RHBA-2018:0253 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 12.0 (Pike) for RHEL 7.

Description

Changes to the openstack-tripleo-common component:

• When using the Docker CLI to report the state of running containers, the nova_migration_target container might be incorrectly reported as "unhealthy". This is due to an issue with the health check itself, and not with an accurate reflection of the state of the running container. (BZ#1469434)

Changes to the openstack-tripleo-heat-templates component:

• There is currently a known issue with LDAP integration for Red Hat OpenStack Platform. At present, the `keystone_domain_confg` tag is missing from `keystone.yaml`, preventing Puppet from properly applying the required configuration files. Consequently, LDAP integration with Red Hat OpenStack Platform will not be properly configured. As a workaround, you will need to manually edit `keystone.yaml` and add the missing tag. There are two ways to do this:

1. Edit the the file directly:
a. Log into the undercloud as the stack user.
b. Open the keystone.yaml in the editor of your choice. For example:
`sudo vi /usr/share/openstack-tripleo-heat-templates/docker/services/keystone.yaml`
c. Append the missing puppet tag, `keystone_domain_confg`, to line 94. For example:
`puppet_tags: keystone_config`
Changes to:
`puppet_tags: keystone_config,keystone_domain_confg`
d. Save and close `keystone.yaml`.
e. Verify you see the missing tag in the `keystone.yaml` file. The following command should return '1':
`cat /usr/share/openstack-tripleo-heat-templates/docker/sercies/keystone.yaml | grep 'puppet_tags: keystone_config,keystone_domain_config' | wc -l`

2. Or, use sed to edit the file inline:
a. Login to the undercloud as the stack user.
b. Run the following command to add the missing puppet tag:
`sed -i 's/puppet_tags\: keystone_config/puppet_tags\: keystone_config,keystone_domain_config/' /usr/share/openstack-tripleo-heat-templates/docker/services/keystone.yaml`
c. Verify you see the missing tag in the keystone.yaml file The following command should return '1':
`cat /usr/share/openstack-tripleo-heat-templates/docker/sercies/keystone.yaml | grep 'puppet_tags: keystone_config,keystone_domain_config' | wc -l` (BZ#1519057)

• All Compute and Controller nodes have bridge-mappings configured, and therefore are eligible to schedule routers. However, if you scheduled a router on a Compute node that doesn't have a connection to an external network, connectivity with the external network fails.

This fix adds the ability to configure bridge-mappings in TripleO and in the director according to roles. This means that you can now exclude Compute nodes from router scheduling and maintain external network connectivity. (BZ#1510879)

• Previously, the value passed through the CephPools parameter was incorrectly consumed as a list of strings instead of as a JSON object. This prevented creating additional Ceph pools during the overcloud deployment, because attempting to pass a JSON object failed.

This fix updates the CephPools parameter so that it now accepts any JSON object that describes additional pools to create in the Ceph cluster. Note: The JSON object structure must conform to the ceph-ansible conventions. (BZ#1516389)

• It is only possible to deploy Ceph storage servers if their disk devices are homogeneous. (BZ#1520004)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 12 runs on Red Hat Enterprise Linux 7.4.

The Red Hat OpenStack Platform 12 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 12, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 12 x86_64

Fixes

• BZ - 1419755 - [RFE] Backwards compatibility with previous version [for RHOSP12]
• BZ - 1458861 - rhosp-director: docker error: Could not evaluate: Could not retrieve information from environment production source(s) file:/usr/bin/heat-wsgi-api-cfn
• BZ - 1469434 - Health checks for containerized services
• BZ - 1508936 - deploying CEPH pure HCI fails
• BZ - 1510879 - OVN deployments shouldn't have bridge-mappings on compute nodes
• BZ - 1512920 - OPS Tools | /usr/share/openstack-tripleo-heat-templates/environments/logging-environment.yaml should include in resource_registry reference to the new env. file for OSP12.
• BZ - 1516389 - CephPools items are misinterpreted as strings
• BZ - 1519057 - OSP11->OSP12 Keystone LDAP Domain Template No Longer Works
• BZ - 1520004 - per host CephAnsibleDisksConfig are ignored
• BZ - 1520467 - CephPools can't be used to override properties of the standard OpenStack pools when using ceph-ansible
• BZ - 1525580 - OSP 12 with ceph deployment fails at step 4
• BZ - 1532931 - Rebase puppet-pacemaker to 5f56a96

CVEs

(none)

References

(none)