RHBA-2014:1800 - Bug Fix Advisory

Topic

An updated version of the Red Hat Enterprise Linux OpenStack Platform 5.0 wizard-based installer is now available.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. Services provided by
these packages include:

• OpenStack Block Storage service ("cinder").
• OpenStack Compute service ("nova").
• OpenStack Dashboard ("horizon").
• OpenStack Image service ("glance").
• OpenStack Identity ("keystone").
• OpenStack Networking service ("neutron").
• OpenStack Object Storage service ("swift").
• OpenStack Orchestration service ("heat").
• OpenStack Telemetry service ("ceilometer").

RHEL OpenStack Platform also includes these supporting technologies:

• RHEL OpenStack Platform Installer, a utility for deploying

enterprise-level OpenStack clouds.

• PackStack, a utility for rapidly deploying proof of concept OpenStack

clouds.

• Open vSwitch, an implementation of the OpenFlow protocol for remote

per-flow control of network traffic.

This advisory fixes Red Hat Enterprise Linux OpenStack Platform Installer
bugs, along with several bugs for other components. These fixes are
documented in the following Technical Notes document:
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Technical_Notes/index.html

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 5 runs on the latest available version of Red Hat Enterprise Linux 7.

The Red Hat Enterprise Linux OpenStack Platform 5 Release Notes contain the
following:

• Operating System requirements.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 5, including which channels need to be enabled and disabled.
• Enhancements, Technology Previews, Recommended Practices, Known Issues and Deprecated Functionality.

The Release Notes are available at:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/5/html/Release_Notes/index.html

