RHBA-2018:0310 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 11.0 (Ocata) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

This update addresses the following issues:

• There is a race condition within the Python os.path.realpath method which raises an unexpected exception. Consequently, this caused an iSCSI disconnect method to unexpectedly fail. With this update, the exception is ignored; since the symlink no longer exists it is safe to ignore this exception. As a result, the disconnect operation succeeds, even when the race condition occurs. (BZ#1503258)
• Previously, the DHCP server configuration file for ironic inspector was not configured to handle hosts that were using UEFI and iPXE. Consequently, any host using these may have failed to boot during ironic introspection. With this update, the DHCP server file `/etc/ironic-inspector/dnsmasq.conf` was updated to handle this scenario. As a result, hosts using UEFI and iPXE can properly boot during ironic introspection. (BZ#1489546)
• Previously, fencing could not be configured on nodes running Pacemaker Remote. With this update, the fencing configuration is compatible with Pacemaker Remote nodes. As a result, fencing is now properly created. (BZ#1444621)
• Prior to this update, the default `pg_num` and `pgp_num` values set for the Ceph pools (32) was too low. For most environments, using only 32 PGs for a Ceph pool could have resulted in performance issues, as it limited the scalability of the writes on multiple OSDs, and increased the time necessary to recover from faults. With this update, the default set to 128. This results in improved Ceph cluster performance when there are 5-10 OSDs, but it is always best to calculate and optimize the PGs allocated to each pool for your use case. See the PGs chapter for information on how to calculate an optimal value: https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/2/html/storage_strategies_guide/placement_groups_pgs. (BZ#1489120)
• This update allows the Ceph cluster to determine the pool's minimum replica size, by reference to the desired replica size. The director will no longer enforce a minimum replica size of 1 for the Ceph pools; you can instead configure this using the `CephPoolDefaultSize` parameter (defaulted to `3`), based upon which the Ceph cluster will identify the optimal minimum replica size. This was changed because enforcing a minimum replica size of 1 is dangerous, as it allows for writes in the Ceph pools when only one copy of the data is available. As a result, the minimum replica size for the Ceph pools is determined by the Ceph cluster, based on the desired replica size of each pool. (BZ#1497624)
• Previously, the ScaleIO cinder driver code was relocated in the cinder code tree, however the puppet code responsible for configuring the driver had not been updated to refer to the driver in its new location.

Consequently, Puppet would misconfigure the ScaleIO driver by using an obsolete reference to the driver location. The driver still continued to function because cinder has a built-in mechanism for mapping references to old driver locations to their new location. With this update, the `puppet-cinder` code has been updated to reference the ScaleIO driver in its new location. (BZ#1468025)

• Previously, deployment would fail when using additional object storages. This was the result of inconsistent network port names. With this update, port names are now consistent across all templates, and deployment succeeds when using additional object storage nodes. (BZ#1539616)
• Previously, the `ceilometer-upgrade` may have run before `gnocchi-upgrade`, and consequently failed. This update addresses this, but if you have already upgraded to OSP11 and are seeing this issue, you must first delete `/etc/gnocchi/gnocchi.conf` on the bootstrap node, before re-running the upgrade process with the fixed package. (BZ#1517977)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 11 runs on Red Hat Enterprise Linux 7.4.

The Red Hat OpenStack Platform 11 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 11, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 11 x86_64

