RHBA-2013:0933 - Bug Fix Advisory

Topic

An updated openstack-quantum package that fixes various bugs is now available
for Red Hat OpenStack 3.0 (Grizzly) Preview.

Description

OpenStack networking provides a virtual network service for OpenStack. It
provides an API to facilitate the dynamic request and configuration of virtual
networks. These networks connect "interfaces" from other OpenStack services,
including virtual machine instances hosted by the OpenStack compute service. The
OpenStack networking API supports extensions to provide advanced network
capabilities including Quality of Service (QoS), Access Control Lists (ACLs),
and networking monitoring.

These packages address the following issues:

• A Red Hat Enterprise Linux kernel with network namespaces support enabled is

now available in Red Hat OpenStack. As a result OpenStack networking agents are
now able to co-exist on the same host while running in isolated network
namespaces.

By default OpenStack networking as deployed by Red Hat OpenStack is now
configured to use network namespaces. (BZ#922459, BZ#928499, BZ#965608)

• The initialization script for the OpenStack Networking metadata service was

starting the service with arguments that did not include distribution specific
configuration file /usr/share/quantum/quantum-dist.conf. As a result the service
was previously being started with incorrect default configuration values set.
The initialization script has been updated and now starts the metadata service
with arguments that include the distribution specific configuration file.
(BZ#968965)

• Previously, the initialization scripts for the OpenStack networking server and

the DHCP agent were configured with the same priority. As a result the DHCP
agent would sometimes complete initialization and be running before the
networking server. This resulted in a non-functional DHCP setup as the DHCP
agent relies on the networking server already being operational when it is
started. To workaround this issue the initialization priority of the OpenStack
networking server has been raised to ensure that it is always started before the
DHCP agent. (BZ#970453)

• The rabbit_notifier configuration key was deprecated in the OpenStack

"Grizzly" release. This key was however still being set in the distribution
specific configuration files for OpenStack networking. This resulted in spurious
messages about the deprecated configuration key being printed to the log files
for the OpenStack networking services. The deprecated rabbit_notifier
configuration key has now been removed from the distribution specific
configuration files. (BZ#970511)

• Previously, the configuration files for the OpenStack networking service, L3

agent, DHCP agent, and networking plug-ins did not contain the correct value for
the firewall_driver configuration key. As a result common commands including
`nova list` would fail with an Internal Server Error (400). The configuration
files have been updated to ensure that the correct value is always set for the
firewall_driver configuration key. (BZ#970532)

All users of Red Hat OpenStack 3.0 (Grizzly) Preview are advised to install
these updated packages.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Documentation for both stable and preview releases of Red Hat OpenStack is
available at:

https://access.redhat.com/site/documentation/en-US/Red_Hat_OpenStack/

In particular it is highly recommended that all users read the Release Notes
document for the relevant Red Hat OpenStack release prior to installation.

Affected Products

• Red Hat OpenStack grizzly x86_64

Fixes

• BZ - 922459 - Traffic will not NAT when DHCP and L3 Agents are on the same host
• BZ - 928499 - quantum-l3-agent changes host's default route
• BZ - 968965 - quantum-metadata-agent is not run with the configuration file /usr/share/quantum/quantum-dist.conf
• BZ - 970453 - instance does not retrieve DHCP address because of initscript ordering
• BZ - 970511 - [quantum.openstack.common.notifier.rabbit_notifier] Deprecated: The rabbit_notifier is now deprecated. Please use rpc_notifier instead.
• BZ - 970532 - Nova list will fail because of missing security config in quantum plugin.ini

CVEs

(none)

References

• https://access.redhat.com/site/articles/11258
• https://access.redhat.com/site/documentation/en-US/Red_Hat_OpenStack/