RHBA-2019:0448 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

For more information about the bug fixes and enhancements included with this update, see the "Technical Notes" section of the Release Notes
linked in the References section.

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.6.

The Red Hat OpenStack Platform 13 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 13, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 13 ppc64le
• Red Hat OpenStack 13 x86_64
• Red Hat OpenStack Director Deployment Tools 13 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 13 ppc64le

Fixes

• BZ - 1513956 - [RFE] [TestOnly] Please, verify the Bare Metal service with multi-tenancy with the Nuage ML2 plug-In
• BZ - 1520323 - DPDK: Add a validation to fail the deployment when 0 PMD cores on a NUMA node
• BZ - 1565288 - Customize Container Service Port Needs to Update Health Checks and Container
• BZ - 1571592 - Orchestration tab not present in horizon
• BZ - 1577976 - Disabling heartbeat interface for failover, LB goes into error state, New backup amphora is not created
• BZ - 1594019 - HorizonSecureCookies is missing from the new environments/ssl/enable-tls.yaml
• BZ - 1597666 - [Update] Support ODL L2 minor update with OSP
• BZ - 1598146 - Allow option for amphora image to be automatically uploaded in raw format
• BZ - 1600449 - OSP13 deployment failed at step5
• BZ - 1600865 - haproxy log should not be written in /var/log/messages
• BZ - 1601673 - overcloud deploy does not correctly report YAML syntax errors to the operator
• BZ - 1602891 - Octavia and Barbican fail to deploy along with TLS Everywhere
• BZ - 1607536 - Rebase puppet-neutron to 3aa310
• BZ - 1609333 - [Logs] karaf.log is missing after log rotation
• BZ - 1611960 - [Deployment] [Scale] Stack Update fails on scaling out in a Clustered ODL setup
• BZ - 1613576 - octavia_api_tls_proxy does not work due to missing code and dependencies
• BZ - 1613601 - THT should have an option to disable Panko completely.
• BZ - 1615763 - OVN tripleo deployment should configure neutron config rpc_workers to a low number (1 is enough, and higher when using SRIOV)
• BZ - 1622182 - [OSP 13] overcloud deployment breaks at ControllerDeployment_Step3 when octavia and tls everywhere are deployed together
• BZ - 1622655 - OVS based security groups parameter not populated correctly
• BZ - 1623123 - [Deployment] Stack deployment fails when it is redeployed without deleting the previous deployment
• BZ - 1624335 - In Horizon, SSL related options are not configured properly
• BZ - 1624441 - OSP13: pacemaker reports failed status of remote pcmk resource upon fresh overcloud deploy
• BZ - 1632745 - OVN metadata agent fails when using TLS Everywhere
• BZ - 1634390 - [RFE] Add new role "ComputeOvsDpdkSriov"
• BZ - 1636496 - Add support for configuring Octavia LB timeouts in OSP 13
• BZ - 1639203 - pam_systemd generates 'Failed to connect to system bus: No such file or directory' in containers which run su
• BZ - 1639964 - Rebase puppet-neutron to ed05e01
• BZ - 1643423 - openstack stack output show overcloud HostsEntry return wrong entries
• BZ - 1643992 - Generating fencing from capitalized MAC returns nothing
• BZ - 1646907 - [RFE] [BACKPORT] diskimage-builder support whole disk images with UEFI whole disk image support for overcloud nodes
• BZ - 1648348 - [Deployment] Logs are full of NULL (0 binary)
• BZ - 1650576 - [Logs] Reduce OpenDaylight's JVM GC pressure and lock contention by ditching the PaxOsgi log appender
• BZ - 1651554 - [OSP13] placement API fail to start if nova-manage api_db sync not finished
• BZ - 1651697 - haproxy-bundle needs to be updated with the certificates volume when adding encrypted endpoints on existing overcloud
• BZ - 1652209 - FFWD: db sync can fail if neutron cisco plugin is enabled
• BZ - 1653970 - old fernet tokens are not cleaned up on the controller
