- Issued:
- 2017-09-28
- Updated:
- 2017-09-28
RHBA-2017:2825 - Bug Fix Advisory
Synopsis
Red Hat OpenStack Platform 10 director Bug Fix Advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:
Changes to the openstack-tripleo-heat-templates component:
- The ceph-osd package is only available in a repository that requires a special entitlement that is otherwise not required on OpenStack controller and compute nodes. However, the ceph-osd package is part of the common overcloud image, and its presence creates an RPM dependency problem when it cannot be updated along with the rest of the Ceph packages.
As such, yum updates fail on nodes that do not have the ceph-osd entitlement, even though they do not require the ceph-osd package.
Now, prior to performing the yum update, the ceph-osd package is removed from overcloud nodes that do not require the package. The ceph-osd package is only required on Ceph storage nodes (including hyperconverged nodes running Ceph OSD and Compute services). Yum updates succeed on nodes that do not require the ceph-osd package. Ceph storage and hyperconverged nodes that require the ceph-osd package will still require the necessary Ceph OSD entitlement. (BZ#1405881)
Changes to the python-os-brick component:
- Complete refactoring of the iSCSI connection mechanism for improved reliability.
For optimum results, use with openstack-cinder version 9.1.4-7 or higher and iscsi-initiator-utils version 6.2.0.874-2 or higher. (BZ#1441066 and BZ#1443178)
- When we refactored iSCSI connections on os-brick, we began relying more heavily on the iSCSI session parsing. This had some bugs that did not affect the attach/detach mechanism before the changes, but they do now, since they were only looking at tcp sessions. You cannot attach volumes that use iSER protocol.
We now include iSER sessions when checking existing sessions. The attach and detach now works for iSER connections. (BZ#1484496)
Changes to the python-tripleoclient component:
- The CLI would not block when stack update is performed. As such, a user could inadvertently think that the update was complete when it was not, and try again, not realizing that state of the stack was still in progress.
This fix will now block the CLI until the stack update is complete. (BZ#1397852)
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.4.
The Red Hat OpenStack Platform 10 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 10, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack 10 x86_64
Fixes
- BZ - 1397852 - python-tripleoclient should print the event list and not exit until the stack is in a COMPLETE or FAILED state
- BZ - 1405881 - yum update failed on controller and compute nodes when ceph-osd repos is not enabled
- BZ - 1443178 - EMC VNX driver fails to detach volume / delete volume [multipath]
- BZ - 1451682 - PciInvalidAlias Invalid PCI alias definition is not of type 'object'
- BZ - 1455498 - Tuskar is not deprecated post upgrade [osp-10]
- BZ - 1469460 - [cisco_ucsm] ucsm_host_list parameter is incorrect because code is not "composable role ready"
- BZ - 1477316 - os-net-config does not pick up an existing mapping file
- BZ - 1479548 - Rebase puppet-ceph to e72b6f3
- BZ - 1484496 - iSER multipath broken after iSCSI refactoring
- BZ - 1484533 - 51-hosts at scale fails to complete and does not report an error (need a backport to OSP10 overcloud image)
