- Issued:
- 2018-12-05
- Updated:
- 2018-12-05
RHBA-2018:3789 - Bug Fix Advisory
Synopsis
Red Hat OpenStack Platform 12.0 director Bug Fix Advisory
Type/Severity
Bug Fix Advisory
Red Hat Insights patch analysis
Identify and remediate systems affected by this advisory.
Topic
Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 12.0 (Pike) for RHEL 7.
Description
Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.
Changes to the instack-undercloud component:
- Previously, undercloud installations with SSL enabled could fail with the error `ERROR: epmd error`. This failure occurred because the VIP that matched the hostname was configured by keepalived after rabbitmq.
With this update, keepalived is configured before rabbitmq, and undercloud installation succeeds. (BZ#1539980)
Changes to the openstack-tripleo-heat-templates component:
- Previously, with shared storage for `/var/lib/nova/instances`, restarting nova_compute on any compute node resulted in owner/group change of the console.log and virtual ephemeral disks of the instance. As a result, instances lost access to virtual ephemeral disks.
With this update, the scripts that modify the ownership of the instance files in `var/lib/nova/instances` no longer cause loss of access to the instance files during restart of nova compute. (BZ#1608913)
- Previously, online data migrations for Nova, Cinder, and Ironic in the overcloud did not run automatically after upgrade to Red Hat OpenStack Platform 12.
With this update, the `openstack overcloud upgrade converge` command triggers online data migrations when upgrading to Red Hat OpenStack Platform 12. (BZ#1627680)
- Previously, users could set RX/TX queue size with `nova::compute::libvirt::rx_queue_size/nova::compute::libvirt::tx_queue_size`. However, there was no dedicated TripleO heat template parameter.
With this update, you can set the RX/TX queue size on a role base:
```
parameter_defaults:
ComputeParameters:
NovaLibvirtRxQueueSize: 1024
NovaLibvirtTxQueueSize: 1024
``` (BZ#1623553)
- Previously, deployments failed with rabbitmq errors when setting the `KernelDisapleIPv6` parameter to `true` due to Erlang Port Mapper Daemon requiring that the loopback interface support IPv6.
To prevent this failure, do not disable IPv6 on the loopback interface when disabling IPv6. (BZ#1631352)
- Previously, the TripleO `CinderNetappBackendName` parameter was not overriding the default value for the cinder NetApp backend correctly.
With this fix, the `CinderNetappBackendName` parameter overrides the default back-end name correctly. (BZ#1599759)
- Previously, the Cinder NetApp back-end driver failed during initialization when the user specified empty string values for some deprecated parameters.
With this update, empty string values for deprecated NetApp parameters are converted to valid NetApp driver configuration automatically and the Cinder NetApp back-end driver initializes successfully. (BZ#1610962)
Changes to the python-os-brick component:
- Previously, the os-brick code that scanned FibreChannel HBA hosts returned an invalid value under certain circumstances. As a result, services including cinder and nova failed.
With this update, the FibreChannel HBA scan code always returns a valid value and cinder and nova no longer fail when scanning FibreChannel HBA hosts. (BZ#1629729)
- Previously, the os-brick code that scanned FibreChannel HBA hosts returned an invalid value under certain circumstances. As a result, services including cinder and nova failed.
With this update, the FibreChannel HBA scan code always returns a valid value and cinder and nova no longer fail when scanning FibreChannel HBA hosts. (BZ#1630842)
- Previously, in certain cases a failure on an individual device flush prevented disconnection incorrectly.
With this update, disconnection fails only when there is a risk of data loss. (BZ#1619792)
- Previously, iSCSI device detection checked for the presence of devices according to the re-scan time. As a result, devices that become available in between scans were not detected.
With this update, iSCSI device detection searches and scans are independent operations at different cadences. (BZ#1629875)
Solution
Before applying this update, ensure all previously released errata relevant
to your system have been applied.
Red Hat OpenStack Platform 12 runs on Red Hat Enterprise Linux 7.5.
The Red Hat OpenStack Platform 12 Release Notes contain the following:
- An explanation of the way in which the provided components interact to
form a working cloud computing environment.
