RHBA-2017:2654 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:

Changes to the openstack-tripleo-heat-templates component:

• Cause: TripleO does not support several parameters required by the Dell EMC SC cinder backend driver. The driver parameters are associated with the Dell EMC SC's "exclude_domain_ip" and "secondary DSM" features.

Consequence: The Dell EMC SC driver parameters are not configured by TripleO, and a post-deploy script is required to patch them into the cinder configuration.

Fix: TripleO Heat Template parameters have been defined for all the missing parameters, and the Puppet modules have been updated to set the parameters in the cinder driver configuration.

Result: TripleO supports setting the Dell EMC SC parameters associated with the cinder driver's "exclude_domain_ip" and "secondary DSM" features. (BZ#1440290)

• Cause: The NFS backend driver for Cinder implements enhanced NAS security features that default to being enabled. However, the features require non-standard configuration changes in Nova's libvirt, and without those changes some cinder volume operations fail.

Consequence: Some cinder volume operations fail when using the NFS backend.

Fix: Add TripleO settings to control the NFS driver's NAS secure features, and disable the features by default.

Result: Cinder volume operations no longer fail when using the NFS backend. (BZ#1433404)

Changes to the puppet-horizon component:

• Cause: Some binary python modules used by Horizon were compiled with a flag that makes them use the simplified GIL state API.

Consequence: Since mod_wsgi uses sub-interpreters, and the simplified GIL state API is not re-entrant, this results in the mod_wsgi locking up and hanging, making the dashboard unavailable.

Fix: Added "WSGIApplicationGroup %{GLOBAL}" to mod_wsgi configuration, which forces it to always use the main interpreter instead of sub-interpreters.

Result: With that option, mod_wsgi works correctly no matter what options were used to compile the binary python modules. The slight performance penalty is not noticeable. (BZ#1479732)

Changes to the puppet-tripleo component:

• Workaround: Before you upgrade or update OpenStack, delete the guest that attached to the PF. Then you can proceed to update or upgrade and it will pass. (BZ#1454624)

Changes to the python-tripleoclient component:

• Cause: The "openstack overcloud deploy" command did not raise exceptions when encountering errors.

Consequence: The command failed but still returned an error code of 0, making it difficult for scripts to pick up on the failures.

Fix: Raise the exception for stack failures and pre-deployment verification failures.

Result: The "openstack overcloud deploy" command fails with an error code of 1, as expected. (BZ#1370527)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.3.

The Red Hat OpenStack Platform 10 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 10, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 10 x86_64

Fixes

• BZ - 1370527 - Overcloud create fails but "openstack deploy overcloud" returns 0
• BZ - 1404902 - openstack baremetal introspection bulk status gives error when some nodes are maintenance true
• BZ - 1411084 - deploy 3rd party artifacts are broken
• BZ - 1433404 - Creating a Cinder Volume using NFS Backend fails
• BZ - 1437320 - os-net-config mapping.yaml will only map active interfaces, but no-carrier interfaces need to be mapped as well
• BZ - 1440290 - RFE: cinder-dellsc.yaml missing several values
• BZ - 1441744 - Add support for ethtool_opts option
• BZ - 1444643 - OSP9 -> OSP10 -> OSP11 upgrade: cinder api returns ERROR: Internal Server Error (HTTP 500) after upgrade
• BZ - 1445030 - RH OSP10: With Cisco ML2 plugin for ucsm, Overcloud install failing due to config not being generated in time.
• BZ - 1454624 - SRIOV Minor update OSP10 to OSP10z3 failed when PF assign to instance
• BZ - 1455203 - libvirt/hw_machine_type config option should be exposed
• BZ - 1456717 - Duplicate subscription line in init environment file.
• BZ - 1459919 - Swift rebalance might fail when adding/replacing disks or rebalance is not optimal
• BZ - 1465644 - Can't login to the UI with SSL when using Firefox
• BZ - 1467377 - [BACKPORT] introspection and boot initramfs images don't include iscsi drivers
• BZ - 1467704 - rhosp-director: overcloud upgrade OSP9->OSP10 fails during major-upgrade-pacemaker phase. Stdout has the following:"WARNING: Waiting for Ceph cluster status to go HEALTH_OK"
• BZ - 1469457 - Token flush does not complete when expired tokens becomes large enough
• BZ - 1471720 - 'openstack overcloud update ...' fails when yum is locked on an overcloud node
• BZ - 1472343 - Update may fail with error: /lib64/libnsssysinit.so: undefined symbol: PR_GetEnvSecure during yum upgrade.
• BZ - 1472887 - Horizon overcloud deploy with external load balancer missing 'HTTP_X_FORWARDED_PROTO' configuration.
• BZ - 1476711 - OSP9 -> OSP10 upgrade: major-upgrade-pacemaker.yaml fails with Error: Unable to find constraint - 'INFINITY'
• BZ - 1478005 - Rebase python-tripleoclient to a93e6d1
• BZ - 1478494 - Rebase puppet-tempest to 9bcf09c
• BZ - 1478496 - Rebase puppet-swift to 9.6.0
• BZ - 1478502 - Rebase puppet-tripleo to f8e1409
• BZ - 1478534 - Rebase puppet-nova to 6266ecf
• BZ - 1478541 - Rebase puppet-neutron to d6f989c
• BZ - 1478545 - Rebase puppet-keystone to c1bda5f
• BZ - 1478577 - Rebase openstack-tripleo-common to 2958ad
• BZ - 1478588 - Rebase puppet-glance to 9.6.0
• BZ - 1478951 - Rebase openstack-tripleo-image-elements to 7bc364
• BZ - 1478961 - Rebase os-net-config to de449c
• BZ - 1479566 - Rebase puppet-ceilometer to bff42b5
• BZ - 1479732 - Horizon won't load with OSP11 - Script timed out before returning headers: django.wsgi
• BZ - 1479846 - Rebase openstack-tripleo-heat-templates to 058b855
• BZ - 1481265 - Horizon Dashboard gives Error 500 after initial install on 7.4
• BZ - 1482390 - SR-IOV VF count is not set immediately on deployment
• BZ - 1483149 - Deploying Horizon in OSP-10z4 Leads to an Inaccessible Horizon

CVEs

(none)

References

(none)