RHBA-2019:0939 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the instack-undercloud component:

• Previously, the undercloud upgrade failed if the overcloud was in a failed state. As a result, you could not deploy fixes by modifying the undercloud.

With this update, you can use the new undercloud upgrade option `--force`. This option causes the undercloud upgrade process to ignore the overcloud state. (BZ#1654079)

Changes to the openstack-tripleo-common component:

• Previously, `NSS_SDB_USE_CACHE=no` was not set before calling curl in the container health checks, and the `dentry` cache on controller nodes grew continuously. Controller nodes with a large amount of RAM experienced soft lockups when memory pressure forces a reclamation of the extraneous cache entries.

With this update, the `NSS_SDB_USE_CACHE=no` environment variable is set before executing a curl statement in the container health check. As a result, the `dentry` cache on controller nodes no longer grows continuously and does not cause soft lockups. (BZ#1646640)

• Previously, adding new services to roles data with user environment resource mappings failed when creating or updating plans.

With this update, the stack and template validation is bypassed when creating and updating plans, and adding new services no longer fails. (BZ#1677230)

Changes to the openstack-tripleo-heat-templates component:

• With this update, there is a new `TunedCustomProfile` parameter that can contain a string in INI format. This parameter describes a custom tuned profile that is based on heavy I/O load testing.

This update also includes a new environment file for users of hyperconverged Ceph deployments who are using the Ceph filestore storage backend. This environment file creates `/etc/tuned/ceph-filestore-osd-hci/tuned.conf` and sets the tuned profile to an active state. Do not use the new environment file with Ceph bluestore. (BZ#1628670)

• With this update, you can use the following new tags to control the configuration management Ansible playbooks and tasks:
• container_config
• container_config_tasks
• container_config_scripts
• container_startup_configs
• host_config
• step1
• step2
• step3
• step4
• step5 (BZ#1692872)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.6.

The Red Hat OpenStack Platform 13 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 13, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 13 ppc64le
• Red Hat OpenStack 13 x86_64
• Red Hat OpenStack Director Deployment Tools 13 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 13 ppc64le

