RHBA-2020:0643 - Bug Fix Advisory

Topic

Updated director installer packages that resolve various issues are now
available for Red Hat OpenStack Platform 15.0 (Stein) for RHEL 8.

Description

Red Hat OpenStack Platform provides the facilities for building, deploying
and monitoring a private or public infrastructure-as-a-service (IaaS) cloud
running on commonly available physical hardware.

For more information about the bug fixes and enhancements included with this update, see the "Technical Notes" section of the Release Notes linked in the References section.

Solution

Before applying this update, ensure all previously released errata relevant
to your system have been applied.

Red Hat OpenStack Platform 15 runs on Red Hat Enterprise Linux 8.1.

The Red Hat OpenStack Platform 15 Release Notes contain the following:

• An explanation of the way in which the provided components interact to

form a working cloud computing environment.

• Technology Previews, Recommended Practices, and Known Issues.
• The channels required for Red Hat OpenStack Platform 15, including which

channels need to be enabled and disabled.

The Release Notes are available at:
https://access.redhat.com/documentation/en/red-hat-openstack-platform/

This update is available through 'yum update' on systems registered through
Red Hat Subscription Manager. For more information about Red Hat
Subscription Manager, see:

https://access.redhat.com/documentation/en-US/Red_Hat_Subscription_Management/1/html/RHSM/index.html

Affected Products

• Red Hat OpenStack for IBM Power 15 ppc64le
• Red Hat OpenStack 15 x86_64
• Red Hat OpenStack Director Deployment Tools 15 x86_64
• Red Hat OpenStack Director Deployment Tools for IBM Power LE 15 ppc64le
• Red Hat Enterprise Linux for x86_64 8 x86_64

