RHBA-2016:0260 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for
RHEL 7.

Description

Red Hat Enterprise Linux OpenStack Platform provides the facilities for
building a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

This update addresses the following issue:

• Prior to this update, the fix for bug BZ#1215177 added the "garp_master_repeat 5" and "garp_master_refresh 10" options to Keepalived configuration. This resulted in two issues:

1. Keepalived never stopped broadcasting garps to the network.
2. Due to a Keepalived bug, instances lost their IPv6 default gateway.
Consequently, it was determined that the IPv6 router was not working correctly with VRRP.
This update resolves this issue by dropping the repeat and refresh Keepalived options. This fixes the IPv6 bug but re-introduces bug 1215177. To resolve this, use the delay option instead.
As a result of this update, Keepalived sends a GARP when it transitions to MASTER, and then
waits a number of seconds (determined by the delay option), and sends a GARP again. This uses an aggressive 'delay' setting to make sure that when the node boots, and the L3/L2 agents start, the L2 agent has enough time to wire the ports. (BZ#1300580)

Solution

Before applying this update, ensure all previously released errata relevant to your system have been applied.

Red Hat Enterprise Linux OpenStack Platform 7 runs on Red Hat Enterprise Linux 7.2.

The Red Hat Enterprise Linux OpenStack Platform 7 Release Notes contain the following:

• An explanation of the way in which the provided components interact to form a working cloud computing environment.
• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat Enterprise Linux OpenStack Platform 7, including which channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-enterprise-linux-openstack-platform/version-7/red-hat-enterprise-linux-openstack-platform-7-release-notes/release-notes

This update is available through 'yum update' on systems registered through Red Hat Subscription Manager. For more information about Red Hat Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 7 x86_64

Fixes

• BZ - 1285397 - Backport Neutron L3 performance fixes
• BZ - 1293339 - L3 agent fails to respawn keepalived process
• BZ - 1300580 - Backport: Tracker for IPV6 router is not working with VRRP

CVEs

(none)

References

• http://www.redhat.com/security/updates/classification/#normal