- Technology Previews, Recommended Practices, and Known Issues.
- The channels required for Red Hat OpenStack Platform 12, including which
channels need to be enabled and disabled.
The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/12/html/release_notes/
This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:
https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html
Affected Products
- Red Hat OpenStack for IBM Power 12 ppc64le
- Red Hat OpenStack 12 x86_64
Fixes
- BZ - 1460911 - /var/lib/config-data/ irrationally big
- BZ - 1539980 - [OSP12] Undercloud installer fails with ERROR: epmd error
- BZ - 1557327 - Enabling SSL on overcloud endpoints fails
- BZ - 1559676 - ceilometer_agent_centraldocker container doesn't bind /var/log/ceilometer directory with host
- BZ - 1572677 - get-occ-config.sh counts "wrong" cause of missing tonumber screwing up the deployment
- BZ - 1573500 - Keystone still configured for single process
- BZ - 1579693 - [Deployment][RHOSP-12] Lift the restriction on choices for `cpu_model_extra_flags` config attribute
- BZ - 1582409 - [BACKPORT][Deployment][RHOSP-12] Implement CPU weighter filter
- BZ - 1583893 - [RHOSP12] Not able to register baremetal nodes when using pxe_ucs driver
- BZ - 1594764 - [OSP12][Deployment][undercloud] notification_format in nova.conf should be set to unversioned as there is no consumer for versioned
- BZ - 1599759 - CinderNetAppBackendName is not reflected in deployed environment
- BZ - 1608913 - [OSP12] starting nova_compute docker on a new compute node makes guest disks on nfs share read-only
- BZ - 1610962 - [OSP-12] an empty netapp_storage_pools (or empty netapp_volume_list) results in an invalid search pattern
- BZ - 1614451 - [Deployment][OSP12] workaround BZ1613449
- BZ - 1618374 - Backporting PublicVirtualFixedIPs fix in templates
- BZ - 1623553 - [OSP12] RX/TX Queue Size is missing THT parameter
- BZ - 1627680 - [OSP12] Nova, Cinder, Ironic online data migrations not running in overcloud
- BZ - 1627726 - Containerized Cinder logs are not compressed when rotated
- BZ - 1627740 - Allow logrotate configuration to control log retention based on age
- BZ - 1629729 - hp 3par fc volume create from image fails due to Duplicate: Volume (osv-xxx-.xxxxxx) already exists on array
- BZ - 1630842 - fc rescan issue when looking at specific hbas
- BZ - 1643055 - Wrongly rendered namespace in docker images: <class 'jinja2.utils.Namespace'>/centos-binary-ceilometer-notification:current-tripleo"
- BZ - 1643994 - deactivation of interactive login in get-occ-config.sh
CVEs
(none)
References
(none)
Red Hat OpenStack for IBM Power 12
SRPM | |
---|---|
instack-undercloud-7.4.12-3.el7ost.src.rpm | SHA-256: c16c143f60d7f438e380d7ddd6c19a671b65c6ac28b8621007a3a1728315c66d |
openstack-tripleo-common-7.6.13-6.el7ost.src.rpm | SHA-256: 42f33e2900042fb36cccfe6a9e8574b61f2239b136ee4934449e28b305e6714b |