• BZ - 1656065 - Non intuitive provisioning predictable IPs procedure (OSP-13)
• BZ - 1656069 - [Deployment] RFE [OSP13 backport]: Dedicate pCPU for emulator thread placement per host rather than per guest.
• BZ - 1656540 - Scale-out fails because kolla can't copy/delete /etc/hosts
• BZ - 1656617 - Updating openstack-nova-common on the compute will break nova permissions in the containers
• BZ - 1656690 - [OSP13] neutron/auth_url has admin endpoint URL in nova.conf
• BZ - 1656947 - [OSP13] nova_vnc_proxy container reports unhealthy state on IPv6 environments
• BZ - 1657571 - Puppet runs during scale out when --skip-deploy-identifier is used
• BZ - 1658195 - Backport NIC Partitioning RFE to OSP13
• BZ - 1658930 - firewall rules for horizon port 80 and 443 is not open on Haproxy node
• BZ - 1659077 - Octavia health manager doesn't receive heartbeat message from amp on composable role
• BZ - 1659596 - [CI] TLS everywhere deployments fail with: Invalid input for field/attribute compact_services
• BZ - 1663495 - [osp13] whole disk image failed overcloud deployment when size set to 23G. This will need to increase. 23G -> 40 being suggested
• BZ - 1663873 - Command 'instack-install-undercloud' returned non-zero exit status 1
• BZ - 1664005 - openstack overcloud node clean reports all nodes were cleaned, but one node is stuck in clean_wait (OSP-13)
• BZ - 1664429 - Define creator role by default when deploying with Barbican
• BZ - 1665156 - [Backport][OSP13] Configure switchdev while there is no vfs bounded
• BZ - 1666675 - [OpenStack] process-templates.py doesnt generate the files in the output directory
• BZ - 1667450 - /etc/pki/ca-trust/source/anchors/cm-local-ca.pem has wrong permissions after undercloud installation
• BZ - 1668157 - Backport the removal of mox dependency to OSP13
• BZ - 1668500 - RHOSP Director and NSX: integration of upstream patches
• BZ - 1668774 - OSP Director - handle lowercase uuid change for dmidecode >= 3.1 for ceph-ansible per-node customizations
• BZ - 1669597 - Rebase openstack-mistral to b6f030f
• BZ - 1669603 - Rebase instack-undercloud to 900b393
• BZ - 1669622 - Rebase openstack-tripleo-ui to 66df708
• BZ - 1669623 - Rebase openstack-tripleo-validations to 6a33ed7
• BZ - 1669625 - Rebase os-refresh-config to 4703b54
• BZ - 1669637 - Rebase puppet-neutron to c96a6b3
• BZ - 1669638 - Rebase puppet-ovn to f9153e4
• BZ - 1669671 - Rebase puppet-swift to 967e296
• BZ - 1670207 - Rebase openstack-tripleo-common to 6fcfd9e
• BZ - 1670208 - Rebase openstack-tripleo-puppet-elements to d416967
• BZ - 1670240 - Rebase os-net-config to 346749d
• BZ - 1670462 - Rebase puppet-cinder to d362a1f
• BZ - 1670532 - Rebase python-os-brick to 2.3.4
• BZ - 1672530 - [OSP13] stack update failures caused by permission changes under '/var/lib/nova/mnt' on the compute nodes
• BZ - 1673713 - Rebase puppet-tripleo to 63862fb
• BZ - 1674933 - Rebase puppet-octavia to 80ccf28
• BZ - 1675069 - Rebase python-tripleoclient to 5fd323c
• BZ - 1676310 - Rebase openstack-tripleo-heat-templates to 9b42108
• BZ - 1676563 - Rebase puppet-nova to b15b9d3
• BZ - 1676693 - Rebase puppet-opendaylight to latest available
• BZ - 1677166 - [FFU] Package openstack-tripleo-validations requirement to perform FFU
• BZ - 1677515 - Including 'OS::TripleO::Compute::PreNetworkConfig: /home/stack/templates/config_then_reboot.yaml ' makes overcloud deployment faild.
• BZ - 1678235 - FFU: error while evaluating conditional (tripleo_role_name == \\'Compute\\' and ansible_hostname == Compute[0]):
• BZ - 1682911 - Deployment with composable roles and networks fails with: "2019-02-20 23:46:15Z [overcloud]: CREATE_FAILED The Referenced Attribute (Controller tenant1_ip_address) is incorrect." (OSP-13)
• BZ - 1684663 - ERROR: os-net-config configuration failed "UnboundLocalError: local variable 'interface' referenced before assignment"

CVEs

• CVE-2018-16849

References

• https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/