Fixes

• BZ - 1423006 - Setting root device hints automatically with "configure boot --root-device smallest" doesn't work when wwn_vendor_extension is used
• BZ - 1438608 - gnocchi-upgrade fails on deploy
• BZ - 1444621 - Autofencing failed to configure fencing on node with pacemaker_remote
• BZ - 1468025 - Heat ScaleIO/Cinder Puppet module deploys invalid Cinder driver by default
• BZ - 1477730 - split-stack minor update does not prompt to clear breakpoints
• BZ - 1483749 - Admin URL is exposed as non-SSL (35357) after SSL deployment
• BZ - 1489120 - Ceph pg_num and pgp_num default is too low for any user
• BZ - 1489546 - (OSP-11)Ironic introspection loops over ipxe.efi for UEFI boot_mode
• BZ - 1494219 - Error when deploying with no tunnelling
• BZ - 1496698 - [BACKPORT] OSP11 - Boot from ISCSI - iBFT boot not properly supported on ramdisk image
• BZ - 1497624 - OSP director sets Ceph's pool min_size to 1 by default
• BZ - 1500527 - Split stack deployment fails during compute node configuration with: Error: /Stage[main]/Tripleo::Profile::Base::Nova::Libvirt/Exec[libvirt-default-net-destroy]: Could not evaluate: Could not find command '/usr/bin/virsh'
• BZ - 1501473 - Invalid ssh configuration is generated on compute nodes when hieradata is invalid
• BZ - 1501564 - Cold-migration should use the internal_api network
• BZ - 1501586 - Nuage support in tripleo-heat-templates is broken in OSPD 11
• BZ - 1501589 - [RFE] Add support for Nuage as mechanism driver to puppet-tripleo in OSPD 11
• BZ - 1510975 - [UPDATES] OC update failed: Error EINVAL: specified pgp_num 128 > pg_num 32
• BZ - 1511535 - Rebase puppet-aodh to 9875384
• BZ - 1511557 - Rebase puppet-ceilometer to 4f6eb57
• BZ - 1511561 - Rebase puppet-ceph to 718a5ff
• BZ - 1511564 - Rebase puppet-cinder to 9b9ebb2
• BZ - 1511586 - Rebase puppet-gnocchi to 48b6bca
• BZ - 1511588 - Rebase puppet-heat to a78c17a
• BZ - 1511609 - Rebase puppet-ironic to 5056d79
• BZ - 1511613 - Rebase puppet-keystone to 7740172
• BZ - 1511702 - Rebase puppet-glance to 8ba21d6
• BZ - 1511712 - Rebase puppet-mistral to 5734bcb
• BZ - 1511718 - Rebase puppet-openstack_extras to c128095
• BZ - 1511733 - Rebase puppet-openstacklib to 33898a8
• BZ - 1511734 - Rebase puppet-oslo to c654db0
• BZ - 1511873 - Rebase puppet-neutron to 9a5cf4a
• BZ - 1511880 - Rebase puppet-manila to 1189eea
• BZ - 1511881 - Rebase puppet-nova to 5ec504e
• BZ - 1511883 - Rebase puppet-ovn to 034d1aa
• BZ - 1511886 - Rebase puppet-sahara to ad91e78
• BZ - 1511888 - Rebase puppet-swift to aaa71eb
• BZ - 1511900 - Rebase puppet-tempest to 6c69f5a
• BZ - 1511902 - Rebase puppet-trove to 141fd94
• BZ - 1511905 - Rebase puppet-vswitch to 05feb85
• BZ - 1511912 - Rebase puppet-zaqar to 19f6d3f
• BZ - 1512078 - Rebase instack-undercloud to 6.1.2
• BZ - 1512109 - Rebase puppet-tripleo to 6.5.4
• BZ - 1512112 - Rebase openstack-tripleo-common to 7b93bc1
• BZ - 1512117 - Rebase openstack-tripleo-image-elements to 6.1.1
• BZ - 1512121 - Rebase openstack-tripleo-puppet-elements to 6.2.3
• BZ - 1512996 - Rebase openstack-tripleo-heat-templates to fdcb5c6
• BZ - 1513762 - Rebase openstack-tripleo-heat-templates-compat to f2f3bce (latest osp10.0 import)
• BZ - 1517977 - gnocchi-upgrade doesnt get triggered from N->O upgrade causing ceilo-upgrade to fail
• BZ - 1528395 - Rebase instack-undercloud to 6.1.3
• BZ - 1528407 - Rebase openstack-tripleo-common to 6.1.4
• BZ - 1528411 - Rebase openstack-tripleo-image-elements to 6.1.2
• BZ - 1528412 - Rebase openstack-tripleo-puppet-elements to 6.2.4
• BZ - 1528436 - Rebase os-net-config to 6.1.2
• BZ - 1528443 - Rebase puppet-horizon to a7fda8c
• BZ - 1528444 - Rebase python-tripleoclient to 6.2.3
• BZ - 1531179 - Rebase puppet-tripleo to 4c1a677
• BZ - 1531286 - Rebase os-refresh-config to 6.1.1
• BZ - 1531713 - Rebase puppet-zaqar to 4edd704
• BZ - 1531716 - Rebase puppet-vswitch to 73fa283
• BZ - 1531781 - Rebase puppet-trove to c0308f7
• BZ - 1531782 - Rebase puppet-swift to 77432ff
• BZ - 1531783 - Rebase puppet-sahara to 432e2c1
• BZ - 1531787 - Rebase puppet-oslo to 43ffad3
• BZ - 1531788 - Rebase puppet-ovn to 6cf79f0
• BZ - 1531789 - Rebase puppet-panko to 455cb57
• BZ - 1531792 - Rebase puppet-openstack_extras to d2d9087
• BZ - 1531793 - Rebase puppet-openstacklib to 7b11562
• BZ - 1531796 - Rebase puppet-neutron to 016231f
• BZ - 1531797 - Rebase puppet-nova to eb1fafa
• BZ - 1531798 - Rebase puppet-mistral to ce1da2e
• BZ - 1531806 - Rebase puppet-manila to 5de148b
• BZ - 1531807 - Rebase puppet-ironic to 1380982
• BZ - 1531808 - Rebase puppet-heat to 8355805
• BZ - 1531809 - Rebase puppet-gnocchi to 8d9d275
• BZ - 1531810 - Rebase puppet-glance to 6897827
• BZ - 1531811 - Rebase puppet-cinder to 8a60a85
• BZ - 1531823 - Rebase puppet-aodh to 9e95c91
• BZ - 1531824 - Rebase puppet-ceilometer to de010bc
• BZ - 1532826 - Rebase puppet-pacemaker to 5f56a96
• BZ - 1533648 - Rebase openstack-tripleo-heat-templates to 6.2.7
• BZ - 1535224 - Rebase openstack-tripleo-heat-templates-compat to latest patches from OSP10.0
• BZ - 1538752 - (OSP11 backport) Deployment templates for unsupported components causing some confusion
• BZ - 1539616 - Deployment fails with ERROR: Failed to validate: Failed to validate: resources[0]: The Resource Type (OS::TripleO::SwiftStorage::Ports::ManagementPort) could not be found.",

CVEs

(none)

References

(none)