RHBA-2014:1350 - Bug Fix Advisory

Topic

A update for the RHEL-OSP wizard-based installer for Red Hat Enterprise Linux
OpenStack Platform 5.0 (Icehouse) is now available.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for building
a private or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. Services provided by these packages include:

• OpenStack Block Storage service ("cinder").
• OpenStack Compute service ("nova").
• OpenStack Dashboard ("horizon").
• OpenStack Image service ("glance").
• OpenStack Identity ("keystone").
• OpenStack Networking service ("neutron").
• OpenStack Object Storage service ("swift").
• OpenStack Orchestration service ("heat").
• OpenStack Telemetry service ("ceilometer").

Red Hat Enterprise Linux OpenStack Platform also includes these supporting
technologies:

• RHEL-OSP Installer, a utility for deploying enterprise-level OpenStack clouds.
• PackStack, a utility for rapidly deploying proof of concept OpenStack clouds.
• Open vSwitch, an implementation of the OpenFlow protocol for remote per-flow

control of network traffic.

This advisory fixes Red Hat Enterprise Linux OpenStack Platform Installer bugs,
along with several bugs for other components. These fixes are documented in the
following Technical Notes document:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Technical_Notes/index.html

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 5 runs on the latest available
version of Red Hat Enterprise Linux 7.

The Red Hat Enterprise Linux OpenStack Platform 5 Release Notes contain the
following:

• Operating System requirements.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 5,

including which channels need to be enabled and disabled.

• Enhancements, Technology Previews, Recommended Practices, Known Issues and

Deprecated Functionality.

The Release Notes are available at:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Release_Notes/index.html

