RHBA-2017:1540 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 8.0 (Liberty) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building a private
or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. This advisory includes packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

This update addresses the following issues:

• Previously, python-neutron did not convert some errors into expected exception types. As a result, it was possible for users to get unexpected exceptions based on those errors. With this update, all errors are now captured, even if the server side does not return a correct exception message. This helps ensure consistent behaviour from the library in case of errors. (BZ#1385084)
• Previously, the default L3 HA implementation (keepalived) sometimes flipped the master router instance to `backup` if it received multiple SIGHUP signals in quick succession. Consequently, L3 connectivity was disrupted until the previous backup keepalived instance took over.

With this update, to work around this keepalived behavior, the neutron L3 agent now throttles SIGHUP signals sent to keepalived to make sure keepalived has enough time to reload configuration without being disrupted by failovers.
As a result, L3 connectivity implemented using HA routers is not disrupted after router updates arriving in quick succession (for example, with floating IP updates). (BZ#1371948)

• With this enhancement, L3 HA failover is not dependent on neutron components. This update also reduces HA failover time, as there is no dependency on neutron to create any OVS flows during failover. (BZ#1395532)
• There is a known issue when both `l2pop` and `arp_responder` are enabled for the linuxbridge agent: the instance will fail to communicate with the router. The temporary workaround is to set `arp_responder=false`. This issue only occurs with the linuxbridge agent; the OVS agent is not affected. (BZ#1395532)
• Previously, because of the way the initial sync was done after starting the DHCP agent, periodic reports were not sent until the sync completed. In large environments this can be a lengthy process, and the lack of status reports during this process caused the agent to be marked as DOWN. This fix allows periodic reports to be sent during the DHCP agent initial sync, so it won't be marked as DOWN. It also addresses a bug which caused the initial sync to be performed twice, so the setup time has been halved. (BZ#1433256)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 8 runs on Red Hat Enterprise Linux 7.3.

The Red Hat OpenStack Platform 8 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 8, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/version-8/release-notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat OpenStack 8 x86_64

Fixes

• BZ - 1339260 - misleading error if "haproxy" package is missing on lbaas node
• BZ - 1371948 - Deleting virtual machines with floating IPs causes qrouter interfaces to be deleted and recreated
• BZ - 1385084 - 404 in nova-api Unexpected exception in API method
• BZ - 1395532 - l2pop fdb flows for HA router ports
• BZ - 1431026 - subnet-delete fails when more than one dhcp ports are available
• BZ - 1433256 - Restarting dhcp-agent in large environment causes the agent to report down for extended time while namespaces are being re-manageed
• BZ - 1440908 - Frequent failure at Subnet deletion with 3 controller
• BZ - 1450675 - TCP RST sent during neutron_lbaas.tests.tempest.v2.scenario.test_listener_basic.TestListenerBasic.test_listener_basic test fails when it should pass

CVEs

(none)

References

(none)