RHBA-2015:0785 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for
RHEL 7.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

This update addresses the following issues:

• Prior to this update, the 'NeutronScale OCF' agent wasn't unable to provide

specific clone status per host, due to a design flaw. Consequently, when
starting only one clone in a host of the cluster, a status request for a
different clone in the same host would also be positive; The startup status of
all clones became unreliable, as that is the mechanism Pacemaker uses to start
the clones.
This update addresses this issue by marking which specific clones are started in
a host, and only returning an 'OK' status for the clones that are actually
started.
As a result, all OpenStack Networking scale/neutron agent clones start reliably.
(BZ#1200630)

• Previously, when OpenStack Networking (neutron) attempted to concurrently

allocate a tunnel ID to new GRE or VXLAN networks, a flawed retry mechanism
meant that it would attempt to allocate the same tunnel ID repeatedly.
Consequently, attempts to create networks concurrently would fail.
This update resolves this issue by causing the retry mechanism to perform
retries with different tunnel IDs. As a result, concurrent network creations
with tunnel-based networks are expected to see higher success rates.
(BZ#1194432)

• Tenant networks can now be created that use the 'dnsmasq' process inside the

DHCP agent to serve additional configuration to IPv6 DHCP clients, including
addressing and support for IPv6 stateful subnets.
Note that the default gateway is still set by Router Advertisement messages sent
by the L3 agent. Important: This feature requires dnsmasq-2.66-13.el7_1 or
later. (BZ#1044271)

• Stateful DHCPv6 is currently nonfunctional in the Red Hat Enterprise Linux

OpenStack Platform 6 (Juno) GA as a result of upstream bug 1377843. Further
details are available at https://bugs.launchpad.net/neutron/+bug/1377843. (BZ#1174215)

• Previously, an incomplete backport operation skipped a function import

required by the Process Monitor exit handler. Consequently, an exception
appeared in the logs during exit if 'check_child_processes_action' was
configured as 'exit', and a monitored subprocess died.
With this update, the correct imports were added, and agents will exit cleanly
when the 'exit' action is configured and a monitored subprocess dies.
(BZ#1190775)

Solution

Before applying this update, ensure all previously released errata relevant to
your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 6 runs on Red Hat Enterprise Linux
7.1.

This update is available through 'yum update' on systems registered through Red
Hat Subscription Manager. For more information about Red Hat Subscription
Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Red Hat Enterprise Linux OpenStack Platform 6 documentation is available at:
https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform

The Release Notes include:

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 6,

including which channels need to be enabled and disabled.

Affected Products

• Red Hat OpenStack 6.0 x86_64

Fixes

• BZ - 1044271 - [RFE][neutron]: Support IPv6 DHCPv6 Stateful mode in dnsmasq
• BZ - 1174215 - IP addresses are not properly reported with IPv6 stateful subnets
• BZ - 1190775 - process monitor patches introduced bad exit handlers for dhcp and l3 agent
• BZ - 1194432 - Failure to allocate tunnel id when creating networks concurrently
• BZ - 1200630 - status action for NeutronScale agent is unreliable

CVEs

(none)

References

(none)