RHBA-2019:3115 - Bug Fix Advisory

Topic

Updated OpenStack Networking packages that resolve various issues are now
available for Red Hat OpenStack Platform 10.0 (Newton) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware. This advisory includes
packages for:

• OpenStack Networking service

OpenStack Networking (neutron) is a virtual network service for OpenStack.
Just as OpenStack Compute (nova) provides an API to dynamically request and
configure virtual servers, OpenStack Networking provides an API to
dynamically request and configure virtual networks. These networks connect
'interfaces' from other OpenStack services (e.g. virtual NICs from Compute
VMs). The OpenStack Networking API supports extensions to provide advanced
network capabilities (e.g. QoS, ACLs, network monitoring, etc.)

Changes to the openstack-neutron component:

The Neutron SR-IOV agent sets two link states for the virtual functions (VFs):

• "auto": The physical function (PF) link state ("up" or "down") is replicated when the VF is enabled.
• "disable": The VF is disabled and does not transmit.

The default VF link state is now "auto". Therefore when the PF is "down" the VF will not transmit or receive, even with other VFs in the same embedded switch (NIC).

Note: This is not standard behavior. The standard behavior depends on the NIC vendor implementation. Therefore you must check the driver manual for the behavior of a VF in "auto" state when the PF is "down". (BZ#1735676)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 10 runs on Red Hat Enterprise Linux 7.6.

The Red Hat OpenStack Platform 10 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 10, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/10/paged/release-notes

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack 10 x86_64

Fixes

• BZ - 1680011 - neutron with BigSwitch agent. iptables rules are not being cleaned up when instances are deleted
• BZ - 1707939 - [BACKPORT][OSP10] - OVS/ml2 - ipv6 forwarding is broken in HA neutron routers due to incorrect ipv6 kernel forwarding parameters
• BZ - 1712271 - Policies create_port:fixed_ips:* ignored
• BZ - 1715901 - Problems with non-ASCII characters in LBAAS deployments - ERROR neutron_lbaas.agent.agent_manager UnicodeEncodeError: 'ascii' codec can't encode character u'\xfa' in position 25: ordinal not in range(128)
• BZ - 1723116 - Windows instances recieve DHCPNACK causing network issues.
• BZ - 1724543 - Memory leak in neutron-server due to neutron-lbaas haproxy driver
• BZ - 1727955 - DVR OSP-10 CI job failing due to SSH failures
• BZ - 1735676 - [Neutron] - VF link-state needs to be set to Auto

CVEs

(none)

References

(none)