- Issued:
- 2018-01-30
- Updated:
- 2018-01-30
RHBA-2018:0245 - Bug Fix Advisory
Synopsis
openstack-neutron bug fix advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 12.0 (Pike) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:
- OpenStack Networking service
OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)
Changes to the openstack-neutron component:
- Previously, a bug in the Neutron IPAM database layer caused the core Neutron plugin to commit inconsistent IP allocation sate in some IPv6/SLAAC network subnets. This led to subnet API cretion requests to sometimes fail with a ServerFault 5xx HTTP error, and to incorrect IP allocations for some ports.
This fix prevents the IPAN database layer from committing inconsistent IP allocation states, which prevents API errors and incorrect IP allocations. (BZ#1470784)
Changes to the python-networking-ovn component:
- For deployments using OVN as the ML2 mechanism driver, only nodes with connectivity to the external networks are eligible to schedule the router gateway ports on them. However, there is currently a known issue that will make all nodes as eligible, which becomes a problem when the Compute nodes do not have external connectivity.
As a result, if a router gateway port is scheduled on Compute nodes without external connectivity, ingress and egress connections for the external networks will not work; in which case the router gateway port has to be rescheduled to a controller node.
As a workaround, you can provide connectivity on all your compute nodes, or you can consider deleting NeutronBridgeMappings, or set it to datacentre:br-ex. For more information, see https://bugzilla.redhat.com/show_bug.cgi?id=1525520 and https://bugzilla.redhat.com/show_bug.cgi?id=1510879. (BZ#1525520)
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 12 runs on Red Hat Enterprise Linux 7.4.
The Red Hat OpenStack Platform 12 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 12, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack for IBM Power 12 ppc64le
- Red Hat OpenStack 12 x86_64
Fixes
- BZ - 1470784 - API test case test_dhcpv6_stateless_eui64 fails with ServerFault
- BZ - 1522713 - healthmonitor did not take effect
- BZ - 1522826 - neutron lbaas scenario tests fail when using RHEL image with tempest
- BZ - 1525520 - OVN L3 plugin schedules routers to chassis without external connectivity regardless of bridge mappings
- BZ - 1528066 - Exception raised when trying to get non-existent SessionPersistenceV2
CVEs
(none)
References
(none)
Red Hat OpenStack for IBM Power 12
SRPM | |
---|---|
openstack-neutron-11.0.1-8.el7ost.src.rpm | SHA-256: 2fd07694f6c4ab3a959a06fb72c85b8587a7329a5582604d41b49eef5571c035 |
openstack-neutron-lbaas-11.0.1-8.el7ost.src.rpm | SHA-256: 0d43bbc87f85be5260f1eab60bc57e89f24e6f0078db12d4fd63e8756823f208 |
python-networking-cisco-5.5.0-1.el7ost.src.rpm | SHA-256: 09bf89b42a56a7ddeba7c30c58d21ae4a6e26beac6a6ab114daa9c2b696a9a3b |
python-networking-ovn-3.0.0-3.el7ost.src.rpm | SHA-256: 82efc3e74e35a02dbc6ea01e9c64e0a88825f9f4c2607a11358ed0deedd29e58 |
ppc64le | |
openstack-neutron-11.0.1-8.el7ost.noarch.rpm | SHA-256: ce87e937fe32e27e01fb5b1764bb18de98fe4c9d1207362727e6ac62dae7dcdd |
openstack-neutron-common-11.0.1-8.el7ost.noarch.rpm | SHA-256: 6100b32ac34dccf85126baa5b6ff45f8539d78516d9ef450efa7c619df76e98b |
openstack-neutron-lbaas-11.0.1-8.el7ost.noarch.rpm | SHA-256: 30c5658aca31918679e0a63fd8c6074235fe0887b6d4eda06b303791b0eac98c |
openstack-neutron-linuxbridge-11.0.1-8.el7ost.noarch.rpm | SHA-256: 427f99c0fdd3b547756772011715de87b965105392ca85b09fa7b5ca07735e87 |
openstack-neutron-macvtap-agent-11.0.1-8.el7ost.noarch.rpm | SHA-256: 8580e610df8c95a2994924ace3e85649c114436b1b83c84524990b8986259c80 |
openstack-neutron-metering-agent-11.0.1-8.el7ost.noarch.rpm | SHA-256: 62824e999c0563167f7519f9de94ff4fa7eb6a606f9b8d02720e80056ec9bf44 |