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat OpenStack foreman x86_64

Fixes

• BZ - RHBA-2014:1800 - [RFE] - Need ability to configure nexus mechanism driver
• BZ - RHBA-2014:1800 - staypuft should setup by default all HA recommended networks
• BZ - RHBA-2014:1800 - Integrating n1kv installation with RHEL-OSP installer
• BZ - RHBA-2014:1800 - Integrating n1kv VSM puppet deployment with foreman installer
• BZ - RHBA-2014:1800 - [RFE] Need ability to specify NIC bonding for node network setup
• BZ - RHBA-2014:1800 - [RFE] Need an ability to specify per infrastructure network if Foreman/Staypuft admin node should provide ip address management
• BZ - RHBA-2014:1800 - Rubygem-Staypuft: Need to enforce usage of a different interface than the interface used for pxe/provisioning the node for Nova deployment with vlan tenant network type and no single nic to be allowed.
• BZ - RHBA-2014:1800 - Puppet fails on networker after br-ex is configured
• BZ - RHBA-2014:1800 - Neutron cli fails to authenticate
• BZ - RHBA-2014:1800 - Staypuft does not create the cron job to flush the keystone tokens
• BZ - RHBA-2014:1800 - [RFE] Need an ability to specify vLAN (tagged) on top of bonded NICs per network per node type
• BZ - RHBA-2014:1800 - staypuft neutron network failed with "no implicit conversion of nil to string"
• BZ - RHBA-2014:1800 - RFE: Staypuft should prevent users adding hosts through foreman UI
• BZ - RHBA-2014:1800 - Not used NICs should be detected and should not be set to BOOTPROTO=dhcp and ONBOOT=yes
• BZ - RHBA-2014:1800 - Rubygem-Staypuft: Using different HW in the same deployment will fail the deployment because the NICs are named differently.
• BZ - RHBA-2014:1800 - RFE: rhel-osp-installer should install the rhos sos plugins on all nodes
• BZ - RHBA-2014:1800 - rubygem-staypuft: When choosing deployment with QPID - Rabbit is being installed on the controller, with bad configuration that cause deployment to fail.
• BZ - RHBA-2014:1800 - [RFE] Ceph RBD backend configuration for Cinder and Glance in OSP
• BZ - RHBA-2014:1800 - [RFE] Puppet should generate client keyring for the Controller and Compute nodes
• BZ - RHBA-2014:1800 - Rubygem-Staypuft: in UI after clicking on the "Done" button in "Configure Networks" the host(s) should discontinue be selected.
• BZ - RHBA-2014:1800 - Rubygem-Staypuft: in UI under the "Network Configuration" page: the roles that don't need to be under the default network, should appear under "Available Network Traffic Types".
• BZ - RHBA-2014:1800 - staypuft needs to create ceph.conf on ceph storage/installer node
• BZ - RHBA-2014:1800 - ability to set osd pool default size in ceph.conf
• BZ - RHBA-2014:1800 - ability to set osd pool default size in ceph.conf
• BZ - RHBA-2014:1800 - Rubygem-Staypuft: HA Neutron+GRE deployment - puppet agent exits with error on controllers: Error 400 on SERVER: Local ip for ovs agent must be set when tunneling is enabled at /etc/puppet/environments/production/modules/neutron/manifests/agents/ovs.pp:32
• BZ - RHBA-2014:1800 - open ceph ports on HA controller
• BZ - RHBA-2014:1800 - Staypuft doesn't create & set a type for each Cinder back end when configuring multiple back ends
• BZ - RHBA-2014:1800 - rubygem-staypuft: Selecting hosts with different interfaces in the "Configure Networks" prompts "<hostname> does not have interfaces with same names", Exiting from that error messes up the UI.
• BZ - RHBA-2014:1800 - Staypuft related JS modification doesn't load on hosts#edit
• BZ - RHBA-2014:1800 - Rubygem-Staypuft: Nova+vlan deployment: The number of vlan range against "Fixed IP range for tenant networks" isn't validated although may fail a deployment.
• BZ - RHBA-2014:1800 - rubygem-staypuft: HANeutron deployment with "Tenant Network Type" set to "VLAN Segmentation" fails installing the controllers. Puppet error: /usr/sbin/rabbitmqctl set_policy HA '^(?!amq\.).*' '{"ha-mode": "all"}' returned 2 instead of one of [0].
• BZ - RHBA-2014:1800 - installing osp5 rhel7 hosts fails automatically if boot disk is > 2TB
• BZ - RHBA-2014:1800 - rubygem-staypuft: "service network restart" line in the %post section of the kickstart prevents subsequent packages installation/update on some setups.
• BZ - RHBA-2014:1800 - Automated subscription-manager registration fails with special characters in password
• BZ - RHBA-2014:1800 - Rubygem-Staypuft: The default gateway resides on the wrong NIC. Should be on the public apil NIC where it exists otherwise on Provisioning/PXE. (VLAN)
• BZ - RHBA-2014:1800 - host=<ID> is not set in neutron-HA mode, thus network-node failovers will not work
• BZ - RHBA-2014:1800 - Galera+puppet stability improvements
• BZ - RHBA-2014:1800 - Integrating n1kv installation with OS-HA in RHEL-OSP installer
• BZ - RHBA-2014:1800 - rubygem-staypuft: Clicking on "Configure Networks" doesn't open the "Configure Networks" page - gets stuck.
• BZ - RHBA-2014:1800 - Registration of non-provisioned hosts to the installer
• BZ - RHBA-2014:1800 - rubygem-staypuft: Clicking on 'Access all details' button after a successful deployment - get the following in Controllers IPs secton: "192.168.0.6 what subnet type here?"
• BZ - RHBA-2014:1800 - fence_xvm in HA controller: expose port param, add firewall rule
• BZ - RHBA-2014:1800 - subnet occasionally not appearing in nic assignment screen - HA deployment
• BZ - RHBA-2014:1800 - public vips not populated (blocker)
• BZ - RHBA-2014:1800 - vip mac address conflicts when more than 1 HA deployment
• BZ - RHBA-2014:1800 - Staypuft Network Configuration: Operation FAILED: uninitialized constant Net::Validations::MASK_REGEXP
• BZ - RHBA-2014:1800 - rubygem-staypuft: Clicking on 'Access all details' button after a successful deployment - the identation is bad. The image is attached.
• BZ - RHBA-2014:1800 - rubygem-staypuft: Creating a new subnet from within the deployment enforces specifying gateway for networks with no DHCP server.
• BZ - RHBA-2014:1800 - Hosts get disassociated from deployment after editing
• BZ - RHBA-2014:1800 - rubygem-staypuft: Editing a host: no network traffic type is specified in the networks' help text in the tab network.
• BZ - RHBA-2014:1800 - rubygem-staypuft: Public_api role assignment to network - need to add validation that the network has a gateway configured.
• BZ - RHBA-2014:1800 - Validation failure while editing host in production only environment
• BZ - RHBA-2014:1800 - rubygem-staypuft: Hosts don't get registered in staypuft and don't appear in the "discovered hosts" list.
• BZ - RHBA-2014:1800 - rubygem-staypuft: Selecting more than one Cinder driver backend doesn't set the "Multiple Backend" value to true.
• BZ - RHBA-2014:1800 - unable to deploy fencing in ha-neutron
• BZ - RHBA-2014:1800 - Unable to Add host
• BZ - RHBA-2014:1800 - open ceph ports on ceph storage node
• BZ - RHBA-2014:1800 - open ceph ports on ceph storage node
• BZ - RHBA-2014:1800 - memcached port 11211 is not opened by default on controllers in HA environments.
• BZ - RHBA-2014:1800 - rubygem-staypuft: The default gateway isn't set on the right interface when among other NICs vlan tagged NIC is used.
• BZ - RHBA-2014:1800 - allow installs with tenant and provisioning on the same subnet
• BZ - RHBA-2014:1800 - bonded interfaces are incorrectly configured with missing bond name

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal