RHBA-2016:2052 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 8.0 (Liberty) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building a private
or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. This advisory includes packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

This update addresses the following issues:

• Database precommit errors are sometimes inevitable due to the nature of concurrency. Precommit may issue database transactions depending on the mechanism driver, for example, certain operations on subnets and routers may interact with many other resources in a single database transaction (for example, IP allocation, ports). In addition, background operations for mechanism drivers (for example, background sync, monitoring resources periodically, among others) may touch those database tables with other requests.

As a result of this behavior, transactions may sometimes fail during the precommit phase.
With this update, the transaction will retry on failure, resulting in the mitigation of precommit issues. (BZ#1377518)

• Prior to this update, the failure mode on OVS physical bridges was not set, defaulting to `standalone`. Consequently, when the ofctl_interface was set to `native` and the interface became unavailable (due to heavy load, OVS agent shutdown, network disruption), the flows on physical bridges may have been cleared, with the physical bridge traffic being disrupted.

With this update, the OVS physical bridge fail mode is set to `secure`. As a result, flows are retained on physical bridges. (BZ#1372370)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 8 runs on Red Hat Enterprise Linux 7.2.

The Red Hat OpenStack Platform 8 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 8, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/version-8/release-notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 8 x86_64

Fixes

• BZ - 1328506 - Vxlan tunnel to the controller is not created on a compute node after perform multiple vm autoevacuations
• BZ - 1372370 - Backport to liberty: Set secure fail mode for physical bridges
• BZ - 1376465 - Update python-networking-cisco spec to 2.1.1
• BZ - 1377518 - Allow retry on DB error for precommit

CVEs

(none)

References

(none)