RHBA-2019:0878 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 14.0 (Rocky) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

For more information about the bug fixes and enhancements included with this update, see the "Technical Notes" section of the Release Notes
linked in the References section.
Changes to the openstack-tripleo-common component:

• Director and openshift-ansible have different expectations regarding image tags. For example, when importing the remote container images locally, director converts the generic tag into one that uniquely identifies the image based on the `version` and `release` labels from the image metadata. Openshift-ansible, however, relies on a unique `openshift_image_tag` variable for all the openshift images tags making it impossible to specify tags of images individually. Deployment of OCP via director fails when the floating v3.11 tag in the remote container image registry points to images with non-consistent `release` or `version` labels in their metadata.

From the undercloud, import the odd images prior to deploying OpenShift and set the tag to be consistent across all openshift images:

skopeo --tls-verify=false copy docker://registry.access.redhat.com/openshift3/prometheus:v3.11.51-1 docker://192.168.24.1:8787/openshift3/prometheus:v3.11.51-2

Deployment of OpenShift from director completes without missing image. (BZ#1659183)

• Prior to this update, controllers with a large amount of RAM could experience soft lockups. This would occur due to memory pressure as the dentry cache on controller nodes would grow continually. Now, prior to doing a curl statement in the container health check, the `NSS_SDB_USE_CACHE` environment variable is set to 'no', which prevents cache growth. (BZ#1685732)

Changes to the openstack-tripleo-heat-templates component:

• Scaling out with an additional OpenShift master node of a director deployed OpenShift environment fails with a message similar to: "The field 'vars' has an invalid value, which includes an undefined variable. The error was: 'openshift_master_etcd_urls' is undefined…” (BZ#1653348)
• This update fixes an issue that prevented users from successfully re-running a failed OSP13-to-OSP14 upgrade of OpenStack Platform director.

Some upgrade failures resulted in a state where services were not yet deployed with docker, which prevented a successful re-run of the upgrade.

Now a check is performed to verify that the services are deployed under docker control, enabling a successful re-run. (BZ#1647956)

• This update adds an 'any_errors_fatal' setting to stop an upgrade after an upgrade task failure on any overcloud node.

Prior to this update, after an upgrade failure on one overcloud node, the upgrade would continue on other overcloud nodes.

Now, if an upgrade task fails on any overcloud node, the upgrade is stopped and does not progress onto next tasks on other overcloud nodes. (BZ#1652096)

• Glance image conversion is not enabled by default on a new install of Red Hat OpenStack Platform 14. To use this feature, edit the glance-image-import.conf file.

In the image_import_opts section, insert the following line:
image_import_plugins = ['image_conversion'] (BZ#1654413)

• This feature adds the capability to configure the Cinder Dell EMC StorageCenter driver to use a multipath for volume-to-image and image-to-volume transfers. The feature includes a new parameter `CinderDellScMultipathXfer` with a default value of `True`. Enabling multipath transfers can reduce the total time of data transfers between volumes and images. (BZ#1658192)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 14 runs on Red Hat Enterprise Linux 7.6.

The Red Hat OpenStack Platform 14 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 14, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 14 ppc64le
• Red Hat OpenStack 14 x86_64
• Red Hat OpenStack Director Deployment Tools 14 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 14 ppc64le