Fixes

• BZ - 1618895 - [RFE] Support upgrade of RHCS3.x to RHCS4.0 during upgrades from OSP14 to OSP15
• BZ - 1647478 - Stack update does not update fencing configuration
• BZ - 1664055 - Message collection size is too large for Zaqar
• BZ - 1665042 - [RFE][Deployment] secure data transport between QEMU servers for migration - [RHOS-15.0.z]
• BZ - 1667710 - OVN-DPDK- missing Tripleo heat templates for OVN-DPDK
• BZ - 1689867 - Undercloud: ironic_pxe_http containers healthcheck missing
• BZ - 1702814 - Can't use a hostname for undercloud_admin_host or undercloud_public_host
• BZ - 1712922 - QDR needs SSL to correctly communicate with SAF server side containers [openstack-15]
• BZ - 1713615 - OSP 14->15: Upgrade data transfer step: "/usr/bin/python: No such file or directory"
• BZ - 1716627 - Undercloud deployment using containers from authenticated remote registry fails with unable to retrieve auth token: invalid username/password
• BZ - 1718108 - os-net-config ignores routes for SR-IOV PF interfaces
• BZ - 1718696 - Check IPs specified in undercloud.conf aren't going to cause issues or conflict
• BZ - 1724685 - OSP 14->15: Keystone broken after controller-0 upgrade, returns 500s
• BZ - 1725896 - Barbican missing key-manager:service-admin role
• BZ - 1727855 - OSP15 | collectd creates and deletes /var/run/unixsock
• BZ - 1728172 - [OSP15] config download deployment failed using --start-at-task - "TASK [Calculate container_puppet_tasks for {{ansible_hostname}} step {{step}}]"
• BZ - 1729535 - Attempting to re-run a deployment command throws 'unclosed file <_io.TextIOWrapper' warnings
• BZ - 1729967 - Warnings after re-running overcloud deployment
• BZ - 1731080 - Tripleo deploys semi-functional overcloud with internal TLS if KernelDisableIPv6 is enabled
• BZ - 1731505 - OSP 14->15: compute node upgrade fails on editing libvirt-guests config
• BZ - 1734356 - overcloud upgrade prepare displays error: "Couldn't not import keys to one of"
• BZ - 1737150 - Add addtional checks to undercloud deploy for admin_vip and admin_host IP's
• BZ - 1737355 - no vmlinuz or initramfs on kernel update
• BZ - 1738350 - missing rsync package causes undercloud deployment to fail.
• BZ - 1740100 - OSP 14->15: after staged upgrade some pacemaker-managed services run just 1 instance
• BZ - 1743233 - cephfs_data_pool should be into ceph-ansible all vars not mds only
• BZ - 1743411 - puppet-etcd doesn't include EL8 in its list of supported OS versions
• BZ - 1745003 - [OSP-15] Configure log filter to capture interactions between libvirt and QEMU
• BZ - 1745008 - [OSP15] Libvirt allows weak encryption protocol (SSLv3 CBC)
• BZ - 1745482 - [OVN] Provide the option to configure probe interval for openflow connection
• BZ - 1745634 - openstack undercloud fails to deploy due to IPV6 address for DNS on an IPV4 network
• BZ - 1746273 - deployment fails when networks are disabled due to unassigned 'cloud_name_{{network.name_lower}}'
• BZ - 1746489 - EnableRhcs4Beta failure message needs revision
• BZ - 1748863 - always tag doesn't work right with nested "include_tasks"
• BZ - 1749443 - [OSP15] Overcloud deployment fails when pulling images from a remote registry(not the undercloud) because nova_wait_for_compute_service container on compute nodes exits with rc 1
• BZ - 1751809 - authenticated registries to pull ceph images may fail if overcloud pulls image directly from registry and doesn't use intermediate registry like undercloud
• BZ - 1753676 - Overcloud deploy does not handle login to container repository
• BZ - 1753876 - [OVN] Provide the option to configure probe interval for openflow connection
• BZ - 1755346 - Uploading images to undercloud warning
• BZ - 1755399 - Octavia heat deployment failing
• BZ - 1756342 - OSP14->15: Protect against running data transfer step multiple times
• BZ - 1759430 - Overcloud nodes bootup with non-consistent nic names which are dissimilar to introspection data names, which are consistent
• BZ - 1761369 - Minor update fails at step5 on controllers during gnocchi_db_sync
• BZ - 1761546 - [RHOSP 15] Redeployment of Overcloud Fails with "KeyError: 'passwords'" After Cancelling STACK_UPDATE Early
• BZ - 1761744 - Deploying OVN-DVR with a split Control Plane [3x PCMK controller nodes & 3x non PCMK controller nodes]
• BZ - 1764243 - [OSP15] With NovaResumeGuestsStateOnHostBoot: True a change to /etc/sysconfig/libvirt-guests triggers stop/start of instances
• BZ - 1764260 - undercloud.conf default values provide insufficient range for ctlplane-subnet
• BZ - 1765438 - rhel-registration by default includes rhel7 base repository
• BZ - 1765487 - [OSP15] pci/aliases not configured in nova.conf of nova_api container for pci_passthrough
• BZ - 1766500 - [OSP15] Include nova::availability_zone in nova::api and nova::conductor
• BZ - 1767071 - neutron_dhcp errors out with 'Error: /etc/ipa/ca.crt: duplicate mount destination'
• BZ - 1767516 - Overcloud deployment for spine/leaf stack fails setting firewall rules
• BZ - 1767840 - ceph RadosGW should use the role "member" instead of "Member"
• BZ - 1769206 - [RHEL 8.1] Podman dropped json-file log format in favor of k8s-file
• BZ - 1769209 - [RHEL 8.1] Podman dropped json-file log format in favor of k8s-file
• BZ - 1769210 - [RHEL 8.1] Podman dropped json-file log format in favor of k8s-file
• BZ - 1769291 - Mysql Upgrade tasks failing due to podman log-driver not found
• BZ - 1769308 - getcert with -F option returns before cacert file is created
• BZ - 1769338 - Failure deploying overcloud with internal TLS :: Error: /etc/ipa/ca.crt: duplicate mount destination
• BZ - 1769737 - openstack overcloud node import fails when undercloud.conf is a symlink
• BZ - 1769741 - Mistral on undercloud is not set to debug even when undercloud_debug = true is set
• BZ - 1769800 - OSP14->OSP15 Upgrade fils in ovn upgrade_tasks
• BZ - 1769837 - OSP14->OSP15 Upgrade fils in ovn upgrade_tasks: ovn_dbs_image undefined
• BZ - 1772859 - Create a groups.yaml file containing the group information used by the validations
• BZ - 1774076 - OSP15 update fails during overcloud update with "No such log driver json-file"
• BZ - 1775358 - Deployment with THT 10.6.2-0.20191106151728.42ba2c6 fails due to nova-placement configuration location
• BZ - 1777595 - Handle empty cert related hostvar info
• BZ - 1777971 - [OSP14->15] Upgrade fails during ovn pacemaker bundle configuration
• BZ - 1780171 - Rebase openstack-tripleo-puppet-elements to 78f7e7f
• BZ - 1780175 - Rebase openstack-tripleo-validations to 730ef1f
• BZ - 1780182 - Rebase puppet-neutron to 470cd27
• BZ - 1780188 - Rebase ansible-role-tripleo-modify-image to 66a92a4
• BZ - 1780189 - Rebase python-tripleo-common-tests-tempest to b692955
• BZ - 1780194 - Rebase ansible-role-chrony to 03e7fbe
• BZ - 1780196 - Rebase os-refresh-config to 2c77834
• BZ - 1780197 - Rebase puppet-openstacklib to cf84ba5
• BZ - 1780212 - Rebase ansible-role-redhat-subscription to 6c67a40
• BZ - 1780218 - Rebase ansible-role-container-registry to 7a2a664
• BZ - 1780219 - Rebase puppet-manila to 3c0d3b1
• BZ - 1780221 - Rebase puppet-gnocchi to 3ee8cb6
• BZ - 1780227 - Rebase puppet-octavia to 3de4adb
• BZ - 1780236 - Rebase puppet-ironic to 987a46a
• BZ - 1780238 - Rebase openstack-mistral to 4bf2e23
• BZ - 1780244 - Rebase puppet-ceph to 55a0f94
• BZ - 1780248 - Rebase openstack-tripleo-heat-templates-compat to 4b46adc
• BZ - 1782228 - Rebase of diskimage-builder requires package(s) not present in OSP15: ndisc6
• BZ - 1784036 - OSP15 - Config-download based deployment fails if a role name starts with a number
• BZ - 1784043 - Set SyslogIdentifier for container healthchecks
• BZ - 1784065 - Create a dedicated log file for the healtcheck runs
• BZ - 1784091 - [OSP15] deleted instances in multi cellv2 environment won't get archived/purged
• BZ - 1785223 - Update from z3 to z9 doesn't install tmpwatch package and it causes the failure of logrotate to container logs.
• BZ - 1789075 - "No lock information provided for value None" error on "openstack overcloud container image upload"
• BZ - 1794167 - buildah builds images that podman can't pull (unsupported docker v2s2 media type: "")
• BZ - 1794522 - Backport patch from Train for overcloud-base: docker => podman-docker
• BZ - 1803708 - Overcloud update converge fails when updating Octavia to OSP 15 z2 candidate
• BZ - 1803869 - Overcloud update converge fails when updating Octavia to OSP 15 z candidate

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_openstack_platform/16.0/html-single/release_notes/index