

CVEs

(none)

References

• https://access.redhat.com/site/documentation/en-US/Red_Hat_OpenStack/3/html/Release_Notes/index.html
• https://access.redhat.com/site/articles/11258
• https://access.redhat.com/site/documentation/en-US/Red_Hat_OpenStack/