RHBA-2017:3098 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 11.0 (Ocata) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

This update addresses the following issues:

• The EC2 API was not fully operational. This was because EC2 API support depended on the Glance V1 API, but the Glance V1 API was no longer supported. This fix provides EC2 API support for newer versions of the Glance API.
• Previously, some cinder volume operations would fail when using the NFS backend. This was because cinder's NFS backend driver implements enhanced NAS security features that are enabled by default. These features require non-standard configuration changes in nova's libvirt, and without these changes, some cinder volume operations would fail.

This update introduces TripleO settings to control the NFS driver's NAS secure features, and disables the features by default. As a result, cinder volume operations no longer fail when using the NFS backend.

• Previously, upgrading a composable roles deployment running cinder-manage db sync would fail with duplicate columns in the cinder database. This was because cinder-manage db sync was run multiple times. With this update, the sync only runs only one controller. As a result, the cinder database schema successfully upgrades.
• The ceph-osd package is not required on OpenStack controller and compute nodes; it is only required on ceph storage nodes (including hyperconverged nodes running ceph OSD and compute services). This package is only available in a repository that requires a special entitlement. However, the ceph-osd package is part of the common overcloud image, and its presence creates an RPM dependency problem when it cannot be updated along with the rest of the ceph packages. As a result, yum updates would fail on nodes that do not have the ceph-osd entitlement, even though they do not require the ceph-osd package.

With this update, before performing yum update, the ceph-osd package is removed from overcloud nodes that do not require the package. As a result, yum updates succeed on nodes that do not require the ceph-osd package. Ceph storage and hyperconverged nodes that require the ceph-osd package will still require the necessary ceph OSD entitlement.

• iSCSI session parsing has bugs that affect the attach/detach mechanism, since they were only looking at tcp sessions. Previously, these bugs were not a problem, but with the refactoring of iSCSI connections on os-brick, we began relying more heavily on the iSCSI session parsing. As a result, it was not possible to attach volumes that use iSER protocol. This update includes iSER sessions when checking existing sessions, so attach and detach now work for iSER connections.
• Previously, the default value for the manila configuration variable "neutron_admin_auth_url" was set incorrectly in the template files used by the director. As a result, authorization requests would fail when manila called out to the neutron api, breaking some network setup operations. This update corrects the default setting for "neutron_admin_auth_url" in the director template files, so neutron callouts from manila succeed and network setup proceeds as intended.
• In the release version of OSP11, there was a bug that caused the generation of overcloud fencing configuration to occasionally fail. This update includes improvements to the generator so that overcloud fencing configuration generation is now reliable.
• This update includes a rebase to version 6.5.1, which adds the innodb_buffer_pool_size hiera parameter. This allows MariaDB's buffer pool setting to be tuned for both clustered and non-clustered overcloud MariaDB databases.

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 11 runs on Red Hat Enterprise Linux 7.4.

The Red Hat OpenStack Platform 11 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 11, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 11 x86_64

Fixes

• BZ - 1341170 - [OSP-director] nova ec2-api integration
• BZ - 1371911 - Cinder create volume from snapshot chmod permission error
• BZ - 1440700 - Unable to live migrate Nova instance with attached NFS backed Cinder volume
• BZ - 1441587 - ntp.conf is overwritten by os-apply-config
• BZ - 1450403 - Downstream only - Fix overcloud-resource-registry for rhos12 and rhos11 in THT
• BZ - 1479327 - OSP10 -> OSP11 upgrade: major upgrade composable step fails on composable roles deployment while running cinder-manage db sync
• BZ - 1483920 - Deployment of native fencing occasionally fails
• BZ - 1484431 - iSER multipath broken after iSCSI refactoring
• BZ - 1485030 - director generated invalid neutron_admin_auth_url in manila.conf.
• BZ - 1487582 - Incorrectly logging as error message on HBA channel search
• BZ - 1488243 - (OSP11 backport) Overcloud deployment doesn't set the hostname in /etc/host in the deployed nodes
• BZ - 1488538 - rebase puppet-tripleo ocata to 6.5.1
• BZ - 1488631 - (OSP11 backport) fail to use jump with tripleo::firewall::rule
• BZ - 1489490 - yum update failed on controller and compute nodes when ceph-osd repos is not enabled
• BZ - 1493286 - Rebase puppet-neutron to ca7b242
• BZ - 1493287 - Rebase puppet-nova to 005e5c8
• BZ - 1493731 - Rebase openstack-tripleo-common to 6a939cb
• BZ - 1493737 - Rebase openstack-tripleo-puppet-elements to 95348c9
• BZ - 1494250 - Rebase puppet-ironic to 64a3b77
• BZ - 1494269 - Rebase puppet-horizon to 155e416
• BZ - 1494271 - Rebase puppet-keystone to 6071885
• BZ - 1494274 - Rebase puppet-manila to c71ba0e
• BZ - 1494281 - Rebase puppet-tripleo to 0848990
• BZ - 1494716 - Rebase openstack-tripleo-heat-templates to 1897de9
• BZ - 1496193 - Rebase puppet-ceph to ebea4b7
• BZ - 1496551 - Rebase openstack-tripleo-heat-templates-compat to 5.3.0-5

CVEs

(none)

References

(none)