RHBA-2018:3614 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.).

Changes to the openstack-neutron component:

• When neutron services are containerized, trying to run commands in a network namespace might fail with the following error:

# ip netns exec qrouter...
RTNETLINK answers: Invalid argument

To run a command inside a network namespace, you must do it from the neutron container that created the namespace. For example, the l3-agent creates network namespace for routers, so the command should be:

# docker exec neutron_l3_agent ip netns exec qrouter...

Similarly, with network namespaces beginning with 'qdhcp' you would need to exec from the 'neutron_dhcp' container. (BZ#1496584)

• The notification_driver parameter could not be managed because it was defined in both neutron.conf and neutron-dist.conf within the neutron server container. As a result, notifications could not be disabled. To address this issue, the conflicting entry was removed from neutron-dist.conf notifications can now be disabled by managing the notification_driver parameter. (BZ#1601593)

Changes to the python-networking-ovn component:

• OSP13 using OVN as the networking backend won't include IPv6 support in the first release. There is a problem with the responses to the Neighbor Solicitation requests coming from guests VMs that causes a loss of the default routes. (BZ#1567735)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.5.

The Red Hat OpenStack Platform 13 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 13, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 13 ppc64le
• Red Hat OpenStack 13 x86_64

Fixes

• BZ - 1519925 - [Scale][Netvirt] ODL L2 agent status is flaky when launching large number of VMs
• BZ - 1533573 - [FutureFeature]Import networking-l2gw-tempest-plugin for RHOS-13
• BZ - 1546809 - python2-oslo-db 4.33 doesn't containing tests
• BZ - 1560442 - router_interface internal interface status is down & unbound
• BZ - 1566080 - [Infra] Improve TripleO OpenDaylight healthcheck to use new status URL instead of neutron (ODL part)
• BZ - 1567735 - all IPv6 tests failed on OVN / OVN-DVR deployment
• BZ - 1584779 - [HA] Floating IP issues after introducing failures to Cluster nodes
• BZ - 1600069 - [Tests] PEP8 fails
• BZ - 1601593 - neutron-dist.conf is conflicting with neutron.conf when disabling notifications
• BZ - 1607613 - test_connectivity_min_max_mtu fails
• BZ - 1607959 - [Infra] Transaction leak in org.opendaylight.netvirt.vpnmanager.VpnInterfaceManager
• BZ - 1608951 - Octavia - floating IP not working with Octavia + OVN + DVR
• BZ - 1618863 - Adding python-ucsmsdk package to OSP13
• BZ - 1622495 - Race condition during migration from legacy to HA router
• BZ - 1623146 - [OSP13] Octavia brings down all LoadBalancers due to the DB outage.
• BZ - 1639123 - Need to backport latest vmware-nsx Queens plugin code in RHOSP13
• BZ - 1639443 - Rebase openstack-neutron-lbaas to ed663f3
• BZ - 1639455 - Rebase openstack-neutron-fwaas to a3c335a
• BZ - 1639459 - Rebase openstack-neutron-lbaas-ui to dc7d9e7
• BZ - 1639868 - Rebase python-networking-bigswitch to 12.0.6
• BZ - 1639872 - Rebase python-networking-bgpvpn to 8.0.1
• BZ - 1639960 - Rebase openstack-octavia to 2.0.2
• BZ - 1639971 - Rebase openstack-neutron to 12.0.4
• BZ - 1640379 - Rebase python-networking-odl to 4a28724
• BZ - 1640380 - Rebase python-networking-vmware-nsx to 4b06e54
• BZ - 1640415 - Rebase python-networking-ovn to 4.0.3
• BZ - 1640714 - Rebase python-neutron-tests-tempest to 1d90adb
• BZ - 1643614 - python-networking-bigswitch-12.0.6-1.el7ost is missing an obsoletes on removed subpackage openstack-neutron-bigswitch-vif-plug-ivs

CVEs

(none)

References

(none)