RHBA-2019:3745 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 14.0 (Rocky) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the diskimage-builder component:

• Previously, the whole disk image building process would fail due to the grub2-efi-modules being installed with the wrong architecture. This patch corrects the process, ensuring the grub2-efi-x64 modules are used for the x86_64 architecture, allowing the disk image building process to succeed. (BZ#1754514)

Changes to the openstack-tripleo-heat-templates component:

• This patch corrects a collision that occurs between the iscsid service and the iscsid container, causing the iscsid container to continuously restart. Now, the iscsid service on the host is disabled when deploying the iscsid container. (BZ#1723486)

Changes to the python-os-brick component:

• Previously, the OpenStack Cinder brick library would only check for a single WWNN (World Wide Node Name) if an `initiator_target_map` was not received from the backend. This misses some storage arrays, as some array architectures return the `initiator_target_map` though some ports are not connected to specific HBAs. This patch changes that behavior so that `initiator_target_map` is always checked. (BZ#1721099)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 14 runs on Red Hat Enterprise Linux 7.7.

The Red Hat OpenStack Platform 14 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 14, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 14 ppc64le
• Red Hat OpenStack 14 x86_64
• Red Hat OpenStack Director Deployment Tools 14 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 14 ppc64le

Fixes

• BZ - 1524899 - The undercloud services validator hangs if the service openstack-heat-engine is down
• BZ - 1703045 - Move Octavia deployment away from keystone public endpoint
• BZ - 1714590 - [OSP14] Use of skip-deploy-identifier flag cause compute scale-out failure
• BZ - 1717484 - Deploying with TLS fails with error: No function "concat" matches supplied arguments" (OSP-14)
• BZ - 1719758 - Backport broke deprecated enable-internal-tls environment file
• BZ - 1720159 - Pre-upgrade validation tasks for containerized services make the upgrade fail
• BZ - 1721099 - [RHOSP14][os-brick][Backport] FC scan always scanning all HBAs when receiving initiator_target_map'.
• BZ - 1721557 - mysql process consuming 400% CPU
• BZ - 1722271 - [OSP14] Fix handling of SR-IOV PF routes
• BZ - 1722946 - [OSP14][Deployment][TLS] Deployment fails when enabling TLS when with 3 controllers in 3 profiles
• BZ - 1723271 - [OSP14] Python exception when passing vfid 0 to sriov_vf NIC
• BZ - 1723486 - [RHOSP 14] iscsi.service on host should be disabled to avoid iscsid is started at host when some stale shutdown happens
• BZ - 1723665 - Overcloud deployment fails with container permissions error (ppc64le)
• BZ - 1724674 - [OSP14] sshd running inside nova_migration_target overrides /var/run/sshd.pid on host with pid 1
• BZ - 1726321 - Swift container fails when the network file doesn't exist in openstack overcloud deploy command
• BZ - 1728382 - [osp14] keepalived configuration on the undercloud fails when using facter 3
• BZ - 1729552 - [OSP14] set default ulimit to nova_libvirt
• BZ - 1730225 - Unnecessary libvirt is enabled on controller nodes
• BZ - 1731079 - Tripleo deploys semi-functional overcloud with internal TLS if KernelDisableIPv6 is enabled
• BZ - 1734733 - [OSP14] libvirt-guest systemd service won't get set on compute when NovaResumeGuestsStateOnHostBoot: True
• BZ - 1736486 - Redis THT templates contain malformed metadata_settings
• BZ - 1736832 - RFE: [OSP14] Enable rabbitmq management plugin
• BZ - 1737623 - Keystone process is launched with multiple '-DFOREGROUND'.
• BZ - 1738261 - [OSP14] Allow NovaEnableRbdBackend to be role specific
• BZ - 1738760 - [Backport] Backport of upstream patch for ovs handler and revalidator
• BZ - 1738765 - [Backport] Backport of upstream patch for ovs handler and revalidator
• BZ - 1739113 - Barbican missing key-manager:service-admin role
• BZ - 1745005 - [OSP-14] Configure log filter to capture interactions between libvirt and QEMU
• BZ - 1745012 - [OSP14] Libvirt allows weak encryption protocol (SSLv3 CBC)
• BZ - 1745172 - Tripleo should not install openldap-clients on overcloud nodes
• BZ - 1747199 - [osp14] ssh private key appears in the log after ssh-keygen.
• BZ - 1749319 - [Backport] Backport of upstream patch - Change datatype of revalidator,handler threads
• BZ - 1750337 - [OSP14] missing share block on uplink interface after reboot (workaround)
• BZ - 1750446 - [osp14] Add support for pulling container images from registries that require authentication
• BZ - 1750612 - [BACKPORT] backport of upstream patch to Replace coremask with cpu_list in vrouter dpdk schema
• BZ - 1751817 - [osp14] paunch apply fails if docker volume is used instead of filesystem folder
• BZ - 1753879 - [OSP14] Unnecessary libvirt is enabled on controller nodes (add proper permissions to script)
• BZ - 1754514 - (OSP-14) During the whole disk image process, and when using the portal's repositories, grub2-efi-modules is installed with wrong arch
• BZ - 1761367 - Minor update fails at step5 on controllers during gnocchi_db_sync
• BZ - 1763880 - Rebase puppet-pacemaker to 447cef0ad8891e89495fef7a9be5e2152b07edfa

CVEs

(none)

References

(none)