Fixes

• BZ - 1601924 - [OVN] Deployment on top of IPv6 networks
• BZ - 1647451 - [OSP14] Pacemaker resource constraints cause API outage during maintenance
• BZ - 1647956 - [UPGRADES][14] Need a way to disable validation during undercloud ugrade re-run
• BZ - 1650296 - IP, MTU, and route changes should not restart interfaces
• BZ - 1652096 - If an upgrade task fails on one node, stop the upgrade on other nodes too
• BZ - 1652105 - [OSP14] cannot update overcloud using custom NovaPassword tripleo password
• BZ - 1653348 - Director deployed OCP 3.11: scaling out a master node fails with "The field 'vars' has an invalid value, which includes an undefined variable. The error was: 'openshift_master_etcd_urls' is undefined
• BZ - 1654413 - Glance image conversion is not enabled by default
• BZ - 1655224 - capabilities-map points to a non-existing manila yaml file
• BZ - 1656546 - Docker restart in deploy steps causing malfunction in pacemaker services
• BZ - 1658192 - [OSP14] Dell SC: Tripleo support for automation of multipath configuration
• BZ - 1658258 - [rhsm] Upgrade fails when using rhsm if the overcloud nodes are alread registered in satellite
• BZ - 1659183 - Director deployed OCP 3.11: prometheus-k8s-0 pod fails to start due to nonexistent image - Failed to pull image "192.168.24.1:8787/openshift3/prometheus:v3.11.51-2": rpc error: code = Unknown desc = Error: image openshift3/prometheus:v3.11.51-2 not found
• BZ - 1660870 - [OSP14][Deployment] Disable NUMA live migration by default
• BZ - 1665158 - [octavia][minor update]- During controller role update an fatal error is seen.
• BZ - 1672450 - Rebase openstack-tripleo-common to import
• BZ - 1673029 - Remove THT validation that prevents configuring OVN with VLAN tenant network type
• BZ - 1674070 - [OSP14] unable to login galera in with root account after changing the mysql root password
• BZ - 1674078 - [Hackfest]OSP director unable to deploy OCP without CNS on multinode setup
• BZ - 1677001 - setup-ipa-client.sh script does not check for IDM server availability before proceeding with the ipa-client-install command
• BZ - 1678431 - OSP14 - UPDATE_FAILED Error in ControllerServiceChain output role_data: Collection length exceeds 1000 elements
• BZ - 1679330 - Director deployed OCP 3.11 deployment fails during TASK [openshift_storage_glusterfs : Check for specified container versions
• BZ - 1684619 - [OSP14] [puppet-manila] THT deploys manila.conf with deprecated settings for neutron and nova
• BZ - 1684864 - ssh_known_hosts tasks fail in check mode
• BZ - 1685435 - Amphora image requires explicit --property hw_architecture='x86_64 in multi-arch clouds
• BZ - 1685506 - [OSP14] Controller-replacement fails (controller-removal) because : /var/log/containers/nova/nova-manage.log is owned by root:root
• BZ - 1685732 - healthcheck_curl() causes massive dentry cache growth
• BZ - 1686265 - Backport request for case insensitive validation of iscsi session
• BZ - 1686770 - [OSP14] SR-IOV OvS Offload using nic configs
• BZ - 1688349 - [OSP14] Add a note to reboot the system if the system locale is not en_US.utf-8 or timezone is not America/NewYork.
• BZ - 1690055 - Rebase diskimage-builder to bdfc13a
• BZ - 1690857 - Rebase puppet-glance to 4e2d869
• BZ - 1690858 - Rebase puppet-manila to 6881e9a
• BZ - 1690863 - Rebase openstack-tripleo-ui to 9bddbee
• BZ - 1690972 - Rebase python-tripleoclient to ab72340
• BZ - 1690997 - Rebase puppet-barbican to 40e80e2
• BZ - 1691001 - Rebase puppet-openstacklib to 9a7607d
• BZ - 1691477 - Rebase openstack-mistral to fa0c4f1
• BZ - 1691803 - [OSP14] Nova Ephemeral over NFS forces v4 protocol instead of relying on version negotiation
• BZ - 1692600 - Rebase puppet-neutron to 2246751
• BZ - 1692820 - Rebase os-net-config to 21dfd95
• BZ - 1692822 - Rebase puppet-keystone to 665fd80
• BZ - 1692833 - Rebase puppet-certmonger to a198870
• BZ - 1693307 - [osp14] TripleO support for configuring Glance's cinder_store settings"
• BZ - 1693467 - Rebase openstack-tripleo-common to a180eba
• BZ - 1693479 - Rebase python-os-brick to 2.5.5
• BZ - 1693481 - Rebase openstack-tripleo-puppet-elements to 9.0.1
• BZ - 1693563 - [OSP14] Can't blacklist all controllers when scaling out computes as running discover_hosts on a nova api node is required
• BZ - 1693906 - Rebase puppet-ceph to b51e5cb
• BZ - 1694713 - Rebase openstack-tripleo-heat-templates to d0a6cb1
• BZ - 1695138 - mysqld.log is purged by logrotate, bit still opened by the mysqld process
• BZ - 1696158 - mysqld.log is purged by logrotate, bit still opened by the mysqld process
• BZ - 1696161 - mysqld.log is purged by logrotate, bit still opened by the mysqld process
• BZ - 1696530 - enable FLAT tenant networks for OVN driver from TripleO/Director
• BZ - 1697380 - Error, no source paths were found ... /var/lib/mistral/overcloud/ceph-ansible/fetch_dir/*
• BZ - 1699612 - Input amp_hw_arch is missing in Mistral octavia_post_deploy task
• BZ - 1699976 - [UPDATE] rolling_update.yml fails in ceph-update-run.sh
• BZ - 1702918 - zaqar websocket SSL cert name is hardcoded

CVEs

(none)

References

• https://access.redhat.com/documentation/en/red-hat-openstack-platform/