RHBA-2015:0640 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.1.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

This update addresses the following issues:

• Previously, mariadb-galera would generate an SSL certificate with the

parameter CN set to "$(hostname) mariadb-galera cluster". Creating this
SSL certificate would fail if the hostname was long enough such that the
resulting string was greater than 64 characters.
With this update, the certificate is generated with only the hostname to
avoid using a CN value that is too long. (BZ#1179360)

• When an overcloud node boots up, it runs os-collect-config as a part of

registration. The os-collect-config script saves data from the Orchestration
(heat) metadata API locally and then calls os-refresh-config any time that
metadata has changed.
Subsequent calls to the registration script call subscription-manager again
and it returns a non-zero exit code. With the return of a non-zero exit
code, the script fails, the stack results in a timeout, and multiple
registrations can occur.
There is no current workaround. (BZ#1182642)

• This update introduces the rabbitmq-cluster resource agent for managing

clustered RabbitMQ instances with the Pacemaker cluster manager. (BZ#1185444)

• This enhancement includes a feature, virt-v2v, which allows users the

ability to convert images from a variety of hypervisors to run on OpenStack
cloud. (BZ#1186070)

• Red Hat Enterprise Linux 7.1 release included some changes to the library

resulting in MongoDB to crash when certain requests were received.
With this update, the Red Hat Enterprise Linux 7.1 release was rebuilt. As
a result, MongoDB now operates correctly. (BZ#1192049)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 6 runs on Red Hat Enterprise
Linux 7.1.

This update is available through 'yum update' on systems registered through
Red Hat Subscription manager. For more information about Red Hat
Subscription manager, refer to:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Red Hat Enterprise Linux OpenStack Platform 6 documentation is available
at:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform

The Release Notes include:

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 6,

including which channels need to be enabled and disabled.

Affected Products

• Red Hat OpenStack 6.0 x86_64

Fixes

• BZ - 1170350 - Rebase openstack-trove to 2014.2.2
• BZ - 1179360 - SSL cert creation fails if CN is more than 64 characters
• BZ - 1181677 - instack-install-undercloud gets blocked on restarting keystone service when selinux is enabled (virt env)
• BZ - 1181766 - instack-undercloud element for tuskar-ui-extras doesn't run collectstatic or compress
• BZ - 1182276 - Configure TCP keepalive setting to all nodes
• BZ - 1182642 - RHEL Registration Causes ORC Error
• BZ - 1182771 - tuskar-ui-extras 0.0.2-1 does not include the necessary plugin files for it to be enabled
• BZ - 1182965 - default setting for manage_etc_hosts in cloud.cfg overwrites hosts at reboot and tripleo should change that
• BZ - 1183083 - openstack dashboard STATIC_ROOT incorrectly set
• BZ - 1183091 - Flavor/role association is not displayed correctly in the node-box widget
• BZ - 1183099 - Satellite Registration Fails for Overcloud Nodes in Virt Environment
• BZ - 1183104 - Satellite Registration Fails (Unable to Find Katello-Agent Package)
• BZ - 1185444 - selinux policy updates required for rabbitmq pacemaker resource-agent
• BZ - 1185521 - ovs-vswitchd crash
• BZ - 1185632 - When navigating away from the deployment page, the user loses his work
• BZ - 1186070 - please add virt-v2v into OpenStack Platform
• BZ - 1186229 - Satellite 6 integration fixes
• BZ - 1187199 - mariadb-galera tests fail due to expired certificate
• BZ - 1192042 - instack-install-undercloud fails on 'tripleo load-image' with "Invalid OpenStack Identity credentials."
• BZ - 1192049 - MongoDB segfaults when receiving a CLI ceilometer command
• BZ - 1192575 - openstack-selinux: Staypuft deployment fails because puppet Could not start Service[glance-api] Over SELinux issue.
• BZ - 1193066 - AVC while using Keepalived on HA VRRP setup
• BZ - 1195215 - SELinux is preventing /usr/sbin/haproxy from getattr access on the filesystem /sys

CVEs

(none)

References

(none)