RHBA-2019:1672 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 14.0 (Rocky) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the openstack-tripleo-heat-templates component:

• Prior to this update, there was no way to completely disable the Panko service using the Tripleo heat templates.

This is resolved with the newly added parameter, `CeilometerEnablePanko`. To disable the Panko service, set this parameter to False. (BZ#1679774)

• Previously, a condition could arise where where a volume whose instance is deleted shows 'attached' and 'in-use'. This would occur due to missing token information from an admin context that would result in a failed call to the cinder API. The authentication procedure has been improved so that Cinder calls succeed. (BZ#1691840)
• Previously, validation scripts in OSP14 would fail when checking connectivity to API endpoints using hostnames that resolve to an IPv6 address. This patch modifies the validation scripts to properly support environments with hostnames and IPv6 addresses. (BZ#1714655)
• This update fixes the service authentication URL in Octavia to use the Keystone v3 internal endpoint. (BZ#1716801)
• This patch introduces two new parameters:
• CinderCronDbPurgeMaxDelay: Configure maxdelay parameter in the Cinder database purge cron job.
• NovaCronDBArchiveMaxDelay: Configure maxdelay for the Nova database archive cron job. (BZ#1706774)

Changes to the puppet-nova component:

• This patch updates puppet-nova to allow the customization of libvirt NFS mount options through heat. This can be accomplished through the `nova::compute::libvirt::nvs_mount_options` parameter. (BZ#1715096)

Changes to the python-os-brick component:

• Previously, the glance-api container image was missing a python library used for managing fibre channel connections. As a result, attempts to create an image on storage would fail when using this medium.

This update provides the python library. The glance-api container now successfully accesses fibre channel storage. (BZ#1697818)

• Previously, the OpenStack os-brick library discovered fiber channel connections by scanning for lower case WWNs. This would lead to live-migration errors with storage back ends that report their WWN in upper case. Now, os-brick recognizes both upper and lower case WWNs. (BZ#1710373)
• Previously, an upgrade of director would continue with post-upgrade tasks, even if deployment Ansible tasks had failed. This was due to a missing return code check on deployment tasks, which has been added to correct this behavior. (BZ#1658135)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 14 runs on Red Hat Enterprise Linux 7.6.

The Red Hat OpenStack Platform 14 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 14, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 14 ppc64le
• Red Hat OpenStack 14 x86_64
• Red Hat OpenStack Director Deployment Tools 14 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 14 ppc64le