Fixes

• BZ - 1562082 - Can't blacklist all controllers when scaling out computes as running discover_hosts on a nova api node is required
• BZ - 1609022 - unable to login galera in RHOSP13 with root account after changing the mysql root password
• BZ - 1628670 - [Ceph] Memory pressure leads to OpenStack-Ceph HCI cluster meltdown with filestore
• BZ - 1646640 - healthcheck_curl() causes massive dentry cache growth
• BZ - 1646955 - TripleO support for configuring Glance's cinder_store settings"
• BZ - 1648192 - Horizon should not allow to access icons/ directory and the directory should not be shown as index.
• BZ - 1650298 - IP, MTU, and route changes should not restart interfaces (OSP-13)
• BZ - 1651900 - Add a note to reboot the system if the system locale is not en_US.utf-8 or timezone is not America/NewYork.
• BZ - 1651953 - [RHOSP 13][neutron][dnsmasq] Containerized neutron's DHCP server doesn't write any logs
• BZ - 1652205 - Upgrade tasks for several pacemaker services aren't idempotent
• BZ - 1654506 - Overcloud deployment failed because the ping tests doesn't work due to network security policy
• BZ - 1664617 - Upgrade from 12 to 13 didn't subscribe overcloud to osp13 repos
• BZ - 1671127 - live-migration not working with pre-provisioned servers and config-download deploy method
• BZ - 1673027 - Remove THT validation that prevents configuring OVN with VLAN tenant network type
• BZ - 1677003 - setup-ipa-client.sh script does not check for IDM server availability before proceeding with the ipa-client-install command
• BZ - 1677230 - Error validating plan with custom service ERROR: The Resource Type (OS::TripleO::Services::Dummy) could not be found.
• BZ - 1679878 - mysqld.log is purged by logrotate, bit still opened by the mysqld process
• BZ - 1680280 - [OSP13] Pacemaker resource constraints cause API outage during maintenance
• BZ - 1683166 - [OSP13] Expose devices/enabled_vgpu_types config option
• BZ - 1683199 - [OVN] Deployment on top of IPv6 networks
• BZ - 1683544 - rocky services in queens ComputeOvsDpdkSriov role
• BZ - 1683568 - enable FLAT tenant networks for OVN driver from TripleO/Director
• BZ - 1686772 - [OSP13] SR-IOV OvS Offload using nic configs
• BZ - 1687795 - ceph_install workflow fails in debug mode on z5 because of too big publish message
• BZ - 1689278 - We need puppet-qdr for SAF-1.0 backport
• BZ - 1690225 - [RHOSP13][bmaas] ironic won't deploy with TLS Everywhere
• BZ - 1690621 - Overcloud heat-deployment error get_python: command not found
• BZ - 1690787 - [OSP13] Controller-replacement fails (controller-removal) because : /var/log/containers/nova/nova-manage.log is owned by root:root
• BZ - 1690890 - puppet-collectd update
• BZ - 1691289 - Outputting UTF8 characters during undercloud install/upgrade fails
• BZ - 1691805 - [OSP13] Nova Ephemeral over NFS forces v4 protocol instead of relying on version negotiation
• BZ - 1692872 - config-download backports from RHOSP 14 to RHOSP 13 (openstack-tripleo-heat-templates)
• BZ - 1693369 - Rebase puppet-manila to c7b2127
• BZ - 1693529 - Octavia host set to IP_ADDRESS in tls-everywhere-endpoints-dns.yaml
• BZ - 1693667 - [OSP13]Default ulimit for nova-compute container is too low when ceph is used
• BZ - 1694776 - Rebase instack-undercloud to 8.4.7
• BZ - 1694852 - Rebase puppet-glance to 6b3a6cfe51d6e697de0206a876c730ad2deeead6
• BZ - 1694855 - Rebase puppet-cinder to 9cb0c8d9fa3d60decd78cd336cc2d87a3d1d76ae
• BZ - 1695000 - fail to use satellite in organization mode
• BZ - 1695062 - Rebase puppet-aodh to 7353a8b
• BZ - 1695280 - Rebase openstack-tripleo-heat-templates to 17509007641b4fbbbcbade5b8d69ea0400d02842
• BZ - 1695308 - Rebase puppet-certmonger to a198870
• BZ - 1695311 - Rebase puppet-ironic to c5ee2c8ee62a4483e9bd03c1e61b6016e49db93c
• BZ - 1695335 - Rebase puppet-heat to a7ed7209c3c416ff9725ca7cde715ecc9b52504d
• BZ - 1695352 - Rebase openstack-tripleo-puppet-elements to e795ab6459761b8dbc387cd4939ab0b416fb21b9
• BZ - 1695817 - Rebase puppet-neutron to 12.4.1
• BZ - 1695845 - Rebase openstack-tripleo-validations to 8.4.5
• BZ - 1695859 - Rebase os-refresh-config to 8.3.1
• BZ - 1696166 - mysqld.log is purged by logrotate, bit still opened by the mysqld process
• BZ - 1696170 - mysqld.log is purged by logrotate, bit still opened by the mysqld process
• BZ - 1696182 - Rebase python-os-brick to 2.3.5
• BZ - 1696257 - Rebase puppet-tripleo to 5da8a10
• BZ - 1696328 - os-collect-config does not parse IPv6 address properly
• BZ - 1696375 - Rebase openstack-tripleo-common to 87cef2ea1db6efc420a853d5c3b573960e032747
• BZ - 1696501 - Rebase os-net-config to a0cb5c247a94733317367c52e41c9f7e7da5a614
• BZ - 1696768 - Rebase puppet-keystone to 292fa92
• BZ - 1696830 - Rebase openstack-tripleo-image-elements to 8.0.2
• BZ - 1696847 - Rebase python-tripleoclient to 81484cc95c80522d48da3ead7f190ba4add130c8
• BZ - 1698860 - Input amp_hw_arch is missing in Mistral octavia_post_deploy task
• BZ - 1699079 - Upgrade stops in middle because of missing message
• BZ - 1700015 - SAF-1.0 backport | Add puppet-qdr to puppet-tripleo so it will be installed in overcloud images by default

CVEs

(none)

References

(none)