RHBA-2017:3281 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 8.0 (Liberty) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building a private
or public infrastructure-as-a-service (IaaS) cloud running on commonly
available physical hardware. This advisory includes packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

This update addresses the following issues:

• Previously, iptables_hybrid and iptables firewall drivers were not compatible with the new iptables package shipped with RHEL. The new iptables package introduced file locking when calling the iptables-restore command. Consequently, attempts to configure firewall rules using iptables_hybrid or iptables firewall drivers would sometimes fail.

With this update, the iptables file is correctly locked when calling iptables-restore inside the iptables_hybrid or iptables firewall drivers. As a result, no errors occur when applying firewall rules to neutron ports.

• Previously, L3 and DHCP agents didn't update their MTU values for existing ports on restart. Consequently, when upgrading RH-OSP from 8 to 9, existing ports were not updated with a new network MTU, despite it changing between the RH-OSP 8 and 9 releases. This affected installations where the upgrade was executed in-place, without migrating agents to other nodes.

With this update, DHCP and L3 agents now update their port MTUs on each restart. As a result, DHCP and router ports receive new MTUs after an OSP upgrade.

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 8 runs on Red Hat Enterprise Linux 7.4.

The Red Hat OpenStack Platform 8 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 8, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/8/paged/release-notes

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 8 x86_64

Fixes

• BZ - 1490837 - iptables-restore calls fail acquiring 'xlock' with iptables
• BZ - 1505522 - Spurious error log message from iptables manager grabbing xlock
• BZ - 1510159 - Bug in L3 agent code while cleaning up a router namespace

CVEs

(none)

References

(none)