RHBA-2018:0311 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 11.0 (Ocata) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the openstack-panko component:

• The Telemetry Event Storage used a SQL database column ('trait_int') with an 'Integer' type. This caused SQL errors due to the values in this column exceeding integer limits. This fix changes 'trait_int' to use 'BigInteger' values. The SQL errors no longer appear. (BZ#1495270)

Changes to the openstack-selinux component:

• Incorrect SELinux fcontext for '/httpboot' and '/tftpboot' directories on the director caused access errors during PXE boot. This fix adds the correct fcontext for these directories. Nodes now PXE boot from the director without access errors. (BZ#1483748)

Changes to the puppet-certmonger component:

• The director generated self-signed certificates with both DNS names and IP addresses listed as DNS entries. The resulting certificate contained an invalid subjectAltName section. This fix corrects how the certificate generation distinguishes between DNS names and IP addresses. The certificate's subjectAltName section is now valid. (BZ#1498196)

Changes to the python-pbr component:

• A missing dependency caused vmbc to report a traceback error. This fix adds the dependent package (python-setuptools) and the traceback error no longer appears. (BZ#1419720)

Changes to the python-tempestconf component:

• The discover-tempest-config command failed with a 'TypeError' message due to how it handled images. This fix corrects how the command obtains image information from OpenStack Image Storage (glance). The 'TypeError' no longer appears and the command runs successfully. (BZ#1480244)

Changes to the qemu-kvm-rhev component:

• Hot-unplugging Virtual Function I/O (VFIO) devices previously failed when performed after hot-unplugging a vhost network device. This update fixes the underlying code, and the VFIO device is unplugged correctly in the described circumstances. (BZ#1498135)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 11 runs on Red Hat Enterprise Linux 7.4.

The Red Hat OpenStack Platform 11 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 11, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat OpenStack 11 x86_64

Fixes

• BZ - 1419720 - ImportError: No module named pkg_resources when running vbmc. Missing python-setuptools dependency
• BZ - 1445716 - "Check connectivity to various OpenStack services" validation fails
• BZ - 1465513 - Overcloud deployment fails when increasing number of predictable IP addresses
• BZ - 1480244 - discover-tempest-config fails with a "TypeError" message
• BZ - 1483748 - restorecon on /httpboot on director causes selinux errors
• BZ - 1485016 - On Giveback after A Share Service that was Shut Down is Brought Back Up, Manila's Access to Shares is Lost
• BZ - 1495270 - Panko: mysql bigint support
• BZ - 1498196 - Director install generates a self-signed certificate that has an illegal x.509 subjectAltName
• BZ - 1506003 - Rebase python-dracclient to 5e9b27ee
• BZ - 1506326 - Fix source for openstack-manila-data.service
• BZ - 1506408 - Rebase python-horizon-tests-tempest to 86ac4f82
• BZ - 1511166 - Rebase openstack-panko to 8dd9043
• BZ - 1511169 - neutron API test "test_associate_floating_ip_with_port_from_another_tenant" skips and fails with bug in tempest.conf
• BZ - 1511700 - Rebase python-tempestconf to 1.1.3
• BZ - 1511703 - Rebase python-oslo-serialization to 2.16.1
• BZ - 1512107 - Rebase openstack-manila to f3820a7
• BZ - 1512122 - Rebase openstack-tripleo-ui to 3.2.2
• BZ - 1512124 - Rebase openstack-tripleo-validations to 5.6.1
• BZ - 1528413 - Rebase openstack-tripleo-validations to 5.6.2
• BZ - 1528435 - Rebase os-collect-config to 6.1.2
• BZ - 1528440 - Rebase os-apply-config to 6.1.2
• BZ - 1531791 - Rebase puppet-octavia to 24b90f7
• BZ - 1531818 - Rebase openstack-panko to c926c3a
• BZ - 1531821 - Rebase openstack-zaqar to 062c297
• BZ - 1531852 - Rebase openstack-mistral to bcf07e7
• BZ - 1531874 - Rebase openstack-manila to 57ae362
• BZ - 1533414 - current openstack-selinux does not allow to write to /var/lib/gnocchi if it's NFS, solved upstream ?
• BZ - 1534806 - The pxe_ilo driver ignores power requests under certain conditions with HP BL460
• BZ - 1542211 - OSP11: unable to run ping as non-root user: ping: socket: Operation not permitted

CVEs

(none)

References

(none)