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/site/articles/11258

Affected Products

• Red Hat OpenStack foreman x86_64

Fixes

• BZ - 1064327 - [RFE] foreman should support the configuration on NICs, and VLAN and the combinations
• BZ - 1098244 - [Rubygem-Staypuft]: SELinux avc: denied when running staypuft-installer - comm="ruby" path="/sbin/iptables-multi-1.4.7.
• BZ - 1100377 - Error about iptables start appears each time running puppet agent with HA host group.
• BZ - 1102100 - Mysql service doesn't survive 'reboot' fail over.
• BZ - 1105594 - Wrong vmlinuz/initrd files downloaded by Foreman
• BZ - 1106432 - Puppet is modifying httpd.conf on each run
• BZ - 1110310 - foreman should use tenant_network_type on controller only and without ML2
• BZ - 1111642 - Foreman should open IPTABLE for GRE
• BZ - 1111646 - Foreman default config is NOT ML2
• BZ - 1114711 - Rubygem-Staypuft: rhel-osp-installer throws a warning related to puppet.conf.
• BZ - 1116964 - Rubygem-Staypuft: no verification for password being set for root.
• BZ - 1118078 - Deployment UI does not explain errors behind "unassigned host" message.
• BZ - 1122553 - [RFE] Need an ability to specify vLAN (tagged) on top of individual NICs per network per node type
• BZ - 1122663 - [RFE] Staypuft should be able to setup node(s) as required for Ceph cluster (OSD only)
• BZ - 1122671 - typo in flash message when you unlock running task
• BZ - 1122742 - [RFE] OSP deployer needs an ability to automatically extract keyring file from Ceph cluster (node) and populate controller and compute nodes
• BZ - 1123157 - [RFE] Need OSP installer to be able to support adding compute nodes
• BZ - 1123296 - Rubygem-staypuft: HA: rabbitmq haproxy config should set its timeout must be a lot higher.
• BZ - 1123303 - Rubygem-staypuft: HA: Systemd unit MUST be disabled! (all of them, including extra services like mariadb)
• BZ - 1124041 - RFE: need to rebase discovery image on el7
• BZ - 1125765 - Nothing happens when "install to hard drive" is run.
• BZ - 1126332 - Unable to connect to instances via VNC, because compute nodes are using the wrong network
• BZ - 1126447 - [RFE][nova] Optionally allow nova-scheduler to be deployed as Active/Active or Active/Passive
• BZ - 1127196 - RHEL OSP Installer: Password change not verified
• BZ - 1127202 - RHEL OSP Installer: Password shown in separate line
• BZ - 1127288 - Provisioning RHEL OSP5 on RHEL 7 with rhel-osp-installer in non-HA failed when provisioning the neutron network controller
• BZ - 1127806 - apply ntp-server from the installer to the configuration
• BZ - 1127862 - [RFE] Need to make sure that Controller and Compute Nodes deploy with Ceph Client libraries and packages
• BZ - 1127863 - [RFE] Need to make sure that during deployment, RHEL OSP Installer pushes out ceph.conf and keyring to Ceph Storage Cluster Nodes, Controller Nodes and Compute Nodes
• BZ - 1128170 - Cinder puppet manifest needs support for rabbit_use_ssl flag
• BZ - 1128769 - rhel-osp hosts memory display is wrong
• BZ - 1129181 - HA: The horizon is available on the private network (instead of on public). Horizon needs to be exposed to public network.
• BZ - 1130192 - HA: After deploying HA and Neutron VXLAN both VXLAN and GRE tunnels are configured on the controller/networker nodes.
• BZ - 1130219 - Foreman should not generate epel.repo file as part of foreman_installer.sh
• BZ - 1130332 - Running liveinst in attempt to save the liveCD to disk didn't work, nor did the "install" option from the grub menu.
• BZ - 1130574 - Password for horizon in the "Deployed" screen is shown wrong
• BZ - 1132155 - Rubygem-Staypuft: HA-nova deployment fails - puppet run completed with errors: Could not prefetch keystone_endpoint provider 'keystone': Execution of '/usr/bin/keystone --os-endpoint http://192.168.0.9:35357/v2.0/ endpoint-list' returned 1: Unable to e
• BZ - 1132544 - Quickstack nova compute manifest not setting qpid config
• BZ - 1132550 - Multi-Backend Cinder Support
• BZ - 1132587 - After Staypuft installer the external network with VLAN tag doesn't work.
• BZ - 1132591 - [Test] Multi-instance( on Multi-Backend) Dell EqualLogic Cinder Support
• BZ - 1132631 - Use public addresses for the public endpoints when the controller(s) provide(s) a public interface
• BZ - 1132647 - [RFE] Puppet should generate client keyring for the Controller and Compute nodes
• BZ - 1132648 - [RFE] Puppet should generate ceph.conf for Controller and Compute nodes
• BZ - 1132650 - [RFE] Puppet should generate ceph.conf for Controller and Compute nodes
• BZ - 1132722 - Cinder Volume HA, active/active should be avoided
• BZ - 1133074 - Rebase on latest Satellite 6 packages
• BZ - 1133579 - rhel-osp-installer: foreman-discovery-image-7.0 dhclient crashes after some time (ISO)
• BZ - 1134220 - rhel-osp failed to install netwoker because of interface down - br-ex
• BZ - 1134587 - Rubygem-Staypuft: After running liveinst (LiveCD) and booting from the HardDrive - running "rhel-osp-installer" results in error: "Something went wrong! Check the log for ERROR-level output"
• BZ - 1134610 - unable to add multiple repos to subscription_manager_repos in rhel-osp-installer
• BZ - 1134837 - deployment#show: list of NICs html escaped
• BZ - 1134850 - Newly discovered hosts are missing from the hosts tab on deployments#show
• BZ - 1138849 - Rubygem-Staypuft: The RHEL7 discovery images named foreman-discovery-image-latest.el6.iso and not foreman-discovery-image-latest.el7.iso under /var/lib/tftpboot/boot/
• BZ - 1138852 - Rubygem-Staypuft: The RHEL7 discovery images named foreman-discovery-image-latest.el6.iso and not foreman-discovery-image-latest.el7.iso under /var/lib/tftpboot/boot/
• BZ - 1139792 - Rubygem-Staypuft: Cinder service configuration in a deployment - allows to proceed with no backend driver selected.
• BZ - 1140334 - Rubygem-Staypuft: Error in the discovery image: "Validation failed: IP address Can't use the same value as the primary interface."
• BZ - 1141522 - Rubygem-Staypuft: "Error unknown attribute: fencing" - When attempting to edit Hosts Networks .
• BZ - 1141730 - mkdir: cannot create directory `/var/lib/rpm-state/foreman-proxy': No such file or directory while upgrading to foreman-proxy-1.6.0.8-1.el6sat.noarch
• BZ - 1141936 - Rubygem-Staypuft: LiveCD on bare metal, Running from the HD (after successfully running liveinst): no boot images under /var/lib/tftpboot/boot.
• BZ - 1141955 - HA: Unable to deploy HA. Getting deployment error relating to fencing params.
• BZ - 1142182 - Provision hosts will not have the correct time because of wrong time zone.
• BZ - 1142211 - Staypuft: hosts will not install openstack and will be wrong registered
• BZ - 1142295 - Rubygem-Staypuft: The default gateway resides on the wrong NIC. Should be on the external NIC where it exists otherwise on Provisioning/PXE.
• BZ - 1142395 - puppet dep cycle error with rbd glance backend
• BZ - 1143047 - Rubygem-Staypuft: HA deployment: during puppet run , get "Alert: Unexpected value for parameter fencing_type"
• BZ - 1143311 - ceph on compute node: failure to set virsh secret key
• BZ - 1144649 - Fencing UI on host edit form has some bugs
• BZ - 1145301 - Rubygem-Staypuft: LiveCD on bare metal, hosts booted with the discovery image don't get registered.
• BZ - 1145761 - Rubygem-Staypuft: can't create a new deployment in UI.

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#none