openstack-tripleo-heat-templates-7.0.12-17.el7ost.src.rpm | SHA-256: 06f90210921f318a7e163be64143a6091c9ec307fc252fe6b29a8f4b19bc84c7 |
puppet-keystone-11.4.0-3.el7ost.src.rpm | SHA-256: 123803f84b1c44f4f999c747a41347056ed350a00f20bb0048b5449b044092b5 |
puppet-neutron-11.5.0-3.el7ost.src.rpm | SHA-256: a192a5a341978ce6f58e6f5de89b9479289d560fc4887f568106fd8b651acb8d |
puppet-nova-11.5.0-6.el7ost.src.rpm | SHA-256: 0d35aa2c0bc58b9f55e0216b49ba46be80e811145922d4ec08fac3256aa9807a |
puppet-pacemaker-0.7.0-3.el7ost.src.rpm | SHA-256: 8a171f1d88bd87ff86bb1bb921a3bd5881c1d031db6fed7d4a62ae4ccf0f1c80 |
puppet-tripleo-7.4.12-10.el7ost.src.rpm | SHA-256: 3e9cb5fe89f131aa25031cd00db755c95b728679f8fe18a3ca91d94ffb54fcd8 |
python-os-brick-1.15.5-5.el7ost.src.rpm | SHA-256: 2f37b8ba6258881b058a787a2fcdd3a2572626a0bf78b332a222c320733159b7 |
python-tripleoclient-7.3.10-4.el7ost.src.rpm | SHA-256: 83520bfb08dbaac7068b5e535d542a5b324aace42b2554f2597b5fc6426d794f |
ppc64le | |
instack-undercloud-7.4.12-3.el7ost.noarch.rpm | SHA-256: bab599652034627cb9e57b7ca2a1b1db5270fa29075ed5bd3a05222a700fe811 |
openstack-tripleo-common-7.6.13-6.el7ost.noarch.rpm | SHA-256: 6c560efc609bcafcf70e816efc2f7b3599f804a77dd48b074bbbf22317e6bfcb |
openstack-tripleo-common-container-base-7.6.13-6.el7ost.noarch.rpm | SHA-256: b7f4d2a00418c6f85ea251890c925ad8644b6e8459480e5aee235e438969a680 |
openstack-tripleo-common-containers-7.6.13-6.el7ost.noarch.rpm | SHA-256: 33dc0f178a9f6af9fefc14d1a9b5dc928b3b88b7d14736342d810cc92c0741b7 |
openstack-tripleo-common-devtools-7.6.13-6.el7ost.noarch.rpm | SHA-256: 6fb0594e011255cdd53fcf91d860f0d13af475f45711cbe05083b0c7011caf43 |
openstack-tripleo-heat-templates-7.0.12-17.el7ost.noarch.rpm | SHA-256: 73369c492846b4ba8c616cb876417f2949d1b31147c7c8df9c403971b9a47107 |
puppet-keystone-11.4.0-3.el7ost.noarch.rpm | SHA-256: 407abd09a2bd719c83029cd6dd8355e0c65fd7a11cc40aa645f938d0eabe1e5f |
puppet-neutron-11.5.0-3.el7ost.noarch.rpm | SHA-256: 3eaf8bd26c34167888219d1d013d458ed3a8e1e7fa4db6efda8a882a265be9e8 |
puppet-nova-11.5.0-6.el7ost.noarch.rpm | SHA-256: 7c986a9bfe1202bf6af06bb28391bc46e2b0b5e2952953dc85cab9a8d9069ae6 |
puppet-pacemaker-0.7.0-3.el7ost.noarch.rpm | SHA-256: 1d25b9126683777425fed799f63f92f603ca78b8878dd4c7906d672c31c2385d |
puppet-tripleo-7.4.12-10.el7ost.noarch.rpm | SHA-256: 674e4af9a5418b95aff4174623cd3f8d1bb8b41e66d49eef67d8682aaee7588b |
python-os-brick-1.15.5-5.el7ost.noarch.rpm | SHA-256: e301ad9acd50e6127155706450af3ec2d5927744c4aa6502c828f915463291f1 |
python-tripleoclient-7.3.10-4.el7ost.noarch.rpm | SHA-256: aab2bea8438577410c8a1709a6b28086746bd5e15e840da72bdf4386f6f3ae99 |
Red Hat OpenStack 12
SRPM | |
---|---|
instack-undercloud-7.4.12-3.el7ost.src.rpm | SHA-256: c16c143f60d7f438e380d7ddd6c19a671b65c6ac28b8621007a3a1728315c66d |