- BZ - 1487342 - Rebase puppet-heat to d6ce63e
- BZ - 1487371 - Rebase puppet-nova to 064799e
- BZ - 1487413 - Rebase puppet-neutron to 346206da
- BZ - 1487693 - Rebase openstack-tripleo-common to de872dd
- BZ - 1487709 - Rebase os-net-config to 60e3273
- BZ - 1487711 - Rebase openstack-tripleo-heat-templates to 711084b
- BZ - 1487724 - Rebase puppet-tripleo to 8a154df
- BZ - 1488492 - fail to use jump with tripleo::firewall::rule
- BZ - 1489128 - Rebase python-tripleoclient to 19cb0ff
CVEs
(none)
References
(none)
Red Hat OpenStack 10
SRPM | |
---|---|
openstack-tripleo-common-5.4.2-4.el7ost.src.rpm | SHA-256: e00728e3d562d17277ef848a18ac05a8330ef709260f1cb0b07ba41db4fa4847 |
openstack-tripleo-heat-templates-5.3.0-6.el7ost.src.rpm | SHA-256: 9586ef56840b8af4c011aa07da2930c688b1af0ed082bc07ec3516a613d6ef6c |
openstack-tripleo-image-elements-5.3.0-3.el7ost.src.rpm | SHA-256: 5c49089c7e5175675f6d40f4803b729e8c299f67361bc27e38cdcb73f35be057 |
os-net-config-5.2.0-4.el7ost.src.rpm | SHA-256: d7cc8bf0a8990a6e8227aff7989c2e1d9c4490d1873cab453b0a9730d2ea8b0a |
puppet-ceph-2.3.0-7.el7ost.src.rpm | SHA-256: f0921789b5e730db12909489c2bf5fb2432b4346a7cc05dd5a9565a327681bc5 |
puppet-heat-9.5.0-2.el7ost.src.rpm | SHA-256: 07aa03d920688a31443146e39c2f3a9771fbdaccf83f80ba791beed4599db65a |
puppet-neutron-9.5.0-4.el7ost.src.rpm | SHA-256: 5fbc4db255a02f6e543d45d8dc7fcd25346856eea6c5334142a667c3080248f9 |
puppet-nova-9.6.0-1.el7ost.src.rpm | SHA-256: d299abf76986d77a38acfa5d09a2dde1ed071f4b0a83ae41f2b7f2da0e532098 |
puppet-tripleo-5.6.1-4.el7ost.src.rpm | SHA-256: a7406e54a81dbcc7727c73704e4450fe1b6acdc2c6e32dff273a454a38a6962c |
python-os-brick-1.6.1-6.el7ost.src.rpm | SHA-256: 7902b424706c5cb2499aaf0e7e8b7b5a689b3445c24c974415bec264a9c6a7d6 |
python-tripleoclient-5.4.3-1.el7ost.src.rpm | SHA-256: 0db3eaf15e8d4713a919a91c0575de40d1d0355983ffdcdfbd497ade1290648e |
x86_64 | |
openstack-tripleo-common-5.4.2-4.el7ost.noarch.rpm | SHA-256: 46afe382e9bb5225065b981823140740b81452997ca5af28a5b33a431cfb7665 |
openstack-tripleo-heat-templates-5.3.0-6.el7ost.noarch.rpm | SHA-256: 858c9e2ba7a875eae956e739d2500fe66821cde4db56c78c317552d3cab13303 |
openstack-tripleo-image-elements-5.3.0-3.el7ost.noarch.rpm | SHA-256: b02cfec1a1af06f13044632792fae0a509d752d8957d6bb5d38a60ad974e91a1 |
os-net-config-5.2.0-4.el7ost.noarch.rpm | SHA-256: 018443ac09e8b5e76341eeaf2ef9f37fb8c6dbc0ca71b6ca1f4291c488dd3c62 |
puppet-ceph-2.3.0-7.el7ost.noarch.rpm | SHA-256: d96909733119f1b26d1313edf22d3b090f54baf21fbd984f72a891bcd9f796f9 |
puppet-heat-9.5.0-2.el7ost.noarch.rpm | SHA-256: 2f978bdb24776b264ee58c76319b040ac037f65a981ee387637861b990653454 |
puppet-neutron-9.5.0-4.el7ost.noarch.rpm | SHA-256: d6a8d0944627ff8f77c0be5dacc6cae462bd5da84007a3229f72ee28a73622e4 |
puppet-nova-9.6.0-1.el7ost.noarch.rpm | SHA-256: d97798021a8cf4b3c6db6c1a92f6b8a0545e631f9b9c2ff991b9fc2cc7c627d8 |
puppet-tripleo-5.6.1-4.el7ost.noarch.rpm | SHA-256: 7ec5e3ef7f1a6f0764a2d0832bce8cceb36c62f0f18aeed972e4206124854eb6 |
python-os-brick-1.6.1-6.el7ost.noarch.rpm | SHA-256: f5c4dc0b79785389308f95fefc8de6a124248457234121037d7dd40926990f15 |
python-tripleoclient-5.4.3-1.el7ost.noarch.rpm | SHA-256: e7c59ac322690d63fb517b9cf52ff3312d4d2edd556a08ca6401142c382202bb |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.