RHBA-2019:3794 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 13.0 (Queens) for RHEL 7.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

Changes to the openstack-tripleo-common component:

• With this update, the overcloud role name can now start with a number, for example, `10Controller` or `99Compute`. (BZ#1746112)
• This enhancement upgrades facter to version 3, which improves performance when you deploy and run updates on systems with a large number of network interfaces. This version of facter supports fact caching and generates the fact list significantly faster.

NOTE: You must run facter version 3 in the same containers that you deploy on the host system when you use the version of openstack-tripleo-heat-templates that implements facter version 3. (BZ#1731210)

• With this update, rabbitmq-management interface is now enabled on localhost by default on the overcloud so that it is simpler to monitor and query the state of rabbitmq via its management API. (BZ#1732220)

Changes to the puppet-tripleo component:

• With this update, `openstack-tripleo-common` has been enhanced so that you can run the `openstack overcloud generate fencing` command to create proper fencing configuration for ironic nodes that use the `staging-ovirt` power driver, similar to virtual machines that you deploy on RHV.

`puppet-tripleo` has also been enhanced and now properly configures pacemaker `fence-rhevm` stonith agents for virtual machines on RHV. (BZ#1733260)

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 13 runs on Red Hat Enterprise Linux 7.6.

The Red Hat OpenStack Platform 13 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 13, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/13/html/release_notes/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 13 ppc64le
• Red Hat OpenStack 13 x86_64
• Red Hat OpenStack Director Deployment Tools 13 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 13 ppc64le

Fixes

• BZ - 1624464 - openstack overcloud status run on overcloud not deployed output needs cleanup
• BZ - 1666148 - [RFE] Add an option to configure fence_kdump for pacemaker cluster running on controller nodes.
• BZ - 1687347 - [RFE] Make controllers fencing configurable for RHEV provider
• BZ - 1712278 - [OSP13 Backport] Message collection size is too large for Zaqar
• BZ - 1717114 - When switching from NeutronTunnelTypes: 'vxlan' to NeutronTunnelTypes: '' in a cloud that was already deployed, puppet does not unset `agent/tunnel_types`, but it does unset `ovs_local_ip`
• BZ - 1731210 - [OSP13] large number of interfaces cause slow puppet executions due to fact generation
• BZ - 1732220 - RFE: [OSP13] Enable rabbitmq management plugin
• BZ - 1733260 - [RHOSP13]Request to backport patches to support fencing configuration with fence_rhevm agent using THT
• BZ - 1734362 - fence_ipmilan does not put the lanplus=true parameters in the pcs configuration.
• BZ - 1737624 - Keystone process is launched with multiple '-DFOREGROUND'.
• BZ - 1738753 - [Backport] backport of upstream patch for ovs handler and revalidator
• BZ - 1738922 - High CPU consumption by heat even an any stack update at large stack size
• BZ - 1739114 - Barbican missing key-manager:service-admin role
• BZ - 1740115 - [OSP13] ovn-controller race
• BZ - 1740524 - OVN: bump the ovn-remote-probe-interval for ovn-controller
• BZ - 1744205 - Octavia housekeeping puppet config typo in spare_amphorae_pool_size
• BZ - 1744216 - "openstack baremetal node trait list <<node_name>>" returns "Requested API version 1.34 is not supported by the server, client, or the requested operation is not supported by the requested version.Supported version range is 1.1 to 1.37"
• BZ - 1745857 - Minor update fails at step5 on controllers during gnocchi_db_sync
• BZ - 1746112 - Config-download based deployment fails if a role name starts with a number
• BZ - 1746537 - Deployment with config-download too slow when compared to non config-download deployment
• BZ - 1747140 - [osp-13] ssh private key appears in the log after ssh-keygen.
• BZ - 1747442 - Backport dumb-init into OSP13 containers
• BZ - 1749129 - Timeout during undercloud installation on _create_default_plan Mistral action
• BZ - 1749406 - FFWD ansible is slow due to gather facts
• BZ - 1750259 - [BACKPORT] backport of upstream patch to Replace coremask with cpu_list in vrouter dpdk schema
• BZ - 1750336 - [OSP13] missing share block on uplink interface after reboot (workaround)
• BZ - 1751338 - paunch apply fails if docker volume is used instead of filesystem folder
• BZ - 1752715 - [OSP13] Unnecessary libvirt is enabled on controller nodes
• BZ - 1753251 - [RHOSP 13] Redeployment of Overcloud Fails with "KeyError: 'passwords'" After Cancelling STACK_UPDATE Early
• BZ - 1756536 - Rebase puppet-barbican to 3dc06d3
• BZ - 1756537 - Rebase puppet-gnocchi to 1f27156
• BZ - 1756538 - Rebase puppet-keystone to 913c243
• BZ - 1757035 - Rebase puppet-zaqar to 7a8c812
• BZ - 1757284 - Rebase openstack-mistral to da0e263
• BZ - 1757295 - Rebase puppet-pacemaker to 447cef0ad8891e89495fef7a9be5e2152b07edfa
• BZ - 1757809 - Rebase puppet-neutron to fedd77e
• BZ - 1757810 - Rebase puppet-manila to 12.5.1
• BZ - 1758318 - Backport undercloud SELinux validation (prep)
• BZ - 1758352 - Rebase instack-undercloud to 8ca36be
• BZ - 1758364 - Rebase openstack-tripleo-image-elements to 8.0.3
• BZ - 1758365 - Rebase openstack-tripleo-puppet-elements to 2a58e3c
• BZ - 1758367 - Rebase openstack-tripleo-validations to 8.5.0
• BZ - 1758368 - Rebase os-net-config to 8.5.1
• BZ - 1758385 - Rebase puppet-vswitch to 0d113f3
• BZ - 1759357 - Rebase puppet-octavia to 3acf4ef
• BZ - 1759384 - Rebase python-os-brick to 2.3.8
• BZ - 1759689 - Rebase openstack-tripleo-common to 59bcf2b
• BZ - 1760048 - Rebase openstack-tripleo-heat-templates to c755742
• BZ - 1760548 - Rebase puppet-tripleo to e1126e2
• BZ - 1760549 - Rebase python-tripleoclient to 9.3.1
• BZ - 1760569 - Rebase puppet-nova to 12.5.0
• BZ - 1760972 - monitor_address_block empty in ceph-ansible group_vars and hieradata
• BZ - 1761699 - Rebase puppet-collectd to at least 10.1 to support connectivity, sysevent etc.
• BZ - 1762318 - A change in the tripleo-common zaqar message format is crashing tripleoclient
• BZ - 1764714 - HA services: pacemaker_restart_bundle.sh fail when TRIPLEO_MINOR_UPDATE is undefined
• BZ - 1766122 - Qdr InternalTLS support broken with puppet-tripleo-8.5.1-1.el7ost

CVEs

(none)

References

(none)