openstack-tripleo-common-7.6.13-6.el7ost.src.rpm | SHA-256: 42f33e2900042fb36cccfe6a9e8574b61f2239b136ee4934449e28b305e6714b |
openstack-tripleo-heat-templates-7.0.12-17.el7ost.src.rpm | SHA-256: 06f90210921f318a7e163be64143a6091c9ec307fc252fe6b29a8f4b19bc84c7 |
puppet-keystone-11.4.0-3.el7ost.src.rpm | SHA-256: 123803f84b1c44f4f999c747a41347056ed350a00f20bb0048b5449b044092b5 |
puppet-neutron-11.5.0-3.el7ost.src.rpm | SHA-256: a192a5a341978ce6f58e6f5de89b9479289d560fc4887f568106fd8b651acb8d |
puppet-nova-11.5.0-6.el7ost.src.rpm | SHA-256: 0d35aa2c0bc58b9f55e0216b49ba46be80e811145922d4ec08fac3256aa9807a |
puppet-pacemaker-0.7.0-3.el7ost.src.rpm | SHA-256: 8a171f1d88bd87ff86bb1bb921a3bd5881c1d031db6fed7d4a62ae4ccf0f1c80 |
puppet-tripleo-7.4.12-10.el7ost.src.rpm | SHA-256: 3e9cb5fe89f131aa25031cd00db755c95b728679f8fe18a3ca91d94ffb54fcd8 |
python-os-brick-1.15.5-5.el7ost.src.rpm | SHA-256: 2f37b8ba6258881b058a787a2fcdd3a2572626a0bf78b332a222c320733159b7 |
python-tripleoclient-7.3.10-4.el7ost.src.rpm | SHA-256: 83520bfb08dbaac7068b5e535d542a5b324aace42b2554f2597b5fc6426d794f |
x86_64 | |
instack-undercloud-7.4.12-3.el7ost.noarch.rpm | SHA-256: bab599652034627cb9e57b7ca2a1b1db5270fa29075ed5bd3a05222a700fe811 |
openstack-tripleo-common-7.6.13-6.el7ost.noarch.rpm | SHA-256: 6c560efc609bcafcf70e816efc2f7b3599f804a77dd48b074bbbf22317e6bfcb |
openstack-tripleo-common-container-base-7.6.13-6.el7ost.noarch.rpm | SHA-256: b7f4d2a00418c6f85ea251890c925ad8644b6e8459480e5aee235e438969a680 |
openstack-tripleo-common-containers-7.6.13-6.el7ost.noarch.rpm | SHA-256: 33dc0f178a9f6af9fefc14d1a9b5dc928b3b88b7d14736342d810cc92c0741b7 |
openstack-tripleo-common-devtools-7.6.13-6.el7ost.noarch.rpm | SHA-256: 6fb0594e011255cdd53fcf91d860f0d13af475f45711cbe05083b0c7011caf43 |
openstack-tripleo-heat-templates-7.0.12-17.el7ost.noarch.rpm | SHA-256: 73369c492846b4ba8c616cb876417f2949d1b31147c7c8df9c403971b9a47107 |
puppet-keystone-11.4.0-3.el7ost.noarch.rpm | SHA-256: 407abd09a2bd719c83029cd6dd8355e0c65fd7a11cc40aa645f938d0eabe1e5f |
puppet-neutron-11.5.0-3.el7ost.noarch.rpm | SHA-256: 3eaf8bd26c34167888219d1d013d458ed3a8e1e7fa4db6efda8a882a265be9e8 |
puppet-nova-11.5.0-6.el7ost.noarch.rpm | SHA-256: 7c986a9bfe1202bf6af06bb28391bc46e2b0b5e2952953dc85cab9a8d9069ae6 |
puppet-pacemaker-0.7.0-3.el7ost.noarch.rpm | SHA-256: 1d25b9126683777425fed799f63f92f603ca78b8878dd4c7906d672c31c2385d |
puppet-tripleo-7.4.12-10.el7ost.noarch.rpm | SHA-256: 674e4af9a5418b95aff4174623cd3f8d1bb8b41e66d49eef67d8682aaee7588b |
python-os-brick-1.15.5-5.el7ost.noarch.rpm | SHA-256: e301ad9acd50e6127155706450af3ec2d5927744c4aa6502c828f915463291f1 |
python-tripleoclient-7.3.10-4.el7ost.noarch.rpm | SHA-256: aab2bea8438577410c8a1709a6b28086746bd5e15e840da72bdf4386f6f3ae99 |
The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.