RHBA-2018:3611 - Bug Fix Advisory

Topic

Updated packages that resolve various issues are now available for Red Hat
OpenStack Platform 13.0 (Queens) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the ansible-role-redhat-subscription component:

• In prior releases, the Satellite URL was not properly set within role. This caused the system to fail to register with Satellite because it was unable to probe the Satellite server to determine the version. This release derives the rhsm_satellite_url from rhsm_baseurl by default, but allows it to be overridden. It also passes rhsm_baseurl to the registration task to allow force registration and adds an option to ignore certificate errors. This release also adds block and rescue tasks to automatically run recovery tasks in the event of registration failure. This fix enables successful Satellite registration. (BZ#1643254)

Changes to the openstack-kuryr-kubernetes component:

• Kuryr Controller's health check probes perform a request that required OpenStack admin rights. The kuryr-controller pod entered a crash/restart loop when deployed by a non-admin OpenStack user. One workaround is to disable health checks by setting the enable_kuryr_controller_probes parameter to False in the openshift-ansible inventory (inventory/group_vars/all.yml). However, the Kuryr Controller might not restart when something goes wrong.

The health check probes now use a regions list API request. This request does not require OpenStack admin rights. You can deploy OpenShift with the default Kuryr health check setting (enable_kuryr_controller_probes: True) and the status of the controller is not affected. (BZ#1579813)

Changes to the python-openstackclient component:

• In microversion 2.25, nova removed the disk_over_commit parameter during live migration of an instance, but openstackclient continued to send it. This caused the request to fail with an unexpected keyword error. In this release, do not send the disk_over_commit parameter if you’re running microversion 2.24 or greater to make sure live migration requests are correctly sent to nova. (BZ#1633723)

Changes to the python-shade component:

• When trying to get server lists, OpenStack Nova's API paging feature would return at most N elements, with N being the page size configured in Nova. This was not apparent to shade library users. Shade now deals with the paging on behalf of the users, so the users will get all the servers that they request. (BZ#1559947)

Changes to the python-tempestconf component:

• Rebase python-tempestconf to version 2 (package name python-tempestconf-2.0.0). The python-tempestconf tool went through a major refactoring to ease the process of generating tempest.conf. This version fixes many outstanding bugs and brings support for new services. Tempest users should benefit by moving to the new release. (BZ#1621205)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.5.

The Red Hat OpenStack Platform 13 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 13, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat OpenStack for IBM Power 13 ppc64le
• Red Hat OpenStack 13 x86_64
• Red Hat OpenStack Director Deployment Tools 13 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 13 ppc64le

Fixes

• BZ - 1559947 - OpenShift on OpenStack - Nova has a max_limit of 1000
• BZ - 1579813 - kuryr-controller healthcheck requires admin rights
• BZ - 1597040 - 0.0 runtime causes ValueError: math domain error
• BZ - 1599753 - Configure tempest for Octavia tests
• BZ - 1608579 - Rally URL has changed
• BZ - 1613475 - Wrong dependency on python-gabbi [osp13]
• BZ - 1619367 - AssertionError during tempest test discovery
• BZ - 1621205 - Rebase python-tempestconf to 2.0.0 for RHOS-13
• BZ - 1623845 - Rebase python-gabbi to 1.42.1
• BZ - 1631578 - Rebase openstack-barbican to cd63827
• BZ - 1631585 - Rebase openstack-designate to 4dda863
• BZ - 1633723 - unable to live migrate instances when specifying nova api version 2.30
• BZ - 1636290 - [OSP13] instack uses /tmp as temporary directory for DIB to run scripts, but /tmp is often mounted with noexec
• BZ - 1638692 - All Octavia tempest plugin tests fail to run because of non-existing httpd.bin
• BZ - 1639408 - Rebase openstack-ec2-api to 6183cb7
• BZ - 1639444 - Rebase openstack-octavia-ui to 5540696
• BZ - 1639518 - Rebase os-collect-config to e7bf1c8
• BZ - 1639616 - tempest.scenario.test_network_v6.TestGettingAddress tests failing with custom guest image and OVS firewall
• BZ - 1639671 - Rebase openstack-kuryr-kubernetes to 0.4.5
• BZ - 1639700 - Rebase openstack-manila to 6.0.2
• BZ - 1639809 - Rebase python-dracclient to 1.5.0
• BZ - 1639864 - Rebase python-manila-tests-tempest to 0.1.0
• BZ - 1639878 - Rebase python-sushy to 1.3.3
• BZ - 1639939 - Rebase openstack-ironic-staging-drivers to 0.9.1
• BZ - 1640082 - Rebase python-oslo-messaging to 5.35.3
• BZ - 1640087 - Rebase python-oslo-policy to 1.33.2
• BZ - 1640251 - Rebase python-scciclient to 0.6.2
• BZ - 1640280 - Rebase ansible-role-redhat-subscription to c076cc9e4f353330c3fffa4c39b6a30dd37fbf56
• BZ - 1640282 - Rebase python-manilaclient to 1.21.1
• BZ - 1640291 - Add a maintenance release version to /etc/rhosp-release
• BZ - 1640376 - Rebase python-hardware to eb66b8c
• BZ - 1640398 - Rebase python-vmware-nsxlib to cd41057
• BZ - 1640407 - Rebase python-ovsdbapp to 0.10.2
• BZ - 1640652 - Overcloud deployment with Rhsm role that uses activation key fails with: "msg": "parameters are mutually exclusive: activationkey, autosubscribe"
• BZ - 1641145 - latest build leaves extra octavia-amphora builds installed.
• BZ - 1643046 - missing microversion in transfer and backup related test http responses
• BZ - 1643254 - [OSP13 Backport] Scaling out an overcloud with nodes registered to a Satellite 6 server fails with "msg": "Unable to reach the server at $sat_url:443/subscription", "rc": 69

CVEs

(none)

References

(none)