Fixes

• BZ - 1512579 - The UI rejects FQDNs as input to IPMI address if their depth is > 3
• BZ - 1626140 - Custom roles deployment with controller pcmk + controller systemd roles deployment fails caused by Keystone project/users not being created
• BZ - 1637030 - Cinder c-vol ignores nfs mount issue ends up creating volumes locally when it should fail.
• BZ - 1652523 - octavia_api container is logging continuous tracebacks
• BZ - 1658135 - [UPGRADES][14]Fail upgrade if deployment task fails
• BZ - 1661551 - OSP14: pacemaker reports failed status of remote pcmk resource upon fresh overcloud deploy
• BZ - 1662577 - python-pankoclient isn't installed on undercloud by default, making impossible to get list of events
• BZ - 1663286 - When deploying from the GUI the user must manually remove docker.yaml
• BZ - 1663903 - [UPGRADE] Upgrade error message is not informative "ValueError: No JSON object could be decoded"
• BZ - 1667894 - Upgrade prepare command hangs until timeout is reached
• BZ - 1668936 - [OSP14] [THT] THT deploys manila.conf with deprecated settings for neutron and nova
• BZ - 1672394 - [Hackfest] OSP14 - 'openstack complete' for bash_completion no longer works
• BZ - 1676501 - HAProxy falling back to tcp mode for Octavia listen
• BZ - 1684868 - when deploying with skip deploy-identifier tempest test test_server_basic_ops.TestServerBasicOps.test_server_basic_ops fails
• BZ - 1690177 - Undercloud deploy - fail if ctlplane-network not defined in undercloud.conf
• BZ - 1691840 - [OSP14][Deployment] Volumes remain in the attached state even when the instance is already deleted
• BZ - 1693898 - [RHOSP14][bmaas] ironic won't deploy with TLS Everywhere
• BZ - 1697507 - Forward logging to haproxy.log file task failing in dry-run mode
• BZ - 1697818 - [OSP14] VolumeBackendAPIException: Bad or unexpected response from the storage volume backend API: Host controller-0 doesn't have FC initiators.
• BZ - 1698032 - add the ovs_extra parameter to ovs vlan interfaces (OSP-14)
• BZ - 1699566 - neutron_api container won't start when deploying with ovn driver
• BZ - 1700252 - [OSP14]Default ulimit for nova-compute container is too low when ceph is used
• BZ - 1700760 - [OSP14] nova_metadata container is in unhealthy state on undercloud and overcloud nodes
• BZ - 1700876 - [OSP14] deployment fails running nova_cellv2_discover_hosts process with a duplicate key
• BZ - 1701020 - QDR needs SSL to correctly communicate with SAF server side containers [openstack-14]
• BZ - 1701284 - [OSP14] Overcloud with Nova NFS backend deployment failure due to InvalidSchemaError
• BZ - 1701414 - [OSP14]Allow NovaRbdPoolName to be role specific
• BZ - 1701935 - Provide option to disable EMC in puppet-vswitch
• BZ - 1701940 - Provide option to disable EMC in tripleo-heat-templates
• BZ - 1703039 - OSP13 --> OSP14 after undercloud upgrade the neutron-openvswitch-agent does not work
• BZ - 1704592 - Restrict SSH access access to specific remote subnets
• BZ - 1704594 - [puppet-tripleo] Restrict SSH access access to specific remote subnets
• BZ - 1704640 - [OSP14] Allow NovaNfs parameters to be role specific
• BZ - 1706714 - availability_zone class is not included in scheduler.pp
• BZ - 1706774 - [OSP14] cinder cron job definition should have randomized sleep command like puppet-heat for decreasing DB spike or lock contention.
• BZ - 1707691 - neutron-haproxy container should have access to /dev/log to record haproxy log
• BZ - 1707808 - [OSP14][Deployment] Disable NUMA live migration by default
• BZ - 1707816 - [OSP14] Controller-replacement fails (controller-removal) because : /var/log/containers/nova/nova-manage.log is owned by root:root
• BZ - 1708170 - A deprecated parameter, nova_metadata_ip is configured in RHOSP14
• BZ - 1708755 - ctlplane-subnet always created
• BZ - 1709261 - puppet-neutron defines [AGENT] and [agent] sections in l3_agent.ini.
• BZ - 1709670 - OVN- We have to remove the option of setting OVNTunnelEncapType: vlan
• BZ - 1709846 - OVN upgrade from osp13 to osp14 failed on Overcloud upgrade preparation step