openstack-neutron-ml2-11.0.1-8.el7ost.noarch.rpm | SHA-256: dbe7785237aa4048f74fc8a1afb508a6d51a106f7edb1b71c9d286ff2148177e |
openstack-neutron-openvswitch-11.0.1-8.el7ost.noarch.rpm | SHA-256: 1f61667561e3e659c0d2fd4717895d1712c45ca0cc55e1757853d497d02f880d |
openstack-neutron-rpc-server-11.0.1-8.el7ost.noarch.rpm | SHA-256: 6b72dd9a553a5b50e6b556b0a9b27c15b26e1b6d9010fa799c0f7254edb28b55 |
openstack-neutron-sriov-nic-agent-11.0.1-8.el7ost.noarch.rpm | SHA-256: 0c67a8c63071fed90f2d7b1a80d8ee3e5f22181573b2cf5ed1eefe2f28215fba |
python-networking-cisco-5.5.0-1.el7ost.noarch.rpm | SHA-256: feed982fdd266cace81575d5b767b0f4537b4519b90556391c5a26d6137fa219 |
python-networking-ovn-3.0.0-3.el7ost.noarch.rpm | SHA-256: 86bfa567739ad25b5da7dbcc2db25e8ea106ead979ab39701f5c8c358ff786fe |
python-neutron-11.0.1-8.el7ost.noarch.rpm | SHA-256: ed3aa6ab81a7d9006eb83989851f2e43b8c02d2ffdf38197b4c9ca270188d39b |
python-neutron-lbaas-11.0.1-8.el7ost.noarch.rpm | SHA-256: 8512f85aec1978c178d638f6bf5f611973e3c83be579eb30704eeddf9a7f4837 |
python-neutron-lbaas-tests-11.0.1-8.el7ost.noarch.rpm | SHA-256: f36277ad60211e57cc1ca24c9f2ec6ac757359d978c752d62b539ff61fff95c7 |
python-neutron-tests-11.0.1-8.el7ost.noarch.rpm | SHA-256: e3714990cd8b27455657dba180e32466fd97bd946ebed352fb96ed1c9803c9c3 |
Red Hat OpenStack 12
SRPM | |
---|---|
openstack-neutron-11.0.1-8.el7ost.src.rpm | SHA-256: 2fd07694f6c4ab3a959a06fb72c85b8587a7329a5582604d41b49eef5571c035 |
openstack-neutron-lbaas-11.0.1-8.el7ost.src.rpm | SHA-256: 0d43bbc87f85be5260f1eab60bc57e89f24e6f0078db12d4fd63e8756823f208 |
python-networking-cisco-5.5.0-1.el7ost.src.rpm | SHA-256: 09bf89b42a56a7ddeba7c30c58d21ae4a6e26beac6a6ab114daa9c2b696a9a3b |
python-networking-ovn-3.0.0-3.el7ost.src.rpm | SHA-256: 82efc3e74e35a02dbc6ea01e9c64e0a88825f9f4c2607a11358ed0deedd29e58 |
x86_64 | |
openstack-neutron-11.0.1-8.el7ost.noarch.rpm | SHA-256: ce87e937fe32e27e01fb5b1764bb18de98fe4c9d1207362727e6ac62dae7dcdd |
openstack-neutron-common-11.0.1-8.el7ost.noarch.rpm | SHA-256: 6100b32ac34dccf85126baa5b6ff45f8539d78516d9ef450efa7c619df76e98b |
openstack-neutron-lbaas-11.0.1-8.el7ost.noarch.rpm | SHA-256: 30c5658aca31918679e0a63fd8c6074235fe0887b6d4eda06b303791b0eac98c |
openstack-neutron-linuxbridge-11.0.1-8.el7ost.noarch.rpm | SHA-256: 427f99c0fdd3b547756772011715de87b965105392ca85b09fa7b5ca07735e87 |
openstack-neutron-macvtap-agent-11.0.1-8.el7ost.noarch.rpm | SHA-256: 8580e610df8c95a2994924ace3e85649c114436b1b83c84524990b8986259c80 |
openstack-neutron-metering-agent-11.0.1-8.el7ost.noarch.rpm | SHA-256: 62824e999c0563167f7519f9de94ff4fa7eb6a606f9b8d02720e80056ec9bf44 |
openstack-neutron-ml2-11.0.1-8.el7ost.noarch.rpm | SHA-256: dbe7785237aa4048f74fc8a1afb508a6d51a106f7edb1b71c9d286ff2148177e |
openstack-neutron-openvswitch-11.0.1-8.el7ost.noarch.rpm | SHA-256: 1f61667561e3e659c0d2fd4717895d1712c45ca0cc55e1757853d497d02f880d |
openstack-neutron-rpc-server-11.0.1-8.el7ost.noarch.rpm | SHA-256: 6b72dd9a553a5b50e6b556b0a9b27c15b26e1b6d9010fa799c0f7254edb28b55 |
openstack-neutron-sriov-nic-agent-11.0.1-8.el7ost.noarch.rpm | SHA-256: 0c67a8c63071fed90f2d7b1a80d8ee3e5f22181573b2cf5ed1eefe2f28215fba |
python-networking-cisco-5.5.0-1.el7ost.noarch.rpm | SHA-256: feed982fdd266cace81575d5b767b0f4537b4519b90556391c5a26d6137fa219 |
python-networking-ovn-3.0.0-3.el7ost.noarch.rpm | SHA-256: 86bfa567739ad25b5da7dbcc2db25e8ea106ead979ab39701f5c8c358ff786fe |
python-neutron-11.0.1-8.el7ost.noarch.rpm | SHA-256: ed3aa6ab81a7d9006eb83989851f2e43b8c02d2ffdf38197b4c9ca270188d39b |
python-neutron-lbaas-11.0.1-8.el7ost.noarch.rpm | SHA-256: 8512f85aec1978c178d638f6bf5f611973e3c83be579eb30704eeddf9a7f4837 |
python-neutron-lbaas-tests-11.0.1-8.el7ost.noarch.rpm | SHA-256: f36277ad60211e57cc1ca24c9f2ec6ac757359d978c752d62b539ff61fff95c7 |
python-neutron-tests-11.0.1-8.el7ost.noarch.rpm | SHA-256: e3714990cd8b27455657dba180e32466fd97bd946ebed352fb96ed1c9803c9c3 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.