- Issued:
- 2017-11-15
- Updated:
- 2017-11-15
RHBA-2017:3232 - Bug Fix Advisory
Synopsis
openstack-heat bug fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Orchestration packages that resolve various issues are
now available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:
- OpenStack Orchestration service
OpenStack Orchestration (heat) is a template-driven engine used to specify
and deploy configurations for Compute, Storage, and OpenStack Networking.
It can also be used to automate post-deployment actions, which in turn
allows automated provisioning of infrastructure, services, and
applications. Orchestration can also be integrated with Telemetry alarms to
implement auto-scaling for certain infrastructure resources.
Changes to the openstack-heat component:
- This update enables heat to resync the state of resources from nova and neutron when the heat resources are in `FAILED` state but the back-end resources are fine. This allows recovering from upgrade failures without replacing the resources.
- Originally, it was not possible to update any resource (still existing in the template used for update) that was in `DELETE_COMPLETE`state. The problem has been fixed. As a result, all `DELETE_COMPLETE` resources are now replaced when the stack is updated.
- This update introduces a new resource, `OS::Neutron::Trunk`, that adds support of neutron trunks in heat templates.
- With this update, the OS::Nova::ServerGroup resource now allows the 'soft-affinity' and 'soft-anti-affinity' policies to be used in addition to the 'affinity' and 'anti-affinity' policies.
- With this update, the `OS::Neutron::RBACPolicy` resource supports managing QoS policies and networks, which allows to share the Neutron QoS policy to subsets of tenants.
- With this update, the `OS::Neutron::Port` resource now supports the 'baremetal' and 'direct-physical' (passthrough) vnic_type.
- Originally, resources in the `CHECK_COMPLETE` state could not be looked up by their reference ID. Consequently, autoscaling was no longer possible after completing the stack-check operation on a stack containing an autoscaling group. The problem has been fixed. As a result, the resources in the `CHECK_COMPLETE` state can now be looked up by their reference ID and autoscaling continues to work after a stack-check.
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.4.
The Red Hat OpenStack Platform 10 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 10, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack 10 x86_64
Fixes
- BZ - 1477109 - [Backport] Add TrunkPort support for heat templates
- BZ - 1480338 - [RFE] Add soft policy for nova server group
- BZ - 1488211 - Backport request: Do not replace failed server always
- BZ - 1492034 - Compute Node Scale out failing because of a NODE Stuck in Delete COMPLETE State
- BZ - 1498513 - OSP 10 Heat Engine does not support vnic_type "direct-physical"
- BZ - 1500599 - Cannot autoscale when group is in CHECK_COMPLETE
- BZ - 1506288 - Rebase openstack-heat to 3b32b44d
- BZ - 1506789 - Rebase openstack-heat-templates to 1d2d3cb7
CVEs
(none)
References
(none)
Red Hat OpenStack 10
SRPM | |
---|---|
openstack-heat-7.0.6-1.el7ost.src.rpm | SHA-256: df00b798df992ebb26757bd5834932c83d68ea21a49743f3f7f9ff8ae697c7b5 |
openstack-heat-templates-0-0.14.1e6015dgit.el7ost.src.rpm | SHA-256: 44d50233a785e838fff86200781dc4b83dfa801d94ded483a4fce92cb65f1b6a |
x86_64 | |
openstack-heat-api-7.0.6-1.el7ost.noarch.rpm | SHA-256: a7b87c92c5aa5de2da73a575a5e4534817a736d77b31dc5e66b0e2bc9b45bbf5 |
openstack-heat-api-cfn-7.0.6-1.el7ost.noarch.rpm | SHA-256: 70f3eeebd67669fb3b6f812262fd3b6e469c479a90bc39df977bc07ef356fe46 |
openstack-heat-api-cloudwatch-7.0.6-1.el7ost.noarch.rpm | SHA-256: 16a5c0b2bc1135834503f14bd6905cd66ad58ff9aa9e88ee43a888fbf514e991 |
openstack-heat-common-7.0.6-1.el7ost.noarch.rpm | SHA-256: de3f4222507405feca0ac2f4b451c3d8b25e6777d91fdf6b75314ee3c7ef563e |
openstack-heat-engine-7.0.6-1.el7ost.noarch.rpm | SHA-256: f6eaebb27ecc44d0a88e75d05b0abd9ea99c27188779bb8e0663cc4d61507fc9 |
openstack-heat-templates-0-0.14.1e6015dgit.el7ost.noarch.rpm | SHA-256: 976b96031f8650d4054030716115b5c6cb3ac7065f52f432e4ddfad80944db05 |
python-heat-agent-0-0.14.1e6015dgit.el7ost.noarch.rpm | SHA-256: cf3685bdc393504a28dd4d0573b139195a17d1d0e22efd052c8490acc9e964fc |
python-heat-agent-ansible-0-0.14.1e6015dgit.el7ost.noarch.rpm | SHA-256: 38ba98553923caca0b36c69c5641882071a4171eb13134b3b59b1f0ec66213f6 |
python-heat-agent-puppet-0-0.14.1e6015dgit.el7ost.noarch.rpm | SHA-256: 872ce5f649533676b156f4e9f86cf419c16cbe294df43169f60b2ca1b59ae9a3 |
python-heat-tests-7.0.6-1.el7ost.noarch.rpm | SHA-256: a698209ea9195d91efa96f1bb205b3933e9a37532b6348748a82abd827dcc747 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.