• BZ - 1710373 - [OSP14] live-migration fails with NoFibreChannelVolumeDeviceFound due to FC case sensitive scanning
• BZ - 1710850 - [OSP14] Fix NovaNfs role parameter precedence in conditions
• BZ - 1711947 - Rebase os-net-config to 9ed8760
• BZ - 1711980 - Rebase puppet-cinder to c5967d5
• BZ - 1711994 - Rebase openstack-mistral to 9e12826
• BZ - 1712036 - Rebase puppet-glance to 45584f0
• BZ - 1712037 - Rebase puppet-horizon to a0f8f78
• BZ - 1712038 - Rebase puppet-manila to f969ee6
• BZ - 1712039 - Rebase puppet-mistral to 324f29a
• BZ - 1712040 - Rebase puppet-barbican to c8465ca
• BZ - 1712041 - Rebase puppet-keystone to 8ccd27d
• BZ - 1712046 - Rebase puppet-n1k-vsm to 92401b8
• BZ - 1712380 - Rebase puppet-gnocchi to 9c16b41
• BZ - 1712381 - Rebase puppet-oslo to a4a4f52
• BZ - 1712383 - Rebase puppet-sahara to 229e3c0
• BZ - 1712384 - Rebase puppet-swift to f7a7cf7
• BZ - 1712385 - Rebase puppet-tempest to c6fd255
• BZ - 1712386 - Rebase puppet-trove to 7bd85bc
• BZ - 1712387 - Rebase puppet-zaqar to cf6ae7c
• BZ - 1712392 - Rebase puppet-ec2api to 782a32d
• BZ - 1712393 - Rebase puppet-designate to 714de4b
• BZ - 1712396 - Rebase puppet-openstack_extras to d650bd8
• BZ - 1712399 - Rebase os-refresh-config to 8b84e52
• BZ - 1712400 - Rebase puppet-aodh to 420bdb1
• BZ - 1712402 - Rebase puppet-ceilometer to d294c49
• BZ - 1712403 - Rebase puppet-panko to ffd3163
• BZ - 1712417 - Rebase diskimage-builder to 4665e79
• BZ - 1712439 - Rebase python-os-brick to 2.5.6
• BZ - 1712461 - Rebase puppet-vswitch to 4f5f231
• BZ - 1712577 - Rebase puppet-octavia to 29482dd
• BZ - 1713015 - Rebase puppet-openstacklib to 05a84dd
• BZ - 1713017 - Rebase puppet-ironic to 5847f5b
• BZ - 1713364 - [OSP14 Backport] Cannot update a deployed overcloud that was done using the UI
• BZ - 1713692 - Rebase python-tripleoclient to ba03c5e
• BZ - 1713706 - Rebase puppet-nova to d968cc2
• BZ - 1713708 - Rebase puppet-neutron to 594ebd3
• BZ - 1713711 - Rebase puppet-heat to e887081
• BZ - 1713713 - Rebase instack-undercloud to 11d9fef
• BZ - 1713754 - Add ipa client make home directory option
• BZ - 1713756 - [RFE] (THT) Support --no-ntp and --domain options for ipa-client-install
• BZ - 1714251 - Rebase openstack-tripleo-ui to f3ba58f
• BZ - 1714252 - Rebase puppet-ceph to 6d67b24
• BZ - 1714282 - Rebase puppet-midonet to a8cec1d
• BZ - 1714605 - Rebase openstack-tripleo-heat-templates to import
• BZ - 1714614 - Rebase openstack-tripleo-puppet-elements to 1ab58f2
• BZ - 1714616 - Rebase openstack-tripleo-validations to 361061f
• BZ - 1714655 - run-os-net-config.sh does not parse hostname that resolves to IPv6 address properly (OSP-14)
• BZ - 1714676 - Rebase openstack-tripleo-common to cd24177
• BZ - 1714682 - Rebase puppet-tripleo to 89735a1
• BZ - 1714843 - OSP14: pacemaker reports failed status of remote pcmk resource upon fresh overcloud deploy
• BZ - 1715096 - [OSP14] Add ability to override libvirt NFS mount options for NFS backed Cinder volumes
• BZ - 1715167 - TLS everywhere failing with (RPC failed at server. change collided with another change)
• BZ - 1715536 - [rhsm] Upgrade fails when using rhsm if the overcloud nodes are alread registered in satellite
• BZ - 1716801 - Creating TERMINATED_HTTPS Octavia loadbalancer listener fails with 'Could not retrieve certificate' after z5 update
• BZ - 1717144 - Multiple containers reporting "unhealthy" after getting deployed
• BZ - 1717169 - [upgrades][13->14] Overcloud upgrade failed on underfined variable error 'python_interpreter'
• BZ - 1718284 - Failed obtaining certificate on director / freeipa installation launchpad#1816465
• BZ - 1719050 - Deploying 14z3 no share tab in the UI for openstack
• BZ - 1719667 - [OSP14] minor update fails because : /var/log/containers/nova/nova-manage.log is owned by root:root on compute nodes
• BZ - 1719898 - Deploying OSP-14 with TLS and composable networks fails due to hard-coded NovaLibvirtNetwork in nova-vnc-proxy.yaml
• BZ - 1723975 - [osp14][DCN][Spine & Leaf] ssh timeout into compute overcloud nodes post overcloud.AllNodesDeploySteps

CVEs

(none)

References

(none)