RHBA-2017:3230 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 10.0 (Newton) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the openstack-gnocchi component:

• Normally, during the Gnocchi storage back-end (Swift or Ceph) downtime, Gnocchi would keep trying to connect back to this back-end. Originally, there was no delay between attempts to re-establish the connection, which saturated the connection pool to Ceph or Swift. The problem has been fixed. As a result, Gnocchi now uses a back-off delay mechanism and reconnects flawlessly to its storage back-end in case of failure. (BZ#1491448)

Changes to the python-os-vif component:

• Originally, if an instance was migrated to a new location, the connection to the instance was broken, although the instance was successfully spawned in the new location. The connection was recreated after the original connection timed out. To workaround this issue, the linux bridge installed for the particular VIF type `ovs-hybrid` should be configured to persistently retain the MAC address learned from the RARP packets that are sent by QEMU (after starting on the destination node). This will avoid any disruption of the data-path during a live migration, since at some point during the process the live migration source and destination can be on the same L2 network, and could have the destination bridge learning from the source.

Changes to the python-oslo-log component:

• Originally, a bug in the oslo.log JSON formatter prevented the formatter to properly encode some object types into JSON. Consequently, a new volume in Cinder could not be created. The problem has been fixed. As a result, the JSON formatter never fails on encoding an object to JSON. If JSON cannot be created, the object gets converted to a string instead.

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.4.

The Red Hat OpenStack Platform 10 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 10, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat OpenStack 10 x86_64

Fixes

• BZ - 1397099 - Upgrade python-requests to 2.11.1 for Newton
• BZ - 1447422 - OSP 10 -> 11 upgrade failing when keystone is running in a separate node
• BZ - 1494031 - Connectivity issues after migrating an instance
• BZ - 1495255 - Validate NFS with file driver for gnocchi backend
• BZ - 1497778 - rhos-10 version of pyOpenSSL is partially broken (from OpenSSL import rand, crypto, SSL fails)
• BZ - 1498252 - Director install generates a self-signed certificate that has an illegal x.509 subjectAltName
• BZ - 1500495 - Rebase python-urllib3 to 1.16-1
• BZ - 1504205 - Rebase openstack-manila to 30273621
• BZ - 1505505 - Rebase openstack-aodh to efa09fa
• BZ - 1505509 - Rebase python-tooz to 1.43.2
• BZ - 1505541 - Rebase python-oslo-serialization to 2.13.2
• BZ - 1505565 - Rebase openstack-tripleo-ui to 1.2.1
• BZ - 1506010 - Rebase python-dracclient to 5e9b27ee
• BZ - 1506027 - Rebase puppet-rabbitmq to 12aa7ccc
• BZ - 1506400 - Rebase puppet-contrail to 7b99d1ce
• BZ - 1506409 - Rebase python-horizon-tests-tempest to 86ac4f82

CVEs

(none)

References

(none)